Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146564.roa
File: AS146564.roa (raw, json)
Hash identifier: IQhGIS9k0nuCqVgicFCV/Nzy7fwIiOd5YybNvFSArV0=
Subject key identifier: B9:AC:2B:D6:E5:BC:20:AB:53:C8:C9:73:0A:E1:1B:8B:A8:DC:82:83
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 19F6FDC19A67F8AC108B1E496F3EF1C67C833424
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146564.roa
Signing time: Fri 22 May 2026 02:47:30 +0000
ROA not before: Fri 22 May 2026 02:42:30 +0000
ROA not after: Fri 21 May 2027 02:47:30 +0000
asID: 146564
IP address blocks: 240a:af4a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f6:fd:c1:9a:67:f8:ac:10:8b:1e:49:6f:3e:f1:c6:7c:83:34:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:30 2026 GMT
Not After : May 21 02:47:30 2027 GMT
Subject: CN=B9AC2BD6E5BC20AB53C8C9730AE11B8BA8DC8283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:65:45:ea:b2:3d:1c:16:cd:ed:8d:ae:66:
84:b2:c3:24:ff:8b:10:27:94:4f:7a:92:b8:8e:90:
60:0b:2b:11:47:cc:48:76:3e:39:bf:cc:94:29:3c:
12:bb:8c:f6:31:a6:21:c2:69:2a:e3:50:24:5f:b6:
08:d8:a0:f5:f9:ab:6b:2f:b2:96:1b:fb:9b:d0:f8:
0a:43:39:db:c8:2a:1c:c7:a6:6d:0f:3b:95:83:21:
18:28:d5:b7:56:df:f5:53:03:6c:47:fc:d0:7d:dd:
04:58:a3:59:fe:83:e6:c8:40:23:58:56:7b:1b:74:
f7:da:60:50:6d:5f:c7:a2:aa:71:b7:a9:a4:f5:f6:
ca:81:45:90:49:f9:65:1a:88:e9:f1:b7:01:d8:20:
a6:58:86:6e:da:9e:09:c3:7a:ed:4f:45:ae:1e:23:
20:57:b4:39:ac:10:b4:e7:0e:ca:5b:07:e7:0a:5c:
75:69:a5:a7:de:30:56:53:e9:1b:f3:ab:a1:50:e9:
3e:46:52:9b:18:78:5d:79:b9:76:ed:19:e2:1e:59:
ff:2e:0d:cd:56:11:6d:18:df:6e:de:bd:53:e7:ad:
46:6b:e4:3f:fe:cd:4a:7d:0a:81:80:3e:6c:33:be:
c0:de:51:61:66:5d:22:f0:a6:96:b0:f5:3f:23:12:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AC:2B:D6:E5:BC:20:AB:53:C8:C9:73:0A:E1:1B:8B:A8:DC:82:83
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146564.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af4a::/32
Signature Algorithm: sha256WithRSAEncryption
80:9a:3c:a4:60:f2:27:68:36:31:3a:80:87:3c:79:23:22:0c:
19:bf:97:8d:de:f3:bb:fe:6f:01:7e:7b:87:02:bd:3e:ba:aa:
ec:e3:4c:5e:bf:80:a2:c7:eb:ce:6b:67:7a:2d:d4:bb:1b:96:
42:0f:ce:78:98:5d:0c:28:91:2f:93:99:34:dd:ae:08:46:0e:
02:bd:53:63:19:0e:06:f0:63:38:e6:c1:7f:c7:84:e9:91:cc:
a8:7f:8e:cc:16:2b:a1:91:84:31:c2:fa:44:af:45:eb:80:c3:
6e:a4:de:a9:45:f1:87:d2:8b:cd:d5:86:f0:df:4c:24:ab:d1:
79:30:cd:2a:79:a9:03:be:0d:35:a2:3c:09:f1:16:76:cd:80:
ae:f0:80:21:b9:37:3e:48:ab:02:83:32:25:3c:f7:f3:03:b0:
71:1e:12:df:db:7f:7c:00:47:81:21:47:80:93:15:a9:e1:ee:
fe:3c:7d:bc:b3:4e:98:9f:e4:1d:5f:f4:aa:14:fd:4d:ad:9c:
ac:3c:4e:41:01:cf:17:ab:b9:4a:d0:6b:08:c9:d6:17:56:2a:
ca:59:a0:45:2d:1c:a5:93:3d:ad:98:6a:75:47:a6:c6:fa:5d:
4f:5e:3d:65:b8:10:3f:2f:1b:fb:69:b7:c4:60:8c:15:5c:7e:
0b:1c:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:00 2026 by rpki-client