Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146561.roa
File: AS146561.roa (raw, json)
Hash identifier: CXj3pqw2J6UHCQ9LXApNJyyjuVKonRhMad8LRHENgec=
Subject key identifier: F9:C3:12:98:63:2C:A2:7E:FC:05:E5:E5:48:5D:93:59:6E:BE:79:34
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 420725826CA038956A30B293F0DDD790A08B68A4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146561.roa
Signing time: Fri 22 May 2026 04:08:33 +0000
ROA not before: Fri 22 May 2026 04:03:33 +0000
ROA not after: Fri 21 May 2027 04:08:33 +0000
asID: 146561
IP address blocks: 240a:af47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:07:25:82:6c:a0:38:95:6a:30:b2:93:f0:dd:d7:90:a0:8b:68:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:33 2026 GMT
Not After : May 21 04:08:33 2027 GMT
Subject: CN=F9C31298632CA27EFC05E5E5485D93596EBE7934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2b:b7:82:73:29:fd:8d:2c:4d:6f:3d:23:d9:
d9:b7:32:47:c1:9e:0a:88:bf:4a:8b:d2:a9:2b:a5:
8d:d2:6a:c7:09:ee:da:05:84:f0:e8:51:44:49:a5:
40:5a:5f:78:d5:a1:96:8d:97:60:1c:05:e7:cf:aa:
f6:24:a5:23:dc:05:ac:2c:52:9b:3a:d8:01:22:ee:
38:93:b4:20:55:c6:9d:8d:56:17:0b:49:1e:68:6b:
33:56:c3:1d:30:c9:8e:1d:87:9d:77:cb:59:bc:e5:
2b:60:25:e3:22:39:59:7f:fe:09:2f:31:c1:89:cd:
3e:b4:15:97:bb:1b:49:9c:fc:ba:69:05:27:ac:02:
3a:31:e8:3d:9c:64:60:0c:84:f1:10:9f:c0:2e:63:
69:70:8e:55:d0:71:f6:a8:5e:1f:f3:13:e7:d8:42:
28:a7:ec:ce:9f:f5:bb:29:06:91:92:30:b8:04:7e:
49:48:b2:dc:5c:c1:16:7d:09:84:fe:0a:65:b7:d0:
74:14:ea:f5:63:b9:b7:78:44:72:69:3d:e6:b2:d7:
a9:98:58:37:60:bb:ff:75:00:67:27:91:8b:c0:04:
42:f2:39:a2:b7:1c:84:45:e2:d1:5f:97:9c:44:24:
db:f0:94:bd:55:77:ca:04:08:73:18:0e:09:6a:86:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C3:12:98:63:2C:A2:7E:FC:05:E5:E5:48:5D:93:59:6E:BE:79:34
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146561.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af47::/32
Signature Algorithm: sha256WithRSAEncryption
42:8f:7c:db:72:f2:f5:ff:27:91:72:13:ae:a7:dc:d3:ed:10:
21:b0:51:6f:76:d2:74:0c:6a:21:ef:05:cf:5b:a8:f5:4c:82:
7e:50:5d:2e:e6:16:4c:f1:b4:fd:c7:e6:5f:bd:74:6b:dd:58:
62:86:f3:37:21:ac:ce:04:5b:68:f7:64:93:ea:2a:a0:bd:ee:
5f:3b:f5:d5:c7:34:e9:2e:e6:38:61:ba:54:4c:04:f6:1c:c8:
a7:5c:e9:3b:04:a0:85:b7:41:53:a8:c3:5b:0b:24:d4:aa:50:
ac:76:2a:16:35:20:6f:15:e9:bd:51:0c:55:19:81:e7:7c:ba:
43:21:f6:51:f1:44:96:ae:ef:5d:dd:64:b1:93:49:9e:cb:cc:
12:13:25:91:5e:a9:2c:5f:81:2a:f1:a9:5c:19:cc:e7:db:0c:
aa:1e:3f:76:ec:bd:1d:d5:81:a4:90:98:9b:9d:59:44:f1:a9:
c7:66:c4:5d:cb:0a:1d:92:21:21:b2:4c:ff:4b:87:9d:3c:ce:
8c:a2:4b:c2:b3:e4:63:ea:0e:7a:b6:bf:88:12:e9:38:7b:40:
be:3d:9a:b1:2f:31:34:6e:da:97:01:f6:be:0b:22:b1:13:3d:
81:41:9f:94:a2:25:c1:47:ec:71:63:d7:ea:e7:6d:8f:86:f3:
ce:f4:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:53 2026 by rpki-client