Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146520.roa
File: AS146520.roa (raw, json)
Hash identifier: DFb34dHVO60GUBuD47gacCK98ysAXiyCnDg0d8JzOhg=
Subject key identifier: D5:F1:F1:9E:85:13:D0:11:74:51:03:36:F8:1F:7D:F7:4A:E2:25:E8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3968FD15D24EC5809D60025BA8F7E75A1988A324
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146520.roa
Signing time: Fri 22 May 2026 04:26:44 +0000
ROA not before: Fri 22 May 2026 04:21:44 +0000
ROA not after: Fri 21 May 2027 04:26:44 +0000
asID: 146520
IP address blocks: 240a:af1e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:68:fd:15:d2:4e:c5:80:9d:60:02:5b:a8:f7:e7:5a:19:88:a3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:44 2026 GMT
Not After : May 21 04:26:44 2027 GMT
Subject: CN=D5F1F19E8513D01174510336F81F7DF74AE225E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:16:dc:7b:02:3b:11:df:86:b8:16:f4:ad:
92:b5:c6:47:8d:45:23:27:98:e8:8a:6c:16:d4:f3:
79:98:d0:79:26:56:83:6e:2f:52:5d:17:b5:0e:c0:
63:98:84:d0:5d:4c:3b:1b:df:b1:4b:4a:fc:eb:76:
00:a4:10:3b:ca:2b:a9:2f:1e:d7:89:e4:0f:64:87:
2c:23:94:d8:7e:53:1a:be:38:88:26:fa:8b:89:0e:
21:be:3e:c0:11:a3:f6:f1:d0:6a:c4:cf:9c:43:01:
69:6e:25:04:11:4d:8a:19:5b:82:9f:39:9a:72:d9:
07:2f:a5:83:cd:56:56:f6:48:58:bb:46:b2:69:f5:
1f:57:69:e9:8a:d5:29:c5:56:57:0c:81:a2:f3:10:
17:77:29:53:6c:85:5f:d5:5a:3a:a7:4e:36:f5:b4:
9a:52:9a:5c:41:80:d4:37:52:cd:ba:bc:6d:9a:51:
f0:f6:75:13:b6:37:fd:da:42:c0:6e:15:b8:61:a4:
99:7f:13:d1:25:ed:4c:16:4e:bf:ec:00:71:34:45:
9a:03:6e:40:89:47:80:3e:4e:91:b6:16:d1:4c:49:
93:6c:ba:7d:5b:e7:e3:9d:f8:b9:fc:1b:b8:e1:5c:
b3:69:eb:69:45:92:9d:8d:7a:03:83:66:af:32:69:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:F1:9E:85:13:D0:11:74:51:03:36:F8:1F:7D:F7:4A:E2:25:E8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146520.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af1e::/32
Signature Algorithm: sha256WithRSAEncryption
76:c7:1d:88:b1:2a:29:d5:41:e6:e8:e1:4a:7c:e6:1a:07:93:
a4:4c:1b:2a:83:c6:e7:d8:00:a5:8c:b5:26:d2:7c:a0:9a:a7:
02:77:08:d0:3f:bb:b7:06:0c:4e:fd:20:40:2d:65:d2:46:f9:
77:77:82:db:a2:ff:fb:56:89:df:02:d2:63:b1:ec:27:4a:70:
2b:3e:66:d5:63:b7:dd:6b:cb:09:55:35:7d:92:e5:f1:15:68:
57:22:46:ea:34:bf:38:de:fa:c5:b1:28:13:b8:d8:86:81:72:
ae:ec:d8:f0:5e:62:ac:9e:f5:d9:7a:0b:bd:40:7c:63:f3:e0:
2c:85:85:a8:c8:61:08:b7:08:2b:5d:19:fb:55:d0:4d:cc:27:
2b:92:9f:5b:61:47:d2:c2:7a:af:de:42:7a:23:ff:7a:7e:09:
70:4d:a6:6d:53:80:f5:2f:0f:e4:04:64:16:06:a5:8d:1a:b0:
f1:e8:23:59:ab:c3:3a:2d:b3:fc:7b:35:bb:ef:ef:75:82:a8:
cb:cd:13:ec:4b:48:9d:08:b1:e6:15:69:d3:6c:8e:11:22:5d:
27:be:b7:a3:4c:5f:51:01:8b:be:b7:bf:4e:6a:b4:a3:e5:96:
fb:0e:71:bb:50:73:d4:30:21:42:47:66:59:ab:ec:a1:34:dd:
e1:09:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:09 2026 by rpki-client