Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146515.roa
File: AS146515.roa (raw, json)
Hash identifier: zZx5+hCUGYCmrgSMXcz9fg/hquvrWl/lsvoMb4pTv5o=
Subject key identifier: F4:2B:4F:70:C8:E1:28:BB:87:5B:1A:AF:30:D9:77:D3:A3:DC:56:14
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 71B0844839FE78E45FC82B6B9EB515A9800EE9E3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146515.roa
Signing time: Fri 22 May 2026 01:50:33 +0000
ROA not before: Fri 22 May 2026 01:45:33 +0000
ROA not after: Fri 21 May 2027 01:50:33 +0000
asID: 146515
IP address blocks: 240a:af19::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b0:84:48:39:fe:78:e4:5f:c8:2b:6b:9e:b5:15:a9:80:0e:e9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:33 2026 GMT
Not After : May 21 01:50:33 2027 GMT
Subject: CN=F42B4F70C8E128BB875B1AAF30D977D3A3DC5614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:83:3e:6a:13:49:2b:9c:91:1f:2b:51:29:
8b:27:78:c2:65:08:33:97:09:86:b4:e2:99:72:66:
bc:0a:e1:4d:09:94:df:9e:bd:07:64:2b:d9:a2:92:
fa:39:5e:30:87:85:54:07:7f:46:f2:0d:34:4e:d4:
a7:6b:7e:9c:75:43:eb:cd:bd:66:08:e5:3e:bd:50:
dd:c2:58:b5:8e:f1:3d:37:fe:3f:ba:e5:a7:e3:20:
cc:91:58:9d:f4:b1:c0:c9:1d:f6:d5:20:c7:b4:2e:
9d:08:19:ce:aa:ba:41:dc:54:b3:7f:84:7b:bd:d8:
b2:a5:3b:ee:f1:4b:67:c2:b5:f3:de:0f:89:2f:f8:
96:48:6e:49:d3:dc:b0:6a:0a:66:6d:4a:fe:94:32:
df:d9:0a:72:ee:b7:e0:d1:14:7e:67:58:a2:da:87:
c5:5a:08:70:f6:14:66:66:6e:20:c7:3c:9e:b8:45:
ed:f3:8b:e4:3c:0e:27:6c:b3:5e:28:28:d8:b3:80:
94:98:6e:15:7b:dc:99:98:e0:ce:2e:5f:bc:c4:1a:
26:e1:b0:91:03:83:e7:77:cb:0c:b0:0c:96:ef:84:
bf:4d:d3:8e:10:12:30:66:62:15:72:41:7f:e6:98:
38:bc:81:12:ae:83:d6:59:b5:e8:f2:f7:1a:c7:c9:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2B:4F:70:C8:E1:28:BB:87:5B:1A:AF:30:D9:77:D3:A3:DC:56:14
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af19::/32
Signature Algorithm: sha256WithRSAEncryption
18:a5:b8:9b:94:5e:ca:16:95:53:61:16:8e:56:dd:e2:23:49:
01:c9:40:17:b7:01:e6:cc:9a:cc:7d:7a:8c:d4:9a:20:8c:ee:
92:34:90:27:45:d7:21:86:f0:95:60:20:89:1d:71:b1:c1:4d:
7a:98:b3:da:5f:7b:99:16:23:d2:93:42:7b:bb:31:4b:10:3b:
ac:c3:7b:9a:31:c2:7d:db:ce:fb:1d:52:22:a4:71:44:e9:4d:
e6:57:5f:25:32:47:80:e0:66:79:07:fc:5a:f5:e7:e0:67:37:
e7:52:e1:1d:a0:e0:88:8b:c4:47:ef:85:ec:dc:30:ee:d0:b6:
ca:41:e1:3d:f9:91:ec:c2:9f:ee:4a:95:c5:48:c6:63:e1:ce:
5a:1a:2c:97:7e:30:42:3d:05:fc:f9:b1:34:0b:ec:7b:6a:97:
06:db:17:7c:c9:c9:ef:b8:da:67:1a:55:44:8b:ad:d2:b5:5d:
cc:52:90:8a:1a:92:66:e3:77:3b:30:24:08:cb:c8:7f:4d:1c:
f8:4b:d0:09:66:75:41:18:c0:0e:f6:52:71:c9:be:57:3d:85:
4e:9d:af:89:2b:f1:b9:8b:3d:4e:fa:28:48:c5:17:03:59:c1:
ae:22:ae:97:3d:b0:e5:c4:4b:5f:35:76:ef:c7:ce:fe:17:f3:
37:ac:37:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:59 2026 by rpki-client