Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146587.roa
File: AS146587.roa (raw, json)
Hash identifier: 9QE9p+ee38A71cTYF/06d4dWuz++ITgMnEymMmey7z4=
Subject key identifier: 48:D2:9A:33:29:DF:5E:69:1F:32:29:1E:E8:E4:2B:93:54:A4:A5:C2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6E206FCAC0489B9C41671C0E67460F359D26BEAD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146587.roa
Signing time: Fri 22 May 2026 07:32:34 +0000
ROA not before: Fri 22 May 2026 07:27:34 +0000
ROA not after: Fri 21 May 2027 07:32:34 +0000
asID: 146587
IP address blocks: 240a:af61::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:20:6f:ca:c0:48:9b:9c:41:67:1c:0e:67:46:0f:35:9d:26:be:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:34 2026 GMT
Not After : May 21 07:32:34 2027 GMT
Subject: CN=48D29A3329DF5E691F32291EE8E42B9354A4A5C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:e6:19:91:9f:98:d0:0b:2a:b5:df:7f:7f:
f7:95:f2:8a:d3:ac:32:69:86:d8:8c:34:d5:61:c1:
5f:32:8a:1a:ff:1e:56:ce:bf:8b:b2:84:00:97:0e:
a7:e0:d2:e4:72:be:39:d9:89:4f:67:97:17:13:5a:
f8:51:c8:89:6f:68:b0:6b:ec:31:d1:3c:62:31:6d:
7c:77:48:6a:eb:c9:8e:85:89:f3:06:22:f6:f9:e7:
2a:a8:b6:b5:08:8a:69:ba:91:fc:92:5a:bb:fe:46:
69:42:1f:d9:21:67:5f:9b:0b:5c:db:7a:89:bd:66:
4c:4b:fd:9f:30:28:91:5e:b8:68:20:e6:f9:b4:9d:
6d:b0:48:af:41:3f:ac:aa:17:6a:06:b5:c3:94:0e:
06:82:8f:4b:99:c9:14:38:74:7d:7a:5d:12:99:a6:
1c:94:5d:6a:17:b1:4c:44:5b:b6:9d:a1:28:49:fb:
f1:1f:20:2d:f3:cc:cf:da:d7:81:d0:c0:36:26:4f:
cb:a9:6d:8e:b1:0e:f8:f1:18:d4:63:c5:36:b4:85:
3c:18:ec:33:fb:f5:8c:95:1e:cb:23:13:b4:da:53:
92:3f:2b:6a:ae:8f:eb:60:b4:26:03:1e:ff:3a:43:
b4:58:9d:03:da:dc:90:4a:2f:b9:5d:c9:c9:79:2d:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D2:9A:33:29:DF:5E:69:1F:32:29:1E:E8:E4:2B:93:54:A4:A5:C2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146587.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af61::/32
Signature Algorithm: sha256WithRSAEncryption
72:f1:e7:5c:a5:09:05:97:1e:aa:44:cf:c0:a7:00:95:7c:3c:
f7:86:fa:12:03:0c:19:aa:cc:64:51:a6:05:d9:8b:a9:47:28:
df:d4:33:3f:0e:24:24:3d:83:80:c7:f8:7f:fb:57:ee:cd:13:
e7:69:ce:64:06:c0:d1:a7:28:a7:dc:30:44:bf:1e:85:5a:8f:
95:01:c4:eb:42:32:46:ad:0b:e4:71:95:b9:d6:a5:d0:ad:1d:
1a:d8:15:8c:bc:8a:c1:20:c0:e2:c1:ec:a9:3c:a5:aa:90:11:
ca:27:13:e0:5f:cc:4a:d5:b4:3e:f8:10:63:4b:a9:f4:89:ab:
0d:a3:ce:f9:89:de:9d:c9:9f:a9:9b:3d:46:ee:e9:ba:c6:01:
c6:d1:8e:f9:ab:98:e9:21:cc:06:55:4e:ab:a5:84:ac:36:8b:
68:74:1a:4f:1b:34:42:b5:05:65:7e:de:16:7c:10:fe:a8:79:
9a:e0:21:3d:2f:b2:2a:8e:d6:9a:9f:cb:99:50:e9:c7:56:eb:
59:11:65:f5:ce:d3:e6:c9:65:5c:ef:54:49:7e:cf:04:18:31:
33:a0:ea:b4:df:75:ee:14:38:e7:02:e9:10:77:a5:f2:6f:29:
8e:1b:6d:3e:34:65:84:72:45:94:9f:b4:0e:6a:5e:df:56:2b:
b2:d5:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client