Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146586.roa
File: AS146586.roa (raw, json)
Hash identifier: H0C2WqRrU1jLeKnChqWpfPh6MsLbzJ1ScPhn/psnPdk=
Subject key identifier: 3D:B0:F2:21:3C:A8:A8:4D:20:4E:98:91:D2:8D:6E:0E:1C:25:4A:14
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38CEC2C22AF2BDF29C978BB7D711E9E809D0C3A5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146586.roa
Signing time: Tue 26 May 2026 08:52:49 +0000
ROA not before: Tue 26 May 2026 08:47:49 +0000
ROA not after: Tue 25 May 2027 08:52:49 +0000
asID: 146586
IP address blocks: 240a:af60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ce:c2:c2:2a:f2:bd:f2:9c:97:8b:b7:d7:11:e9:e8:09:d0:c3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:49 2026 GMT
Not After : May 25 08:52:49 2027 GMT
Subject: CN=3DB0F2213CA8A84D204E9891D28D6E0E1C254A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:7f:ad:d9:4f:88:b5:08:87:92:a7:85:c6:
00:9e:a0:eb:c1:90:ff:a7:90:35:1f:00:b5:12:8f:
f0:26:c4:40:2b:93:2b:d9:56:9e:47:4b:94:dd:18:
4e:f0:99:9a:dc:64:89:fe:92:50:af:e6:a9:95:c4:
a8:9b:d7:c5:a5:29:cf:d8:71:23:8d:79:fa:fe:a8:
14:85:b6:78:0a:aa:8a:52:64:1d:61:69:e3:42:f2:
cd:e8:17:dc:dc:9a:3b:c0:37:91:8f:e9:04:dc:c4:
a0:1d:a4:34:5c:ed:31:12:b6:6e:03:36:36:f0:0a:
e9:44:6e:eb:0f:ef:e8:06:68:f7:d1:32:c1:02:87:
49:71:1f:11:d9:d6:78:c4:38:ca:5e:8b:ea:a3:35:
1f:09:27:36:9f:24:ea:87:0e:59:86:d9:bc:92:db:
b9:92:65:95:35:a5:a1:f7:c6:19:37:c1:b9:f5:68:
40:ca:4f:c4:63:12:a7:73:99:48:69:1c:dd:80:2e:
19:0e:16:2c:95:8d:db:f3:05:8c:17:6f:92:4a:02:
ed:44:53:48:7b:05:e8:37:e5:1f:86:a4:6d:78:c0:
d6:e1:08:ed:81:22:96:1f:d6:99:90:58:3a:b1:ed:
e4:dc:c4:39:bb:98:74:aa:37:02:92:a3:e6:c0:87:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B0:F2:21:3C:A8:A8:4D:20:4E:98:91:D2:8D:6E:0E:1C:25:4A:14
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146586.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af60::/32
Signature Algorithm: sha256WithRSAEncryption
0d:e9:02:20:ca:d8:2d:82:c7:39:37:0f:df:49:ef:60:d4:29:
5d:e9:0e:54:61:0c:82:ff:35:41:ce:ab:3c:5b:a0:ae:f8:11:
83:ce:c5:08:e5:bd:2d:24:83:6b:f0:fa:be:b8:c6:df:46:9e:
09:fe:f2:21:5b:4e:c2:0a:fa:0e:47:63:44:8e:a6:66:3b:a1:
d4:b4:1e:4f:b2:ee:fb:f3:e8:5a:97:07:6f:ff:7e:69:84:cb:
30:d8:be:eb:93:34:a2:02:27:01:d1:d5:03:5c:a3:4f:e1:7a:
80:bf:71:e9:30:2f:49:a0:3c:d3:db:a0:1b:93:50:79:8a:53:
b3:15:65:b0:35:bf:43:33:df:dc:bf:dd:ca:e9:2c:3c:a1:1c:
13:87:d3:53:f2:2a:d3:6c:8b:d6:09:d2:8f:4a:9a:0c:26:90:
2a:73:59:d5:47:9d:3d:83:7f:10:ef:7d:5b:42:d0:63:01:c5:
98:39:93:27:79:e1:2d:5f:4c:3c:3b:69:72:25:7a:f5:19:c2:
f7:88:f1:9d:81:38:a5:03:dc:79:5c:01:ca:e3:2b:4e:6e:e7:
61:63:31:02:09:d2:c6:9e:ff:b8:53:7c:17:0f:c9:c0:e4:94:
e1:9e:d7:18:e4:fd:95:95:49:79:1b:36:03:aa:d4:a8:93:5e:
0a:8a:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:25 2026 by rpki-client