Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146560.roa
File: AS146560.roa (raw, json)
Hash identifier: 149xpU2a95ruspEhErn3PaChFZMfsWcKv+ttlKcuZQA=
Subject key identifier: 4D:3D:66:FF:6B:21:65:98:48:E7:97:28:6C:98:89:4A:A1:A0:AD:99
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E31AF7175F51A9F270F48CF1E96719237AFC799
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146560.roa
Signing time: Fri 22 May 2026 04:26:46 +0000
ROA not before: Fri 22 May 2026 04:21:46 +0000
ROA not after: Fri 21 May 2027 04:26:46 +0000
asID: 146560
IP address blocks: 240a:af46::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:31:af:71:75:f5:1a:9f:27:0f:48:cf:1e:96:71:92:37:af:c7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:46 2026 GMT
Not After : May 21 04:26:46 2027 GMT
Subject: CN=4D3D66FF6B21659848E797286C98894AA1A0AD99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:a9:af:eb:de:1c:33:83:9b:95:ce:aa:05:
a0:f3:b6:2c:31:b1:03:d6:41:45:df:cc:0a:50:6d:
eb:8e:e2:00:df:82:ec:c6:d0:e4:80:1b:af:2f:78:
99:b5:87:c4:37:35:16:28:a1:2a:ed:c5:ad:2c:08:
b9:64:19:44:12:74:53:1d:b7:a5:6e:99:60:eb:f5:
7b:d8:1e:7c:8e:d3:da:94:d2:6a:84:7c:cf:4d:9d:
ad:3c:43:7c:79:18:6f:42:36:85:20:f2:c6:ca:4a:
74:4f:e9:67:f6:13:9a:54:46:93:fe:4a:f4:0c:af:
17:82:df:48:6b:f5:6a:27:dc:1b:c4:63:62:0f:fe:
0e:d7:0e:f5:30:a6:48:c3:23:02:ac:4f:62:cc:b4:
78:43:6b:f5:85:29:ca:7e:62:db:77:54:84:fb:74:
a0:01:79:c7:12:55:45:96:08:7f:8b:3d:bd:dc:57:
c2:15:b1:8a:2a:f8:10:c5:7e:f9:9a:04:11:3d:fb:
ea:cf:82:bb:25:0d:84:b0:95:aa:cb:be:dc:73:e3:
b2:c7:23:a1:3d:4b:2c:76:11:9d:f7:62:b3:bf:38:
b6:3b:04:a9:78:2b:0c:ff:76:b9:8b:19:4c:29:25:
f0:1c:22:eb:15:e6:d1:b1:be:a3:7c:0b:80:6e:00:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3D:66:FF:6B:21:65:98:48:E7:97:28:6C:98:89:4A:A1:A0:AD:99
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146560.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af46::/32
Signature Algorithm: sha256WithRSAEncryption
b7:94:0f:b4:38:a9:df:fe:1e:1d:7d:a1:c9:95:64:b6:50:bb:
a2:c9:ff:15:ec:e4:b6:3b:89:56:37:33:8b:d6:b7:af:f3:36:
11:38:5c:49:2e:7e:f3:ae:28:46:aa:46:66:98:7b:f9:3d:4d:
c4:ad:9a:10:da:f8:fe:60:9a:cd:a8:f7:35:37:5b:63:27:53:
97:44:67:0e:dd:1c:c1:85:18:55:76:04:a4:5b:23:8f:7a:84:
7b:16:02:3d:f7:6b:fd:11:7d:3f:ae:a6:50:93:ad:af:af:fa:
25:8d:a6:45:19:5f:a1:51:18:39:9d:a5:0c:74:26:7d:02:fe:
9c:dc:9d:0f:46:44:ff:e0:ae:f7:c3:4a:3f:0e:ad:4a:a4:a8:
89:02:6a:3f:d3:7e:2b:bb:07:15:75:e6:48:65:dd:32:e8:25:
28:57:f2:d5:91:04:f4:17:cd:8a:f1:a9:4f:85:6f:7d:bb:e6:
fb:00:b6:a8:f8:df:9e:1a:fb:f1:a2:2c:51:03:23:32:8b:3d:
ac:44:d4:00:0a:d3:68:0a:63:71:32:db:84:bd:3e:ae:2c:a7:
b0:a4:7f:bb:9d:77:9f:f3:66:90:46:f2:96:ed:b6:18:78:de:
fa:4f:f7:34:54:37:0a:6b:17:66:48:2a:c6:45:d2:4f:82:1b:
85:88:a9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:51 2026 by rpki-client