Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146518.roa
File: AS146518.roa (raw, json)
Hash identifier: JYK+yJfExi8NpPGDzMHe5uxChz1f0ukWuNVYM3t3Smw=
Subject key identifier: 1F:28:66:AC:0B:10:B2:D7:5D:A4:96:39:08:37:73:4B:C5:40:5D:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2AB38D60B7E1EF2944264B7E9B6A1883C6137D33
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146518.roa
Signing time: Mon 25 May 2026 01:20:23 +0000
ROA not before: Mon 25 May 2026 01:15:23 +0000
ROA not after: Mon 24 May 2027 01:20:23 +0000
asID: 146518
IP address blocks: 240a:af1c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b3:8d:60:b7:e1:ef:29:44:26:4b:7e:9b:6a:18:83:c6:13:7d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:23 2026 GMT
Not After : May 24 01:20:23 2027 GMT
Subject: CN=1F2866AC0B10B2D75DA496390837734BC5405DE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:47:18:ae:74:f8:d9:81:ad:7b:77:4c:a3:
7e:45:1d:2d:e1:52:5f:14:6e:ce:9b:0b:53:16:7e:
f4:0b:4e:37:d3:b9:83:b7:c3:72:78:19:98:85:a5:
ba:44:cc:3f:dc:f5:c6:fb:60:b5:56:c5:3a:68:23:
aa:bd:04:72:4b:1a:f9:31:0a:d3:37:7f:a3:33:b3:
aa:1a:9c:3f:fb:ed:64:e4:99:89:2f:f8:86:bd:f0:
ed:f1:93:86:ec:70:d5:83:f7:32:70:ad:e0:4e:4c:
54:1f:de:4e:0e:6f:16:51:ff:86:03:f1:29:6e:0f:
a7:95:26:22:88:94:e4:3f:89:e4:e3:f8:6c:2c:b8:
5a:53:39:da:fa:e5:f7:25:0a:af:44:ee:51:b4:a1:
e8:1a:d3:cb:a9:d9:cd:01:01:f5:d0:7c:9a:22:6a:
6c:9a:3b:1c:f3:c1:b4:2a:4f:da:92:8e:8c:d4:27:
51:b3:b9:51:52:f9:7e:80:86:0d:e3:c9:0f:cb:4d:
41:09:fa:a8:c8:e1:2b:64:af:57:84:c5:db:0d:14:
6f:ba:dd:a6:c6:2d:67:86:41:78:fb:0c:66:87:22:
b5:02:99:ba:fa:df:2b:00:70:b6:d0:75:82:36:61:
b0:61:34:20:d4:c4:25:70:7e:bf:18:0e:d0:1a:e5:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:28:66:AC:0B:10:B2:D7:5D:A4:96:39:08:37:73:4B:C5:40:5D:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146518.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af1c::/32
Signature Algorithm: sha256WithRSAEncryption
ae:45:83:0a:d9:0d:4b:f6:71:ec:a1:41:d6:42:dc:a5:ff:e1:
30:d9:1a:44:ad:9b:25:ea:9d:02:e4:d2:b5:6b:c3:f8:3a:5b:
4d:7b:0b:27:f6:6e:b4:ea:f6:87:f6:85:f3:ae:f1:c8:95:c6:
0d:bf:af:e0:cf:44:55:c7:f4:c4:70:dc:9d:74:d1:6f:e2:be:
cf:02:f5:bc:ae:91:b7:5d:31:22:f6:02:53:4f:e0:1c:3e:cf:
a4:43:9a:e9:f6:ae:4a:f1:ba:d5:4d:34:0f:4a:b2:0f:5f:a5:
5b:41:46:fc:56:62:60:e0:c4:a5:26:ab:04:d2:b0:8b:62:40:
cd:7a:07:bf:02:47:e4:3a:f4:34:2a:78:d9:d8:6c:d2:d6:f3:
63:a4:d3:fd:ae:8e:78:a6:e4:2e:ef:83:8b:4f:67:5b:8b:08:
c4:ab:9b:ef:23:39:33:80:c0:69:6a:dd:ea:e7:f2:e9:2d:92:
fb:6a:69:e6:f1:72:3e:ed:1a:49:49:36:4a:24:ed:7e:e0:7f:
c0:f4:28:6a:57:78:dc:f2:79:e1:b6:e9:b7:3d:f1:3b:3f:99:
6f:2a:0d:0f:cc:f1:c3:54:25:93:d4:35:6e:b8:76:70:69:07:
83:a4:62:bd:1b:0e:98:6e:85:a6:32:b7:c8:11:73:0b:26:46:
bf:ac:c7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:49 2026 by rpki-client