Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146549.roa
File: AS146549.roa (raw, json)
Hash identifier: b4BubPYaa+o+x2z8030eiXaPp9yhoCGypvUSQdu/RU0=
Subject key identifier: 71:94:54:34:18:1D:43:3F:91:8F:13:28:82:A8:36:58:23:4B:EE:0D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5CC7FB873C37D894B4CC13490FCE043D76CB2CB8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146549.roa
Signing time: Fri 22 May 2026 06:58:45 +0000
ROA not before: Fri 22 May 2026 06:53:45 +0000
ROA not after: Fri 21 May 2027 06:58:45 +0000
asID: 146549
IP address blocks: 240a:af3b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c7:fb:87:3c:37:d8:94:b4:cc:13:49:0f:ce:04:3d:76:cb:2c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:45 2026 GMT
Not After : May 21 06:58:45 2027 GMT
Subject: CN=71945434181D433F918F132882A83658234BEE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:cb:a3:22:04:3e:fe:68:be:5c:63:e7:eb:
0c:a3:5f:94:1e:02:b9:98:62:ea:55:ac:24:51:de:
22:2d:75:d8:69:83:e8:47:13:29:53:65:79:f8:e1:
a2:14:41:82:4b:88:a9:c7:cb:87:e0:c1:8e:d1:06:
36:14:ef:fc:5e:e0:4d:3b:b7:ea:04:6d:b1:29:2a:
44:00:e0:c4:1c:77:23:2f:dd:f4:c0:98:01:f6:22:
8b:56:d4:bb:72:99:12:9f:be:3c:dd:9f:06:35:87:
b3:de:bd:bb:81:ad:fd:46:5f:1d:1e:cf:17:6d:c7:
75:ec:db:db:23:0c:8c:b9:df:a1:58:9e:35:5e:87:
d3:16:b6:4a:ad:3c:4a:1e:91:db:b8:1e:97:6a:e5:
86:dc:f7:a9:01:1d:94:09:55:c5:b1:bf:60:7f:de:
b3:c2:f3:64:6b:c8:e1:bf:39:57:15:c9:78:4d:c8:
47:b6:cb:c8:1d:44:f3:59:9f:a6:d5:46:c5:0e:63:
80:48:37:1b:bc:61:ff:23:51:03:65:e1:67:9f:24:
7b:53:43:02:c2:29:32:50:ea:60:07:5f:86:2b:f4:
00:6a:93:2b:99:38:c9:f5:5e:ce:7e:64:df:93:e5:
05:78:26:30:84:08:3b:fe:02:ab:ee:b4:a6:23:e4:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:94:54:34:18:1D:43:3F:91:8F:13:28:82:A8:36:58:23:4B:EE:0D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146549.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af3b::/32
Signature Algorithm: sha256WithRSAEncryption
78:1a:e0:cd:0d:77:52:ca:8b:e5:d7:74:dd:b3:15:72:29:32:
8b:37:09:b8:07:e9:9d:7e:dd:77:36:b4:20:4c:26:1b:ff:e2:
00:bd:4e:af:cc:1e:76:a4:28:85:c6:4f:c8:55:94:d7:a5:9a:
bc:fc:76:21:b1:8b:9a:f1:cd:0f:d8:14:d6:b1:78:3a:a6:32:
1b:84:0b:0a:1a:52:77:6a:4e:75:99:e5:9e:dc:53:34:f0:2d:
bb:53:72:1d:b2:c6:0a:1b:be:5b:a3:7c:65:56:9e:84:11:60:
71:c2:8a:f5:41:14:21:a3:61:97:d8:e8:5f:51:14:05:bc:e4:
8f:b2:49:0a:86:48:5d:df:0d:c1:f6:6d:9c:a1:78:35:22:3a:
18:90:21:6b:2c:79:6f:0d:54:34:52:54:2a:04:fe:37:1d:f5:
2b:56:04:04:19:5e:98:af:67:77:42:49:70:86:af:27:9f:5b:
e5:75:b6:bd:ea:e0:55:68:47:9f:d4:77:cc:d6:64:33:fa:b8:
a6:16:ea:3c:eb:42:8b:c3:65:7d:59:94:d3:a4:05:76:b4:7b:
4b:f4:55:93:64:fd:0b:36:62:8f:32:7c:b0:ec:e0:a6:70:45:
1b:e2:07:8d:bf:61:9c:cd:35:fc:4d:b6:15:25:dc:e7:38:c1:
32:3a:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client