Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146583.roa
File: AS146583.roa (raw, json)
Hash identifier: 5oYZX8idkqwpCh+2i259JHdlChVxWc9wi/23wz+gZJk=
Subject key identifier: 24:CB:61:B9:3E:9A:A6:22:5B:96:79:00:CA:92:54:6B:81:87:57:A7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7A68D4F798661048159FB91BFB38A0DE3694F816
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146583.roa
Signing time: Mon 25 May 2026 03:19:29 +0000
ROA not before: Mon 25 May 2026 03:14:29 +0000
ROA not after: Mon 24 May 2027 03:19:29 +0000
asID: 146583
IP address blocks: 240a:af5d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:68:d4:f7:98:66:10:48:15:9f:b9:1b:fb:38:a0:de:36:94:f8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:29 2026 GMT
Not After : May 24 03:19:29 2027 GMT
Subject: CN=24CB61B93E9AA6225B967900CA92546B818757A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:d3:c0:98:e7:e7:8a:2a:f4:b8:b6:cb:d5:
3d:0e:62:34:ce:10:ab:9b:9c:69:63:b2:92:74:52:
5b:56:52:01:9b:4c:bb:3a:bc:b5:87:31:fa:97:9b:
bf:bf:6e:04:28:d7:12:4c:a3:18:0a:ba:56:9e:60:
59:45:36:14:b9:ed:7c:ca:16:7c:1a:48:95:64:ca:
f9:f5:22:66:e1:07:77:d7:25:88:09:bd:83:fd:da:
a6:6f:42:ca:30:dc:dd:a1:dd:d5:3d:5f:d3:29:8d:
b1:dc:86:12:1a:1d:fe:b3:a2:81:c7:04:d6:7c:bb:
4d:69:09:0f:06:80:98:49:fa:33:d3:58:9a:32:17:
d6:1f:98:b7:64:e1:35:8b:16:8f:72:31:ae:f3:7b:
be:b3:5d:f3:cc:61:c8:ce:41:e9:ba:02:50:24:c0:
47:69:13:5d:02:f9:4b:5e:b3:3f:ff:75:80:14:5c:
9e:c5:b3:cb:ab:05:03:5b:29:72:75:1a:97:c7:e2:
d5:ae:3a:c6:43:9d:36:ec:49:fb:f7:3e:31:ff:43:
e6:4f:d3:64:2d:c3:4e:31:6d:89:3d:6c:8f:11:f7:
f7:cf:58:fb:3f:31:34:ec:77:55:ac:34:98:a2:75:
3f:2d:c3:b6:4a:c8:23:e7:14:56:d4:f4:4f:46:60:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CB:61:B9:3E:9A:A6:22:5B:96:79:00:CA:92:54:6B:81:87:57:A7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146583.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af5d::/32
Signature Algorithm: sha256WithRSAEncryption
aa:75:ad:17:de:d4:d1:12:b8:75:b3:35:08:b3:52:1f:a1:29:
c2:14:a7:d4:8e:04:cd:69:77:73:c5:e8:82:2b:d7:1a:52:16:
5d:78:22:ee:91:69:eb:04:45:bd:e0:9a:8c:bb:97:e8:7a:2d:
70:d9:8d:7b:55:f8:bd:8c:e5:d2:ad:10:35:58:f3:7d:6c:02:
19:d5:be:4b:99:02:65:bf:e4:5a:18:cf:38:9a:a8:d8:f6:78:
03:e7:ff:37:15:23:ca:ec:2a:d0:8a:b9:b8:fa:12:44:29:9a:
17:e5:e4:49:80:4a:b6:cb:28:08:fb:cf:51:98:e2:ab:39:c6:
37:0d:5d:cd:f4:c8:0a:7e:ba:0e:06:85:33:57:78:43:ce:cd:
a2:72:9e:ba:6f:86:b4:2d:b9:6b:d6:f2:80:60:8e:d3:26:6c:
fc:48:73:ba:8b:68:03:3e:c0:27:fb:36:0a:05:0b:b0:e1:3d:
88:3d:af:3b:0c:83:83:20:ec:58:70:6c:6a:5d:b9:e8:1f:68:
6a:06:9b:c3:95:7d:eb:5d:a0:6e:7b:bc:58:11:4a:ee:05:a3:
8e:86:11:17:e6:92:be:7e:5a:3e:b0:08:19:8e:ed:4b:46:88:
91:b7:0b:98:93:42:24:3f:10:7f:0f:9f:26:10:d0:05:e1:e3:
d6:70:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client