Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146566.roa
File: AS146566.roa (raw, json)
Hash identifier: XGXCWLO5JW9yJZ9KEKh15RI0TwAsVxAMGriw57vdPFU=
Subject key identifier: 0A:D1:EA:76:C9:32:4F:D9:01:0C:55:D1:1A:CC:AE:34:0C:67:3E:3B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B216C8412A3F37DD5EF0E04588A8370E938A9D5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146566.roa
Signing time: Fri 22 May 2026 01:50:38 +0000
ROA not before: Fri 22 May 2026 01:45:38 +0000
ROA not after: Fri 21 May 2027 01:50:38 +0000
asID: 146566
IP address blocks: 240a:af4c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:21:6c:84:12:a3:f3:7d:d5:ef:0e:04:58:8a:83:70:e9:38:a9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:38 2026 GMT
Not After : May 21 01:50:38 2027 GMT
Subject: CN=0AD1EA76C9324FD9010C55D11ACCAE340C673E3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:05:c3:04:63:4a:be:01:17:d7:cc:b8:dd:
b3:24:5a:70:84:e4:f1:a7:26:7a:ac:8b:f8:e3:8b:
5a:4f:2d:b3:d4:83:28:dd:f4:3d:b6:6f:b5:3b:81:
9e:c9:d5:86:71:0d:35:ac:45:dc:71:ce:88:91:bc:
57:d3:3d:7f:47:49:e1:0b:9e:d4:cf:c2:c4:a6:ec:
21:19:2d:e7:33:9c:a4:33:1f:65:2f:e4:78:31:49:
55:2e:50:1e:4e:04:42:4b:c5:29:d8:f9:ca:eb:ea:
38:0d:d3:60:49:97:00:1b:8b:f9:a1:24:d4:2e:35:
a0:0f:4c:44:33:a6:1b:ee:e6:83:a5:c3:ae:ab:eb:
50:cf:09:47:b5:59:98:a0:9e:64:cb:e7:d3:38:c5:
76:df:25:f0:0a:2a:91:0d:74:68:91:44:c4:5b:09:
d3:36:be:0b:46:c9:07:53:0e:5d:9d:b7:e2:3b:93:
5f:bf:c4:5c:18:93:63:86:ec:6d:2c:6c:81:94:14:
3b:a1:0a:e7:1e:97:df:43:a2:cd:17:01:ca:7c:68:
ba:49:77:07:20:de:19:89:56:c2:64:44:27:8d:4a:
9a:93:d5:2c:ca:27:f0:ee:da:ba:79:a6:dd:e2:1b:
4b:e0:96:61:27:f3:81:4d:ff:fe:6b:cd:53:2f:b9:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D1:EA:76:C9:32:4F:D9:01:0C:55:D1:1A:CC:AE:34:0C:67:3E:3B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af4c::/32
Signature Algorithm: sha256WithRSAEncryption
a2:4c:12:0d:3a:49:15:34:8d:d9:34:7d:b4:c6:40:7d:f4:a0:
7d:59:79:c1:7e:8d:92:bd:dd:51:73:4c:72:96:8f:d4:57:61:
b9:f2:55:53:33:3e:1d:00:6c:47:09:91:21:24:e5:3d:d6:5d:
1b:29:eb:98:3c:8c:97:2e:e6:05:80:4b:71:f2:23:4c:18:36:
ac:df:73:a9:cf:a0:08:df:fd:2b:3f:58:16:43:cf:26:95:7e:
82:ec:7f:45:80:f7:0b:56:a2:0e:df:00:9f:62:af:0e:a7:d7:
97:64:e5:1b:33:9b:83:30:06:29:dc:a0:60:59:85:db:c2:51:
d9:b7:35:1c:47:d6:43:05:27:c7:6a:62:35:c6:6a:bb:51:61:
9d:33:dc:6d:dd:d7:94:f2:21:c8:91:5a:d6:6d:7d:c6:6f:85:
39:f2:70:46:09:42:77:52:9a:80:21:01:e3:2f:27:4c:ee:f7:
e6:78:9d:bb:9a:29:d6:26:c9:1b:c9:e5:41:92:67:0c:6a:55:
c7:17:07:88:fa:18:8d:a4:41:5d:6a:e6:3d:53:e7:f4:2e:dc:
13:da:1a:29:a1:59:f7:45:c4:6e:f6:65:51:2d:23:3b:e4:f3:
35:74:df:55:3b:2a:8c:b5:46:b7:cd:f0:c6:d1:74:51:3f:9a:
6d:38:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:11 2026 by rpki-client