Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146505.roa
File: AS146505.roa (raw, json)
Hash identifier: LdPPRpxrHHDozRFMMK8y113qr5rmAoaXQKjRViqksCs=
Subject key identifier: 19:89:01:BA:87:1C:2B:EC:A4:FD:8A:F7:89:2F:55:AB:83:9B:33:06
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3EC1FAA1BC67FAB58510193031A86F7822A3A642
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146505.roa
Signing time: Fri 22 May 2026 07:08:56 +0000
ROA not before: Fri 22 May 2026 07:03:56 +0000
ROA not after: Fri 21 May 2027 07:08:56 +0000
asID: 146505
IP address blocks: 240a:af0f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c1:fa:a1:bc:67:fa:b5:85:10:19:30:31:a8:6f:78:22:a3:a6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:56 2026 GMT
Not After : May 21 07:08:56 2027 GMT
Subject: CN=198901BA871C2BECA4FD8AF7892F55AB839B3306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:f9:d5:b0:4c:b7:83:1c:b0:7c:30:20:02:
44:15:2a:ea:15:3c:11:d0:5f:7e:bf:b3:d0:7c:ef:
15:d1:ed:13:1d:81:aa:5c:57:7f:9a:3c:b0:c4:1a:
b9:66:90:52:6f:89:b5:7f:57:04:b0:d5:f3:b4:f2:
d7:00:b1:f6:dd:da:6c:02:71:8c:ab:5b:1f:3f:17:
c0:60:ed:78:18:dc:e9:5f:04:88:be:4d:2a:df:51:
5f:d4:1d:90:d0:92:bf:21:67:aa:16:0c:77:3d:07:
ad:8c:93:3e:83:9f:ec:40:21:36:dc:ad:a9:14:ca:
69:97:23:08:80:7c:56:bd:52:bb:9f:ff:5a:56:51:
5d:7a:e4:62:25:d8:01:9f:cf:b7:4e:69:7a:dd:82:
f5:3f:89:a4:26:f2:aa:84:7d:8a:ca:c7:ca:c3:26:
a3:aa:97:f9:c3:37:03:26:0b:e7:26:91:af:e3:89:
b2:ec:f9:56:9f:91:e6:4c:c6:e5:17:2b:6f:2e:35:
1b:0a:76:4b:fc:db:d1:42:ad:74:ef:00:fd:b2:86:
ce:2e:36:2c:b2:1d:36:01:2f:87:a7:9d:32:10:d9:
d9:f3:78:10:5e:f0:5e:61:e0:08:ad:e0:4a:5c:a0:
09:54:26:47:c7:72:77:e3:b1:11:fd:b3:97:ca:9e:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:89:01:BA:87:1C:2B:EC:A4:FD:8A:F7:89:2F:55:AB:83:9B:33:06
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146505.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af0f::/32
Signature Algorithm: sha256WithRSAEncryption
41:12:44:5b:1d:dd:50:d3:d4:f6:fc:3f:3b:da:87:14:c3:18:
ab:f4:2a:04:4a:ee:69:6a:b9:5f:e9:79:0f:19:35:84:28:c2:
b5:3f:9f:bd:6e:a3:a7:6c:7d:94:a3:fb:46:a6:98:71:03:41:
84:62:77:67:23:fd:f1:12:f4:5b:ee:d0:36:73:01:ad:07:f4:
80:47:01:e0:51:05:12:75:9c:6b:c2:3c:da:df:fa:c8:76:72:
08:32:e8:52:d2:50:35:50:03:9d:52:3f:70:54:02:e1:ee:7c:
07:8f:51:d5:5b:34:c7:a6:ad:b2:f8:6b:40:f5:b2:e2:8b:27:
e4:49:80:33:d2:44:68:48:5d:86:55:da:5c:8d:14:9a:4f:ad:
68:70:05:1b:e9:0b:76:bc:4f:1e:16:91:23:fd:65:14:ec:42:
99:89:8a:65:1f:0a:d5:c5:b8:2d:d7:48:fa:96:92:90:85:47:
4c:78:21:88:56:fc:5b:70:93:24:94:b7:04:47:30:f3:71:47:
08:27:5a:a4:4b:4f:e7:8f:80:eb:26:25:70:73:fc:b9:b3:85:
2f:8a:23:53:aa:01:5b:0f:e9:94:f8:bb:c5:ec:7e:a7:46:b4:
d8:33:a8:f7:ab:24:d8:c2:23:54:50:e8:ce:c0:95:9f:ad:39:
87:f3:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:38 2026 by rpki-client