Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146581.roa
File: AS146581.roa (raw, json)
Hash identifier: zj3alT6Y5CoQ8zl7Wyzm6GoiuyRV8ko3MVd4wYqe9TI=
Subject key identifier: 62:87:97:E5:5E:A3:2A:16:49:73:28:55:F4:C1:3A:77:CD:AA:7C:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 471319D7E9FA81A4FFAC604F5848445FCF651993
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146581.roa
Signing time: Mon 25 May 2026 03:19:25 +0000
ROA not before: Mon 25 May 2026 03:14:25 +0000
ROA not after: Mon 24 May 2027 03:19:25 +0000
asID: 146581
IP address blocks: 240a:af5b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:13:19:d7:e9:fa:81:a4:ff:ac:60:4f:58:48:44:5f:cf:65:19:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:25 2026 GMT
Not After : May 24 03:19:25 2027 GMT
Subject: CN=628797E55EA32A1649732855F4C13A77CDAA7C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:a5:07:90:6c:ac:27:a7:a6:4d:72:44:5d:
27:fc:e4:11:27:79:56:cb:ca:52:2c:ca:46:43:da:
83:3c:d2:b0:0e:c2:47:8d:0b:e4:9f:cd:e2:e2:6a:
02:96:80:a0:49:34:77:71:f0:39:a8:76:38:fd:a4:
a5:75:a5:fc:16:a5:97:fa:d1:9a:5e:d5:a5:56:4e:
e6:eb:e9:c5:72:fd:f3:26:a9:8c:2c:e1:95:c2:71:
76:d4:cb:ec:0f:6b:2a:51:95:1f:8d:6a:d6:66:2a:
c9:c5:8e:5e:ae:14:e9:42:16:bb:e3:2c:6a:76:70:
95:06:24:cb:99:8e:96:11:0f:2f:36:8f:e3:85:9d:
4d:3f:46:26:6a:12:24:56:2a:65:b7:54:90:28:08:
dc:a4:ed:76:75:17:6e:fa:b9:93:a2:f7:ad:3b:90:
cf:e2:6b:f1:e3:c6:88:38:6d:82:2a:30:a1:f3:47:
e5:2d:06:31:0e:b3:74:96:b0:8f:e6:91:67:66:92:
f3:60:2a:2d:c9:73:03:93:25:83:23:3f:3e:25:8e:
01:fb:8d:c5:4b:b7:6c:4c:7b:f0:af:4a:bb:b3:cd:
26:40:a1:6b:aa:08:00:d1:d8:49:9a:2f:c1:38:5c:
88:27:50:d7:0c:ae:d1:47:c6:1b:47:6a:84:8d:a9:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:97:E5:5E:A3:2A:16:49:73:28:55:F4:C1:3A:77:CD:AA:7C:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af5b::/32
Signature Algorithm: sha256WithRSAEncryption
54:6a:46:98:dd:68:2a:76:ef:cd:70:1c:50:17:56:e7:9d:1e:
72:35:2d:ea:02:7a:b0:35:78:11:eb:cd:f5:d3:22:01:24:d7:
4b:f3:0e:ea:00:ce:2d:57:85:82:7c:5b:28:76:21:b6:c8:60:
03:73:e2:47:e3:f8:97:0b:cc:25:a8:df:88:14:10:5f:49:2d:
6a:d2:76:a7:54:4c:9c:b4:d6:7e:39:5b:37:ec:9d:d0:38:e0:
9b:c2:9e:c1:be:ff:1e:dd:70:d3:16:53:0f:ac:62:25:33:fb:
98:d8:2c:7a:0d:27:08:40:41:ce:63:65:c9:a8:e6:fe:3b:ad:
93:b2:f2:cf:5a:3d:f0:a4:4f:51:25:39:b5:20:f0:88:80:a6:
61:ab:54:dc:8a:ef:8e:97:a5:d2:52:bc:b3:37:ba:6c:79:45:
10:6f:4f:e3:f8:64:35:ee:47:f8:4a:bc:77:ce:64:4d:ef:c5:
96:3b:02:1f:b8:7c:79:12:b7:d4:ec:df:a4:6e:bb:fa:15:e1:
4e:c1:a3:96:62:23:b8:27:cc:65:98:d2:a8:9b:df:fd:34:5a:
e7:1f:ce:77:c0:e7:79:c1:2f:ee:4e:e7:58:b1:79:c2:38:86:
c5:27:18:09:f9:21:54:5f:ff:55:31:4a:66:55:44:a8:f5:7e:
92:72:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:40 2026 by rpki-client