Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146544.roa
File: AS146544.roa (raw, json)
Hash identifier: rlKsWa/j6cPl+jmryVlR9zjwWW/PIpo7ccdp4vwi43o=
Subject key identifier: 2F:87:91:4A:28:15:A0:1F:7B:9A:11:23:64:AD:02:A2:00:99:7F:1D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 57303A9E6742EC3E780D3D5382A791118BE5FA93
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146544.roa
Signing time: Fri 22 May 2026 01:50:07 +0000
ROA not before: Fri 22 May 2026 01:45:07 +0000
ROA not after: Fri 21 May 2027 01:50:07 +0000
asID: 146544
IP address blocks: 240a:af36::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:30:3a:9e:67:42:ec:3e:78:0d:3d:53:82:a7:91:11:8b:e5:fa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:07 2026 GMT
Not After : May 21 01:50:07 2027 GMT
Subject: CN=2F87914A2815A01F7B9A112364AD02A200997F1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:2d:b6:70:8e:74:97:0d:27:5f:25:b2:92:
45:40:36:1c:1a:a6:09:a6:eb:99:07:6b:57:01:28:
43:c5:50:10:18:71:7d:06:36:71:06:76:31:06:65:
5e:f1:66:b9:9d:fa:1b:d4:3d:e9:c3:c3:15:c0:a2:
45:20:47:51:71:99:0e:55:fe:81:20:81:fc:05:b3:
b1:ac:77:cb:23:36:ed:64:77:68:d7:fb:8d:71:f1:
8c:e3:f2:4d:f0:09:f8:bd:bb:83:4e:74:66:ca:52:
1c:70:e9:d9:b9:98:f6:f0:aa:21:dd:01:f6:c9:8a:
64:2b:b7:67:1f:6d:99:92:b7:b0:3f:84:bd:38:30:
87:57:66:69:6e:0b:ca:57:82:3f:d5:33:d2:e6:9d:
d7:37:c0:d0:34:ab:e9:df:7d:99:d2:3f:d3:d8:e6:
18:14:fe:7b:fe:5d:ef:74:8b:67:59:34:c8:8c:cb:
74:a3:07:54:eb:13:93:64:60:43:c4:b1:a6:55:c7:
78:5f:3b:6f:4d:0a:c5:8a:6b:08:7c:ca:fc:15:22:
d1:b4:24:84:53:9c:de:4b:24:1e:79:35:e7:64:60:
73:01:80:78:fb:9f:ab:0e:29:58:07:36:d1:82:21:
88:0b:84:b9:5d:4b:c4:df:ec:db:ff:1c:ff:fe:b1:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:87:91:4A:28:15:A0:1F:7B:9A:11:23:64:AD:02:A2:00:99:7F:1D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146544.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af36::/32
Signature Algorithm: sha256WithRSAEncryption
15:ad:7a:39:e3:e6:68:59:9e:25:e0:cc:62:02:bc:98:ee:d9:
bb:6e:7d:5d:d1:3d:c4:b6:4e:c0:e0:75:24:c6:5f:5e:81:d4:
a3:00:76:fe:01:65:c1:c4:1d:2b:06:2c:b5:84:0c:95:6e:53:
45:a7:3f:2a:19:d9:61:9d:ca:1d:15:7b:be:a7:c3:cd:1b:55:
96:8e:0d:d7:de:df:89:55:02:be:61:7e:41:e6:46:cf:17:43:
af:16:05:a3:60:f3:54:74:66:95:4d:b2:96:e9:f7:9a:80:b5:
02:31:56:8b:e8:d1:ed:25:93:ca:64:4f:3f:b4:35:6b:10:53:
17:4f:9a:3e:d9:01:8d:33:89:ee:3f:75:1a:1a:06:09:82:37:
53:ab:f6:a1:34:9b:1c:81:60:8a:cc:20:b0:10:2a:d9:e3:c0:
47:02:a7:e2:0a:d9:50:be:85:42:ff:c8:71:62:1c:8f:56:e8:
aa:03:a6:fd:d8:d0:0b:55:68:96:b6:41:5b:4f:5b:c1:62:6f:
ef:a4:8e:ce:a1:c7:92:35:75:01:55:14:97:d7:90:98:25:19:
8d:54:e6:42:61:35:90:f9:91:4f:57:5c:85:e8:72:2f:c1:23:
ab:80:dd:08:64:6d:b9:5c:b5:93:fe:fe:7b:d5:56:12:71:51:
c4:72:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:42 2026 by rpki-client