
Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146595.roa
File: AS146595.roa (raw, json)
Hash identifier: 7+5iy1Qyn1gK99JezLZDW47nvvHlaPXVE8U6PXnvvxY=
Subject key identifier: A8:8B:FE:C7:53:6F:E3:AC:74:08:6E:F4:8A:A1:2E:CA:9A:C1:10:4E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C51E0712917F3D0B25C2CFC55C94B47D5D97362
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146595.roa
Signing time: Mon 25 May 2026 01:51:02 +0000
ROA not before: Mon 25 May 2026 01:46:02 +0000
ROA not after: Mon 24 May 2027 01:51:02 +0000
asID: 146595
IP address blocks: 240a:af69::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:51:e0:71:29:17:f3:d0:b2:5c:2c:fc:55:c9:4b:47:d5:d9:73:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:02 2026 GMT
Not After : May 24 01:51:02 2027 GMT
Subject: CN=A88BFEC7536FE3AC74086EF48AA12ECA9AC1104E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:5d:3d:8b:88:9a:2a:31:72:68:e1:09:d3:
39:16:66:1c:06:62:e7:53:fe:5e:c9:43:4b:5e:29:
fa:83:34:16:6c:c0:6b:a2:e5:32:46:a6:2d:ba:d9:
63:60:17:b8:24:97:37:87:09:69:d7:95:af:b2:4d:
3c:03:a9:5e:8f:6b:a2:98:9c:78:48:a1:59:61:7f:
b9:38:1d:63:07:c1:44:c1:8e:27:8c:74:82:fe:53:
0e:cf:07:7a:2f:1d:66:b4:44:1c:06:fd:83:1e:0a:
50:95:e4:3a:26:25:1f:b0:a8:37:2e:fc:31:14:e3:
e6:9d:bc:d7:c4:b9:ce:34:50:51:d2:d8:5e:bc:8a:
58:a5:15:94:c3:a9:a6:cf:d7:9e:96:c0:95:ff:08:
2d:c1:00:53:8f:5a:d8:a7:31:78:c4:26:cc:4a:4d:
12:60:80:08:1c:d3:85:9a:18:20:eb:52:d1:e1:cc:
67:38:87:fa:52:d1:e1:98:45:81:00:1c:60:c0:13:
43:b5:35:80:5f:16:54:cb:64:e7:d7:78:19:03:d1:
c5:be:9b:e1:21:7c:5e:22:41:22:64:1b:fc:4b:5a:
f6:ce:31:41:45:e0:7b:0b:bd:fb:37:bd:8c:d6:5d:
44:25:bc:58:73:9a:40:c3:28:9d:1c:84:7f:7d:4f:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8B:FE:C7:53:6F:E3:AC:74:08:6E:F4:8A:A1:2E:CA:9A:C1:10:4E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146595.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af69::/32
Signature Algorithm: sha256WithRSAEncryption
6f:c0:4e:12:a9:f5:db:d5:00:c2:46:ca:4e:36:a9:c9:32:5e:
ad:73:63:97:21:ac:dd:a9:1a:cd:f0:8b:2c:b2:5d:d4:d8:2d:
eb:91:19:79:e9:ad:d6:98:24:fd:1e:1c:56:4e:e2:cc:18:95:
54:23:4a:b5:23:4a:50:db:13:ac:b0:c3:d6:58:ea:df:96:be:
9c:e7:66:36:ed:53:fe:2b:ea:bc:09:23:f3:c3:21:27:42:3c:
65:74:ae:9a:c8:75:67:5c:2a:f2:32:4d:a9:41:81:24:87:e0:
3e:44:38:b9:2a:2a:d6:8b:56:a4:15:d1:da:6d:76:0a:4d:8c:
d6:00:6c:02:b0:1e:7a:98:d8:48:b9:6e:ef:16:a8:24:29:9d:
1a:70:74:53:56:60:9b:75:e4:e5:3c:c7:c2:7b:9d:0c:d8:c2:
96:65:09:d1:47:f4:88:70:74:e7:97:e7:88:17:f8:59:dd:ed:
4a:4c:bb:fc:29:a0:76:e4:72:d4:10:8f:51:e9:e0:f5:f8:3f:
be:80:b5:ad:74:1b:f4:98:7e:51:58:2c:e1:27:11:3a:24:07:
84:e9:25:64:6a:e6:5f:b3:af:56:ee:c5:8b:e2:be:f1:20:2a:
36:b5:ac:82:10:14:f6:31:c1:23:e6:43:45:ad:bd:10:76:36:
c8:55:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:40 2026 by rpki-client