Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146540.roa
File: AS146540.roa (raw, json)
Hash identifier: If1+GBFmNOLlDLu8CqPR4bTwaDrPstwxnihltiTmVwM=
Subject key identifier: 1D:89:7C:7B:1E:E6:07:16:FA:D6:1A:EE:29:B0:B8:4A:5D:96:07:18
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60DF3F0AE0A056B88590204BBEBEFF8E1BCF8E9B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146540.roa
Signing time: Fri 22 May 2026 07:32:17 +0000
ROA not before: Fri 22 May 2026 07:27:17 +0000
ROA not after: Fri 21 May 2027 07:32:17 +0000
asID: 146540
IP address blocks: 240a:af32::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:df:3f:0a:e0:a0:56:b8:85:90:20:4b:be:be:ff:8e:1b:cf:8e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:17 2026 GMT
Not After : May 21 07:32:17 2027 GMT
Subject: CN=1D897C7B1EE60716FAD61AEE29B0B84A5D960718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:87:48:71:cc:64:76:c6:a7:15:25:6f:fb:
39:53:d0:a1:aa:ba:b1:c2:f1:ab:66:1e:9c:3d:43:
32:76:1c:2c:f1:01:ac:5a:21:45:ca:8e:69:31:43:
95:06:fc:80:a0:6b:57:d6:4c:81:ec:de:3e:ce:54:
dc:76:eb:f5:6f:30:90:9a:71:40:9a:c8:49:95:63:
cf:e3:77:6b:43:ed:7a:b5:4c:78:78:5a:1a:a9:b6:
b9:15:57:25:18:05:69:d4:44:d4:02:26:67:a7:e6:
95:d3:88:02:31:7f:93:b8:14:2c:96:e6:bf:c5:e6:
97:3e:90:38:8c:10:3e:c0:d0:5b:63:85:91:b6:b6:
90:d2:ac:a5:2a:79:e5:69:02:15:76:c2:ab:0c:48:
d6:10:b9:0b:0c:3f:a6:a3:46:2d:93:5f:ab:5b:ae:
13:31:6e:eb:2d:2d:dc:8f:f3:ba:dd:67:ac:c0:01:
f6:b6:59:aa:b7:09:44:ac:94:c5:e1:ee:a9:c9:cd:
52:59:b4:cb:25:c1:a1:64:7b:d3:60:8b:b5:c2:cc:
c5:f1:ce:ed:00:5d:09:62:82:d7:b5:cb:27:b6:06:
e5:33:56:6a:77:81:09:88:26:b6:fe:ab:82:f1:b8:
56:74:c1:4f:cb:a9:1a:5d:c1:0f:e2:71:0c:3b:94:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:7C:7B:1E:E6:07:16:FA:D6:1A:EE:29:B0:B8:4A:5D:96:07:18
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146540.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af32::/32
Signature Algorithm: sha256WithRSAEncryption
79:4e:b6:b6:43:a4:6a:a3:7e:83:e6:bc:f7:ed:b7:c4:30:1f:
6d:5f:c0:fb:2e:a3:75:04:7a:fb:34:76:d0:fd:31:63:85:0d:
ea:03:c0:0f:05:1c:e5:86:7a:c4:48:7d:a1:f5:38:46:bb:51:
70:76:11:d0:c3:49:7c:66:07:76:d8:51:c7:f1:11:06:de:94:
de:21:9b:40:17:41:d1:01:26:aa:04:66:5a:66:06:f4:55:68:
c3:3e:47:aa:ca:d7:4b:6b:18:69:b9:58:ae:5f:95:ef:2b:ae:
c8:0f:1b:5c:ec:af:ea:80:d5:71:b4:57:94:20:7e:4d:d1:15:
59:e1:b0:dd:b1:ac:47:d7:bd:dd:e8:47:b8:0e:e7:cb:5e:d4:
58:e4:41:9c:2e:c0:e1:90:fb:26:97:e1:cc:b9:b7:7f:8f:09:
a4:4b:64:42:c5:47:cf:c9:15:ad:df:4b:df:77:03:29:f8:ec:
11:37:6f:34:b9:19:e1:d5:d6:6f:6a:93:11:cb:d6:2c:4d:dc:
fd:62:35:85:a2:ff:d5:fd:8f:dc:44:d4:30:3e:b1:d8:47:f1:
e9:b7:af:53:fc:e4:5b:f3:97:3d:e8:e8:d5:97:f9:ab:6d:bb:
7a:58:ae:6f:20:02:bf:e7:77:69:ef:76:d5:93:5f:6b:62:c1:
a1:37:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:52 2026 by rpki-client