Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146554.roa
File: AS146554.roa (raw, json)
Hash identifier: n7uUnAzkMzx1x3ce/5fc0yG7KaQXOpo2AfYGZSI5r3A=
Subject key identifier: F1:AF:F9:F7:ED:6F:75:AE:B8:F2:72:44:70:5D:4F:FA:5B:B4:85:3F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3CD00D352B10A8480F37CCAED8DC815BE88A428C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146554.roa
Signing time: Fri 22 May 2026 06:05:23 +0000
ROA not before: Fri 22 May 2026 06:00:23 +0000
ROA not after: Fri 21 May 2027 06:05:23 +0000
asID: 146554
IP address blocks: 240a:af40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d0:0d:35:2b:10:a8:48:0f:37:cc:ae:d8:dc:81:5b:e8:8a:42:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:23 2026 GMT
Not After : May 21 06:05:23 2027 GMT
Subject: CN=F1AFF9F7ED6F75AEB8F27244705D4FFA5BB4853F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:c3:03:eb:ed:9e:77:f4:0c:7d:88:c2:7a:
f0:c2:e6:29:12:b7:f6:1a:ad:96:14:ba:33:82:34:
e0:72:d2:1a:1f:06:de:7b:b3:46:20:14:6a:38:f2:
67:1f:ba:50:52:49:5a:d0:2a:1c:90:22:31:3c:b8:
0b:0b:8d:4f:ce:ba:d6:00:e8:bf:1b:6f:5f:b2:00:
39:4b:28:10:61:a7:4d:90:f1:60:2b:80:50:01:8c:
da:a7:f2:15:6a:ae:d7:6e:e0:f5:8b:77:60:d9:e1:
c8:2b:ab:ba:12:6b:c8:59:ab:d7:7d:58:ce:e8:ac:
c4:28:f7:b2:14:e3:0c:e8:39:f0:a1:70:d6:ac:a1:
0b:c9:c3:94:66:9e:a1:97:07:93:9e:8d:2b:f9:e9:
2a:df:8d:e8:72:5f:3a:3c:09:ca:68:e5:46:c0:4c:
c3:13:ef:a8:7c:20:c1:cc:bd:7d:2f:1f:d9:70:0b:
e1:91:01:53:4f:d9:c9:e6:32:89:72:f4:91:50:b4:
a4:38:c1:2d:25:18:7f:56:5f:ac:93:1e:d8:63:29:
87:fd:70:86:84:65:02:ce:12:00:56:ba:91:95:3b:
01:20:01:d2:7b:c1:b1:8e:5b:b2:86:92:42:1e:98:
ec:51:64:5b:6f:c2:c4:99:12:ca:fc:14:03:33:88:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AF:F9:F7:ED:6F:75:AE:B8:F2:72:44:70:5D:4F:FA:5B:B4:85:3F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146554.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af40::/32
Signature Algorithm: sha256WithRSAEncryption
52:c4:92:c8:8f:86:3b:4c:c0:b8:1d:0a:53:a7:cb:37:9a:cd:
6a:6a:b6:c9:86:ec:5c:67:f5:07:5b:f5:f9:f1:f0:34:69:ba:
05:59:86:cc:69:f3:73:6e:4e:fd:bf:28:67:d0:e2:d2:27:96:
0f:ab:f9:cf:86:28:b2:4f:01:d0:e6:8e:c5:61:be:d0:ed:ae:
d6:bc:c6:6b:6d:f7:38:79:2e:13:fb:ae:45:5c:60:43:e2:92:
1f:d9:ed:42:7b:7c:d8:c0:a2:33:90:69:ee:a3:78:83:02:45:
07:df:6f:52:6f:89:d0:1c:f9:7d:84:93:68:1b:c7:76:e1:4d:
08:7f:77:d8:10:56:0d:b2:02:70:6b:87:f7:2d:c9:d8:c8:63:
25:62:85:04:f9:36:29:44:c0:c6:a6:bf:6b:35:a7:9a:34:83:
a4:31:35:b5:a2:c6:17:ea:a3:7d:b5:a0:43:1a:4b:06:dc:90:
2b:9a:3d:25:52:8f:c8:25:42:3d:d3:cc:d6:96:1d:97:47:8b:
c7:ef:e4:a1:e1:9e:92:47:fe:83:9b:cc:fd:5a:df:1a:f3:13:
73:32:35:23:8d:e6:50:53:f5:ae:39:3a:10:d8:a1:c8:de:5b:
28:17:cd:15:82:56:ee:6c:42:02:12:6b:30:03:08:9e:c2:8d:
d1:62:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:52 2026 by rpki-client