Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146514.roa
File: AS146514.roa (raw, json)
Hash identifier: p3Eqp/toinKmh3mgCo7OsKubN8fBqRArRhORpquTjjg=
Subject key identifier: 80:C0:43:BC:8A:1C:88:E7:6A:1D:85:A5:4F:BA:4E:C9:0E:AF:14:F6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F1C79CE629E673B7A2D4811683FB95C2D095849
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146514.roa
Signing time: Tue 26 May 2026 03:17:15 +0000
ROA not before: Tue 26 May 2026 03:12:15 +0000
ROA not after: Tue 25 May 2027 03:17:15 +0000
asID: 146514
IP address blocks: 240a:af18::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:1c:79:ce:62:9e:67:3b:7a:2d:48:11:68:3f:b9:5c:2d:09:58:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:15 2026 GMT
Not After : May 25 03:17:15 2027 GMT
Subject: CN=80C043BC8A1C88E76A1D85A54FBA4EC90EAF14F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:c4:54:1e:2d:d1:9a:e3:9b:2a:c4:c2:57:
c3:d1:40:e7:0d:0e:b4:05:10:25:05:6e:af:2d:fc:
17:81:a3:2b:36:bd:61:45:94:31:b6:d4:d3:60:1a:
41:b7:82:00:34:59:dd:5c:2e:4a:6c:05:af:ce:83:
ff:8f:c5:1b:91:d7:b2:67:4b:21:33:3e:db:40:b9:
d3:2f:86:1b:58:7e:ea:ee:76:b4:f9:0a:08:04:69:
bf:aa:0d:bb:c1:d0:a9:74:d3:ac:0b:5b:06:e2:f0:
5a:83:07:ab:63:b5:72:1f:b8:55:88:48:77:95:4d:
8d:25:e0:14:86:17:4b:6c:d0:c6:30:1b:9d:e7:7c:
53:77:c6:68:2b:68:e0:87:b3:2b:8c:91:5f:0c:64:
cb:7d:b6:e6:2f:7a:a8:f8:17:c8:1c:4c:c8:bc:40:
52:bd:d7:47:22:06:6b:8c:8d:75:9a:84:e3:af:ff:
99:3c:19:f4:b5:77:e6:91:eb:19:ed:cc:27:9e:53:
8a:af:be:c9:ff:25:50:5f:57:56:f6:ac:f2:a3:f0:
c8:70:90:8f:7f:0d:b9:e2:c5:27:21:b7:14:9c:a0:
ca:b7:11:d4:87:40:b3:2f:7f:34:5f:2f:cc:f6:70:
c7:74:13:96:45:d2:a7:d9:a8:04:aa:69:a6:4a:31:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C0:43:BC:8A:1C:88:E7:6A:1D:85:A5:4F:BA:4E:C9:0E:AF:14:F6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146514.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af18::/32
Signature Algorithm: sha256WithRSAEncryption
10:ac:55:90:36:6e:6d:d5:da:37:c0:c1:c8:97:ef:46:b7:fb:
8b:d9:06:1d:6a:c7:f6:97:70:ea:c6:ad:97:7c:5c:0b:dd:b3:
0b:82:e8:0b:28:d7:de:71:1f:f7:80:34:20:e4:45:4f:35:57:
c1:73:b4:d4:cb:72:e9:23:cd:a1:83:9b:2c:c1:69:27:9d:c0:
97:ed:f9:e3:83:dc:3e:84:cf:a8:e2:8f:af:b1:0a:b3:5c:16:
88:c4:17:fb:f6:f9:d7:ae:27:12:84:01:42:ec:16:88:ea:03:
98:ee:c0:a8:a0:52:7a:a8:b2:02:45:09:05:55:be:41:ff:6f:
0e:71:3c:05:15:ef:f0:23:7d:3c:5b:f0:32:26:59:9c:81:79:
e4:55:0f:df:69:2c:45:a5:8d:05:3f:ed:3c:7b:49:4d:4c:a6:
94:c6:c0:c3:c8:5b:7e:93:42:21:5d:68:39:86:3d:75:1c:94:
8d:55:17:7a:aa:59:9f:0f:1e:c2:aa:2d:4f:20:b0:81:2d:bf:
ab:54:26:7c:12:ef:ba:38:93:b2:ac:4e:ed:6e:cb:2d:6d:db:
7c:2d:7d:c9:07:a4:97:1e:4e:f3:c7:6a:f1:8b:27:cb:6e:46:
04:87:c0:87:6f:45:c5:11:f6:5b:e5:53:77:df:6c:57:e7:b8:
68:44:7d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client