Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146597.roa
File: AS146597.roa (raw, json)
Hash identifier: b1Smce3g2BjwUiocZSbAOJcn7HxNVr8fANPskDpkMQg=
Subject key identifier: 30:83:54:82:FB:D6:C8:27:3E:D5:37:3E:8F:51:58:97:D8:7F:8B:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D5D75F95ECDBD203A32ADD8CA17AC4FF4726AD0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146597.roa
Signing time: Tue 26 May 2026 01:13:03 +0000
ROA not before: Tue 26 May 2026 01:08:03 +0000
ROA not after: Tue 25 May 2027 01:13:03 +0000
asID: 146597
IP address blocks: 240a:af6b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5d:75:f9:5e:cd:bd:20:3a:32:ad:d8:ca:17:ac:4f:f4:72:6a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:03 2026 GMT
Not After : May 25 01:13:03 2027 GMT
Subject: CN=30835482FBD6C8273ED5373E8F515897D87F8BE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:c5:73:ff:d1:dd:9f:ab:34:61:ec:6b:f7:
a9:a2:53:3e:77:72:1b:55:96:db:35:d3:e1:95:24:
e8:4d:ce:dd:bf:39:5b:fa:44:67:b6:60:a0:45:e5:
b0:7e:0c:57:55:bc:7a:27:98:4c:76:15:e4:35:7f:
84:55:6a:ff:59:0d:b7:5f:71:a9:fe:fa:3a:bf:e3:
24:1e:5d:d3:5e:f7:05:7d:86:5b:9c:fd:4a:c3:bc:
20:87:42:ea:e2:d9:f7:b8:7d:43:a6:e7:5b:88:b7:
11:a7:e8:fb:05:b4:ce:f8:40:5c:31:23:a7:71:78:
49:72:c3:30:93:5a:71:c1:12:5c:f9:bd:9a:67:7d:
d7:c1:c0:23:06:03:e7:eb:20:11:8e:c6:28:57:4a:
c2:f8:01:c9:3c:3d:ca:ab:12:6a:76:26:a6:12:bd:
46:26:ce:18:53:69:63:f7:49:7a:f9:a8:56:ad:b7:
4c:56:e5:8d:38:12:c9:80:2c:31:fa:7e:2f:3a:0e:
f4:d3:61:e5:2f:86:7e:7b:77:82:b3:a0:98:fc:48:
e9:8a:a7:13:5b:9b:85:39:54:b2:d8:82:72:01:56:
97:12:bb:7d:ea:eb:97:4c:c8:ce:90:e7:ee:0c:ef:
03:07:83:05:ba:a3:64:7e:cc:53:3e:ff:04:a5:66:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:83:54:82:FB:D6:C8:27:3E:D5:37:3E:8F:51:58:97:D8:7F:8B:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146597.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af6b::/32
Signature Algorithm: sha256WithRSAEncryption
a8:07:ec:58:e8:70:90:7a:c7:bb:05:04:11:4c:a1:c5:50:00:
37:6a:ba:d9:9d:0c:ae:34:70:95:10:2e:66:d7:03:29:6d:82:
48:9c:fa:33:a6:a1:fb:66:cf:0e:33:a3:ae:3a:52:10:f5:02:
f0:0f:e0:4e:3d:8f:22:e7:22:66:20:f5:76:2b:81:7b:a6:90:
19:17:be:5f:df:5d:e1:fd:89:06:32:b1:25:11:f7:1a:28:bf:
21:08:f4:db:ec:7d:bd:32:12:00:f6:90:22:43:76:b3:e7:ed:
43:07:69:60:e6:4f:53:eb:d3:82:ba:2b:bd:46:50:ce:fd:d8:
2e:09:ac:d2:06:d3:69:08:fd:6e:06:9c:c5:92:9f:04:0d:f8:
42:7c:7e:08:8f:7d:39:b0:5f:89:4a:78:cc:72:56:e3:a9:bb:
ce:8f:b5:da:d7:47:80:4e:ca:40:67:0a:53:9f:27:a1:de:06:
64:cc:dc:85:3d:6d:8b:22:e1:42:2d:30:07:b2:d4:5f:2a:14:
55:c5:55:6c:ac:29:6d:81:66:89:0d:14:ae:d7:be:6b:ac:95:
bf:a5:f4:87:3f:08:50:5a:fc:07:49:95:4f:7d:65:8a:d8:3a:
7d:9a:52:91:8c:2c:40:3c:12:08:54:a1:1f:1d:04:1c:59:0b:
98:70:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:51:00 2026 by rpki-client