Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146542.roa
File: AS146542.roa (raw, json)
Hash identifier: bKdgTT+ky7KamzM836+eAzS6oR/cXLEV5jtSdeEZ4rM=
Subject key identifier: 17:8D:6B:36:28:2F:9B:8D:28:D3:1E:D7:60:3F:38:8E:9F:2D:10:5A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6F8B078FDE4D015DAA87A352372B9FA2B2CBF1D5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146542.roa
Signing time: Fri 22 May 2026 06:46:22 +0000
ROA not before: Fri 22 May 2026 06:41:22 +0000
ROA not after: Fri 21 May 2027 06:46:22 +0000
asID: 146542
IP address blocks: 240a:af34::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:8b:07:8f:de:4d:01:5d:aa:87:a3:52:37:2b:9f:a2:b2:cb:f1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:22 2026 GMT
Not After : May 21 06:46:22 2027 GMT
Subject: CN=178D6B36282F9B8D28D31ED7603F388E9F2D105A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:df:7b:73:39:fb:58:6a:00:bf:b9:3d:b2:7c:
28:25:e3:40:f0:64:8e:ef:d7:35:2f:34:b3:96:f3:
c0:ea:82:0c:7b:00:e7:78:6c:6f:33:69:ea:5f:dd:
92:cd:35:4b:92:69:77:17:db:07:61:bf:25:4e:d5:
11:61:3c:7a:33:6a:a1:35:7c:6b:e5:fc:84:e2:71:
6f:79:d3:12:00:81:fd:29:0e:5d:c5:64:70:b0:c5:
26:9c:1b:f9:4c:f2:85:09:99:44:a5:bc:01:6f:22:
19:e1:5f:b4:b5:c8:55:d0:7b:0a:20:99:bd:df:2b:
39:e2:05:a0:4d:40:4b:7c:ec:fd:4f:6a:ae:e6:33:
89:c8:18:fd:1c:9e:0a:3c:d9:c2:37:e7:d1:23:c2:
95:d8:8a:55:70:0e:46:4a:8c:ad:45:ce:56:09:c6:
28:2d:3d:ba:07:ce:f5:f9:db:ca:95:e5:b7:83:18:
d3:3a:13:6f:82:86:da:5a:d5:9b:0b:3b:80:09:f4:
aa:a5:51:a5:9c:81:e5:3b:4f:a1:f0:22:7a:72:49:
0c:be:d2:d7:52:ff:84:65:f5:6e:97:56:b3:59:60:
4c:30:c0:fe:bf:78:e5:28:be:74:bc:78:4a:1b:58:
ec:ef:41:4c:7c:31:15:8a:87:d1:84:db:c6:4b:64:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:6B:36:28:2F:9B:8D:28:D3:1E:D7:60:3F:38:8E:9F:2D:10:5A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af34::/32
Signature Algorithm: sha256WithRSAEncryption
86:da:78:c6:b7:0b:3c:4f:1d:f5:10:0d:98:a2:c3:71:02:f0:
37:fd:20:53:a2:50:0f:4d:60:1e:96:a9:72:51:a2:35:0f:f2:
88:c9:69:69:cc:de:86:47:e9:13:8d:d0:e1:05:3f:44:bc:1a:
5a:2f:26:35:80:6a:38:72:7d:1e:ac:45:b5:d4:e9:de:57:80:
8f:bb:90:09:65:d9:47:aa:fc:9b:b8:4d:6d:cf:44:d6:c2:95:
4f:5a:9d:20:a7:fa:38:f0:9a:22:02:ab:ee:2c:11:62:f3:0e:
01:58:5f:42:45:ff:7f:15:7a:7b:ab:de:0a:da:e5:16:d2:1a:
b1:77:a0:45:cf:81:e2:56:d4:ce:1f:ef:d7:37:60:4d:e6:6c:
b9:d3:05:08:36:d7:c9:c2:e4:14:33:49:1e:03:7a:e7:78:dd:
7c:ab:88:5e:53:cb:65:3f:8a:3d:c0:0e:2d:53:9e:39:0e:81:
1e:d3:fc:52:9b:f9:2c:69:c0:d2:e9:c1:1a:fb:21:0d:71:b0:
47:a6:4e:f2:8a:6f:32:55:b9:0c:9b:af:29:a6:bf:86:c5:8c:
bf:10:e1:4b:79:03:a8:97:14:58:90:b0:98:ad:17:bc:e7:94:
4f:13:07:bb:ed:82:cc:0b:54:19:aa:21:db:f0:90:98:c6:fe:
b8:23:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:11 2026 by rpki-client