Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146533.roa
File: AS146533.roa (raw, json)
Hash identifier: 2AyamlH+IS3Ea37C0+vo0m4MPEapCbHga9jkrpHuF1E=
Subject key identifier: 99:27:0C:37:69:B8:48:ED:32:2D:08:B4:41:06:0C:64:5C:72:C8:64
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16F1ECCD771CB23ACA4360F28CD1414844E888DC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146533.roa
Signing time: Tue 26 May 2026 01:13:32 +0000
ROA not before: Tue 26 May 2026 01:08:32 +0000
ROA not after: Tue 25 May 2027 01:13:32 +0000
asID: 146533
IP address blocks: 240a:af2b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f1:ec:cd:77:1c:b2:3a:ca:43:60:f2:8c:d1:41:48:44:e8:88:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:32 2026 GMT
Not After : May 25 01:13:32 2027 GMT
Subject: CN=99270C3769B848ED322D08B441060C645C72C864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:42:a6:53:27:18:86:8f:8c:2d:ca:3a:60:
88:36:69:88:cc:e5:b2:c8:21:10:d2:9c:ed:d2:71:
cc:8c:47:11:56:0c:2b:de:15:6e:6f:c9:4c:85:ea:
12:78:cc:4b:b5:bb:1c:1f:4f:6b:43:2a:13:85:05:
d6:11:d6:1c:22:96:60:ec:28:e3:61:e2:3b:e5:a1:
2a:65:a2:2e:29:2b:7c:6c:07:a9:b9:0a:bd:87:e7:
b5:62:e4:ce:83:71:27:fe:97:18:b0:58:3d:e3:13:
3b:32:87:86:b7:d4:a7:94:0e:9c:30:75:97:20:81:
6a:bb:4c:94:6f:b8:cc:d5:be:7d:11:7c:ea:29:97:
9e:12:f5:1c:39:a2:2e:33:2c:4a:d4:45:52:9a:3f:
fd:b7:6c:51:4a:ae:d4:6e:f8:57:9d:44:75:23:a8:
ee:bd:3a:4d:f3:08:7b:ee:42:54:05:4f:7c:fc:de:
42:46:ac:fe:83:1b:53:a3:fe:d0:95:80:9a:a6:02:
f4:0b:e3:18:59:43:24:20:d3:14:7d:ab:8f:19:ac:
32:60:c8:3b:a4:c6:ec:27:0b:8d:f4:a9:31:6f:3e:
b4:66:50:5f:33:8b:95:1b:a0:93:c9:4d:e2:37:bd:
04:ed:10:1b:a4:73:1e:f5:70:28:79:93:1e:1d:10:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:27:0C:37:69:B8:48:ED:32:2D:08:B4:41:06:0C:64:5C:72:C8:64
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af2b::/32
Signature Algorithm: sha256WithRSAEncryption
52:fc:77:25:42:30:36:a9:97:ba:c8:50:87:0e:73:66:16:ca:
4c:0a:38:e1:ef:79:0c:7a:f4:ba:27:74:ee:fe:ab:a1:8c:fd:
b4:c4:b6:b3:45:5c:a2:4d:1c:3c:c6:03:30:9c:18:e3:bf:b6:
24:cd:bd:b5:da:71:44:f9:6f:90:64:c8:fa:a6:e8:76:6d:c8:
75:b6:13:7a:78:28:82:78:b6:c0:7e:53:01:8e:04:5e:da:b9:
bd:ec:db:8c:33:9c:2c:4e:d6:f0:0e:ce:63:85:54:a6:28:3f:
56:e2:c4:2c:28:a2:c6:f6:42:06:36:06:a4:c7:cd:1c:21:ce:
88:51:b3:04:54:e7:9d:5e:b7:d0:ab:4a:e7:e8:4a:fa:c7:cf:
52:3e:fe:e8:8c:05:cf:a2:d9:fb:e5:7f:62:14:98:f2:b1:aa:
15:b5:52:45:38:b0:ab:c9:74:3e:3c:1c:17:71:1f:7f:b9:b2:
a1:8f:0f:1e:db:76:b6:10:f1:7a:ae:a9:27:ff:af:f0:16:4b:
e5:ff:d3:30:dc:4d:f3:42:41:89:c1:63:c7:8b:c6:46:85:35:
e6:33:46:25:2a:0e:d2:5a:a9:3c:56:f9:06:21:81:20:c9:aa:
b0:b0:52:31:e0:72:48:6a:ca:fb:51:de:6a:01:c3:f0:fd:98:
f2:8d:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:25 2026 by rpki-client