Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146576.roa
File: AS146576.roa (raw, json)
Hash identifier: EKJsE3pzjckPIsOL5zwdCLfkG8vip99GvSRIjDp5Wy0=
Subject key identifier: 0D:EC:5B:8A:B6:95:35:AC:A1:EC:B2:BB:06:E0:9D:2B:59:6E:3D:DD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 12454DB670CB1407F8C4AA0DEE2E5053520CF93A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146576.roa
Signing time: Mon 25 May 2026 02:22:44 +0000
ROA not before: Mon 25 May 2026 02:17:44 +0000
ROA not after: Mon 24 May 2027 02:22:44 +0000
asID: 146576
IP address blocks: 240a:af56::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:45:4d:b6:70:cb:14:07:f8:c4:aa:0d:ee:2e:50:53:52:0c:f9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:44 2026 GMT
Not After : May 24 02:22:44 2027 GMT
Subject: CN=0DEC5B8AB69535ACA1ECB2BB06E09D2B596E3DDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:10:37:98:7e:18:92:05:5a:09:b1:a7:7a:
43:ed:ae:4e:f5:aa:99:42:0f:27:72:99:57:36:10:
19:42:87:6d:d0:4e:33:70:de:e1:12:e3:2b:51:ea:
0a:f4:d1:ed:c8:2b:82:59:62:f9:6e:32:68:e7:ad:
f5:ec:3d:88:2c:7d:cd:d4:d1:70:84:13:5e:0e:54:
c3:f7:44:b0:00:90:4b:06:f3:40:89:06:67:e8:6d:
37:1d:6c:6d:d3:cc:f7:e1:e9:35:07:69:64:66:69:
9b:e0:0b:52:fd:18:29:59:04:36:71:f3:1c:ac:ce:
90:cd:13:22:17:8f:9f:15:cb:03:b4:3e:0e:37:9b:
8c:c0:cb:25:46:61:dc:11:21:a5:1c:06:60:ac:df:
8d:d9:94:4a:f4:59:d4:7b:61:9d:05:86:b8:cf:56:
f4:86:66:a8:de:e9:58:dd:4b:f3:6f:c0:72:26:01:
e7:c0:82:51:17:5c:95:23:9b:b8:b8:c7:3f:fa:50:
45:f7:2d:f9:1e:62:b8:43:d9:d2:cb:d0:41:e9:0c:
14:bb:46:90:47:ab:77:02:55:76:1b:ec:94:3f:f0:
13:2e:bb:31:fb:21:bb:cb:f0:a2:cc:f2:55:f0:b3:
20:f2:be:93:c2:8d:c2:1e:a9:d7:2e:2e:1d:1c:b7:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EC:5B:8A:B6:95:35:AC:A1:EC:B2:BB:06:E0:9D:2B:59:6E:3D:DD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af56::/32
Signature Algorithm: sha256WithRSAEncryption
71:08:24:4d:56:68:6b:18:5a:25:42:cc:b5:51:8b:29:8c:23:
74:2c:4f:65:b3:0c:e4:cf:c8:e4:20:93:08:06:e3:55:72:85:
d5:5a:ed:3d:f5:d7:91:13:bc:5b:c3:e1:b8:ca:e2:15:64:5c:
4e:ee:36:a9:de:c2:40:8c:58:38:33:39:63:41:e5:41:75:85:
d0:e6:14:7c:ae:b5:4e:36:88:ca:48:81:ca:28:ce:85:ac:fe:
be:83:2f:f6:d0:93:da:0a:a0:2b:68:75:29:f0:a7:78:c2:6f:
26:d7:fd:8f:2c:4a:28:37:2b:c9:b2:36:4b:12:40:9f:3f:e7:
33:ef:f5:e7:4a:99:02:05:8c:a5:ef:2f:b3:55:db:a8:95:f0:
ed:c3:37:58:81:92:fb:46:1f:7a:d1:93:b5:f4:ac:c6:c5:a3:
8e:3c:2d:8b:5f:1b:33:12:b4:5a:98:62:71:5d:28:69:ee:01:
76:fd:2a:39:7a:84:b0:ce:80:67:b7:31:20:d0:39:29:b0:1a:
8e:db:8a:8b:88:6e:41:d9:68:29:72:84:47:2c:88:23:dc:2f:
3c:7b:5e:ba:fb:a9:0e:1c:22:b2:2a:d5:2a:2b:49:a1:c2:57:
9e:8c:6a:5a:43:52:8d:fa:04:4b:a7:b6:e3:b7:fa:bc:62:e9:
79:0f:0a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:39 2026 by rpki-client