Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146573.roa
File: AS146573.roa (raw, json)
Hash identifier: 7fRZlHgcSl0DG9ColSyyNUL0jVHUN8P8j9+5ijFdN4M=
Subject key identifier: C2:B4:D0:42:48:B4:D9:B4:DD:E2:ED:82:C3:FD:F1:6A:FF:FA:1D:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42D715C30F2E86CF1B38084732E144D5F271AFE8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146573.roa
Signing time: Tue 26 May 2026 01:13:03 +0000
ROA not before: Tue 26 May 2026 01:08:03 +0000
ROA not after: Tue 25 May 2027 01:13:03 +0000
asID: 146573
IP address blocks: 240a:af53::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d7:15:c3:0f:2e:86:cf:1b:38:08:47:32:e1:44:d5:f2:71:af:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:03 2026 GMT
Not After : May 25 01:13:03 2027 GMT
Subject: CN=C2B4D04248B4D9B4DDE2ED82C3FDF16AFFFA1D23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:92:bf:32:04:60:6f:e4:40:19:f2:23:a1:
9f:e0:e1:86:34:f3:37:38:cb:b8:5a:03:20:68:6b:
0c:1b:b0:be:50:fd:61:10:66:f5:02:87:86:73:98:
32:1b:d4:84:d8:59:ea:bd:4c:22:af:23:11:9e:f6:
66:f3:24:5c:ed:f9:72:c3:68:4d:41:a4:12:f1:8e:
c2:5b:b3:c5:89:1e:b9:30:98:09:9c:43:c9:6b:3a:
46:3e:14:7e:98:e7:28:e3:a0:0e:11:7f:d3:d5:68:
e9:fc:bd:17:42:a8:c6:09:c1:ad:0b:da:71:cd:33:
a1:5a:f0:f4:f1:3c:d4:15:7a:6b:fc:c2:54:d6:9a:
0f:49:d9:87:e1:75:6a:f0:1e:10:0b:48:39:91:ab:
e5:d5:11:e2:98:e7:6c:01:12:f4:17:07:68:69:62:
e3:de:51:11:0f:a9:ff:4e:03:e7:d6:51:6c:cb:f4:
78:03:6b:dc:ee:6b:55:bb:39:4b:05:e9:ee:30:6d:
93:aa:8c:d4:48:b1:35:d6:ad:85:97:2a:ab:b3:1f:
7f:9c:f5:01:b3:8e:fb:94:b5:1c:ff:09:de:26:fe:
58:61:b2:ce:14:48:9d:22:57:84:fd:30:40:a5:35:
ba:60:5e:87:28:c6:70:b0:2f:89:62:07:a5:4c:e8:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:D0:42:48:B4:D9:B4:DD:E2:ED:82:C3:FD:F1:6A:FF:FA:1D:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146573.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af53::/32
Signature Algorithm: sha256WithRSAEncryption
a6:87:9a:6c:bb:5a:d1:00:f6:c4:7d:a9:42:83:30:c2:66:97:
0b:eb:54:5d:e9:97:2c:7e:9a:6b:d1:01:99:c8:b1:5f:0a:83:
74:7e:b2:4d:f4:c8:58:36:d9:14:c7:2e:9a:2a:05:54:f6:57:
77:75:5f:40:a0:03:e2:f0:ac:59:21:95:0a:37:3a:e3:73:14:
4c:38:8e:58:fd:48:a5:67:70:19:03:20:b2:72:42:aa:b0:18:
78:9e:da:20:6c:f8:b5:3a:ed:e1:5f:48:94:53:a4:97:6b:be:
e2:48:16:04:81:03:38:ff:31:9c:f4:49:d5:c7:e6:7d:48:84:
15:4d:e3:81:a6:fd:8d:41:c6:5c:62:ea:0c:bf:8f:e9:95:59:
37:d0:5e:5a:44:f4:f4:78:df:72:09:4d:82:a6:61:ab:ef:fd:
60:02:42:ff:2d:a8:71:5f:80:f7:f7:01:da:14:4b:2f:51:2d:
8c:38:94:0d:fc:f0:54:49:ae:cf:8d:7f:57:71:a8:1b:60:a8:
7d:92:ab:79:f9:28:2b:c8:75:7a:ab:80:e3:ca:a1:e9:34:fb:
aa:28:e9:fe:99:2e:d9:e1:ea:2b:79:26:2b:eb:c5:aa:13:2d:
17:e5:ef:ed:71:06:d9:a7:01:a0:61:0c:a2:57:c1:2f:86:6f:
49:9c:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:58 2026 by rpki-client