Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146526.roa
File: AS146526.roa (raw, json)
Hash identifier: 1MJ0qkzxLEUMPiwt3yjceTU4MVBoXPhvEG1nzD0B9z0=
Subject key identifier: 55:83:11:A9:CE:0F:91:8C:4A:D4:40:26:9A:58:30:1B:8E:25:DD:72
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 48558B8B4A4013FAFC65808971166444043830F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146526.roa
Signing time: Fri 22 May 2026 04:07:53 +0000
ROA not before: Fri 22 May 2026 04:02:53 +0000
ROA not after: Fri 21 May 2027 04:07:53 +0000
asID: 146526
IP address blocks: 240a:af24::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:55:8b:8b:4a:40:13:fa:fc:65:80:89:71:16:64:44:04:38:30:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:53 2026 GMT
Not After : May 21 04:07:53 2027 GMT
Subject: CN=558311A9CE0F918C4AD440269A58301B8E25DD72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:20:3f:2d:7c:a5:b1:f1:82:5c:5d:e0:4e:
7a:be:b8:99:3b:56:fd:3b:8c:b0:be:a6:2d:f7:58:
7f:6f:2b:04:c9:d1:24:bd:02:5c:a5:f3:db:b4:ae:
39:9a:b7:d2:8b:97:22:0c:ac:a9:3b:03:9a:d3:95:
fa:ea:b7:0b:a5:34:ae:8b:e8:67:89:78:e4:5e:66:
90:9b:03:7b:fe:0b:30:d5:33:a0:55:7a:03:ca:50:
92:52:7f:fd:7c:2a:f5:72:69:32:4e:94:89:d8:48:
26:9e:d6:d7:a7:f1:16:44:1e:35:2a:a4:59:c6:fb:
b1:93:32:dc:09:18:3c:2c:9c:06:3f:0b:0a:a4:67:
49:b0:ae:6e:ad:e6:c8:f3:e6:4b:cc:61:32:80:90:
54:d1:63:a0:e2:19:5e:6a:43:0b:d7:e4:ef:74:95:
cb:5a:5b:ef:74:76:72:a8:51:3c:67:0c:00:cb:ce:
95:c3:92:f9:16:be:96:29:cb:0d:05:75:f5:c9:55:
9e:68:ad:96:e3:d1:81:4d:d1:73:f3:5a:23:ed:c4:
69:04:a7:7b:08:d4:c0:40:40:25:03:9a:ac:19:31:
fe:ed:c9:94:5c:b8:79:c0:f7:5a:54:49:26:90:23:
57:d6:45:22:e6:a1:5d:16:9d:1b:20:3a:9a:ef:a0:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:83:11:A9:CE:0F:91:8C:4A:D4:40:26:9A:58:30:1B:8E:25:DD:72
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af24::/32
Signature Algorithm: sha256WithRSAEncryption
46:78:2e:24:22:70:69:5c:be:82:3b:7e:c4:48:6d:ec:8d:0e:
36:a4:04:fa:fe:5a:91:a9:e9:b9:29:6b:7c:17:92:a9:4d:30:
9a:d1:a2:40:88:fd:f3:02:e0:5f:3b:a2:40:ea:38:3e:b1:fc:
42:2a:ca:bd:2e:1c:da:46:a7:53:d1:5d:3d:28:4b:3a:c8:3c:
5b:1f:5c:1d:6d:26:06:fc:81:f8:61:b0:ff:74:34:21:08:a8:
5b:80:7a:ed:13:3d:81:73:d6:82:53:b6:2a:6a:2d:45:39:f4:
4a:06:f9:64:5b:2d:54:c6:5b:df:6d:2f:5f:08:4e:ac:b7:21:
d8:27:0e:04:dd:ce:ef:a5:94:5c:63:8c:e4:41:37:bf:3e:d0:
cc:ea:30:49:44:8a:bb:6a:ae:9b:00:b4:7c:28:57:8d:53:17:
35:07:cd:87:8c:f7:7d:fa:90:53:78:5f:f7:c1:77:4d:68:bd:
0a:d2:ea:e2:4d:7e:88:7a:08:02:ad:d9:6a:79:6b:b7:8e:7b:
14:11:1a:50:32:32:07:f4:ed:d5:71:80:d6:18:d2:89:6d:0f:
0a:3c:fe:64:a4:c3:a7:a4:04:03:cc:8b:64:da:d9:67:af:83:
e6:de:35:66:e5:50:87:d5:5e:b3:b0:b0:c4:3b:0c:05:12:23:
8c:9f:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:37 2026 by rpki-client