Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146563.roa
File: AS146563.roa (raw, json)
Hash identifier: 3ddOo2Nm+jLpK+A8A9Mp7Nx+QfyVIRBWsXOGnSE+wLk=
Subject key identifier: 06:C0:0B:2A:7A:33:14:11:8D:CC:D8:9E:4E:E5:EE:C4:B2:67:70:2F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5FF2D277F155BB3416F98CB72FE48B1AD335C671
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146563.roa
Signing time: Mon 25 May 2026 02:22:19 +0000
ROA not before: Mon 25 May 2026 02:17:19 +0000
ROA not after: Mon 24 May 2027 02:22:19 +0000
asID: 146563
IP address blocks: 240a:af49::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f2:d2:77:f1:55:bb:34:16:f9:8c:b7:2f:e4:8b:1a:d3:35:c6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:19 2026 GMT
Not After : May 24 02:22:19 2027 GMT
Subject: CN=06C00B2A7A3314118DCCD89E4EE5EEC4B267702F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:73:a9:f4:58:99:4b:e2:4d:f0:1a:f1:90:
57:fb:08:45:b0:c4:ca:e6:7f:e1:5d:be:ae:62:38:
95:2c:2e:be:e0:83:0a:fa:5e:be:60:49:e6:61:00:
4e:82:5d:86:41:01:16:94:2e:19:af:6d:f8:09:fc:
ce:60:5d:19:31:10:17:d2:fd:06:bf:ce:73:1b:fb:
b6:e6:69:97:f2:d7:96:98:06:a1:a6:03:9b:70:8c:
a5:0a:07:bb:70:c0:9e:8d:67:e9:14:ca:b0:67:5b:
4e:26:1d:d0:3c:f8:cb:6a:d5:45:d8:42:c5:25:7e:
75:0f:ac:86:43:8c:ee:0c:6f:b4:c0:23:6d:dc:11:
ef:83:53:43:0f:18:19:ce:a5:df:0b:f4:31:39:af:
cb:08:68:d9:fd:4e:d0:f3:35:b7:fc:c7:fa:af:ee:
ca:ff:f9:09:4a:13:fd:f4:2d:07:08:46:fd:81:a9:
d8:d2:7c:83:d4:e8:0c:5a:da:c2:d0:db:7a:c1:e4:
7c:ef:d0:a4:73:30:e9:91:bb:08:29:7f:01:13:60:
3a:b2:c8:e2:5b:ac:b4:9d:65:92:8e:ac:95:34:58:
c2:e3:9c:c9:1d:b6:24:2b:7d:92:86:ac:87:60:02:
8d:eb:d4:98:28:a0:ab:a5:d1:ab:52:3c:a6:c3:2a:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C0:0B:2A:7A:33:14:11:8D:CC:D8:9E:4E:E5:EE:C4:B2:67:70:2F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146563.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af49::/32
Signature Algorithm: sha256WithRSAEncryption
9b:57:19:37:11:30:41:21:29:06:15:66:b1:a1:7f:3f:3a:98:
75:e6:3f:f2:f3:97:ac:59:31:7c:df:29:9a:5c:85:3e:a9:c3:
c0:e3:7c:b9:01:78:54:0d:c8:e0:9e:7c:9f:48:f5:89:c6:ec:
45:c8:93:a4:4f:ae:99:03:ee:ed:65:03:92:db:f9:27:de:7e:
69:67:17:da:ac:fb:13:b4:2d:8e:a7:15:e1:f0:89:be:5a:93:
44:22:60:39:c3:9a:f1:6f:d8:51:01:a7:60:ee:ac:d2:a3:81:
c6:8c:1a:0d:aa:64:71:de:07:8f:45:58:db:46:00:f1:a0:c4:
ce:07:2d:38:09:16:80:13:14:6a:ab:a5:88:b0:f8:8e:14:59:
34:aa:f6:a4:05:d1:17:0d:10:a9:de:87:87:8d:9d:84:bf:d6:
16:a5:66:a7:eb:b1:e6:f2:73:6a:01:4c:2e:86:10:aa:b5:23:
d3:cb:0d:e0:2a:61:38:8d:8a:b4:21:10:9a:0b:2e:a5:2f:8a:
0f:9b:23:df:be:44:05:db:82:2b:72:ad:05:13:7c:e9:3c:b6:
87:ac:cb:eb:5d:d3:bd:5d:94:fa:b7:ab:d7:d5:af:8c:6b:d1:
67:c0:39:83:4f:91:c4:ef:c5:59:98:52:41:a4:42:3d:63:9f:
c0:d6:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:45 2026 by rpki-client