Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146598.roa
File: AS146598.roa (raw, json)
Hash identifier: GVWeRjo92NMaL4MqfVYabK/vsm0GxJfOoUggX1SY8j8=
Subject key identifier: 21:63:48:6F:3C:31:27:D8:A5:EE:FA:D5:BD:58:57:25:DD:53:55:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 308237C1962EA7BA940CCB5AEBEC5C375A15D93D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146598.roa
Signing time: Mon 25 May 2026 03:19:07 +0000
ROA not before: Mon 25 May 2026 03:14:07 +0000
ROA not after: Mon 24 May 2027 03:19:07 +0000
asID: 146598
IP address blocks: 240a:af6c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:82:37:c1:96:2e:a7:ba:94:0c:cb:5a:eb:ec:5c:37:5a:15:d9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:07 2026 GMT
Not After : May 24 03:19:07 2027 GMT
Subject: CN=2163486F3C3127D8A5EEFAD5BD585725DD5355E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:98:e8:3c:61:77:c5:b9:3e:dd:ab:0c:49:93:
5b:76:24:e8:c8:59:82:01:b9:ec:01:44:da:ec:6e:
ba:bc:a2:76:72:fe:54:bb:fb:9a:cd:a1:b5:4b:e5:
dc:82:50:52:70:3a:a7:d1:2a:6e:9d:56:fe:81:c0:
41:70:09:7e:fc:d4:1d:6b:2c:36:43:31:43:c2:43:
89:7a:11:10:8e:52:6f:fe:2f:93:e9:6c:27:51:74:
d0:43:1f:bb:df:83:6b:86:7b:46:dd:40:6f:6e:22:
d3:0d:db:42:67:d6:86:64:d2:83:a6:dd:fc:a2:82:
1d:b2:67:35:33:bf:73:4a:cd:39:4a:9a:34:94:92:
85:48:29:d4:ad:9d:cb:80:e7:a3:87:4f:93:36:57:
2f:69:02:ee:b6:1f:d2:4a:a5:57:29:b5:57:09:d2:
b0:31:06:8b:f1:96:49:dd:70:23:1e:8b:96:7c:c4:
61:29:ee:39:ea:53:9f:5b:fb:79:2b:f5:f9:55:f6:
12:85:e3:1e:be:5d:ce:61:3c:35:e9:58:b1:16:f6:
f8:29:2d:8f:07:2a:90:1f:74:21:3c:d8:65:55:98:
ab:67:0d:14:45:b8:3e:23:97:2a:f4:ce:12:8c:98:
36:99:90:47:61:43:94:ec:8d:6b:f4:02:52:4f:35:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:63:48:6F:3C:31:27:D8:A5:EE:FA:D5:BD:58:57:25:DD:53:55:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af6c::/32
Signature Algorithm: sha256WithRSAEncryption
9e:53:1f:09:fd:71:2c:5e:fe:98:bc:d0:1f:54:73:be:c9:9a:
1a:81:41:c0:20:b7:6b:60:8d:0d:64:c3:71:29:d7:a2:67:ab:
40:3e:e8:f0:16:df:4d:03:74:7b:04:c1:91:02:77:b3:fe:66:
e7:87:61:67:cb:11:94:20:cd:a3:ee:26:00:19:01:3c:9d:39:
4a:cc:10:4f:49:34:47:b5:23:d7:54:ad:11:35:00:21:eb:2a:
72:87:73:82:96:07:c2:4b:c7:c1:76:2a:64:48:01:07:5e:2f:
a0:55:d6:96:41:21:48:ba:b2:77:d6:04:fc:96:13:7c:77:c7:
e2:e6:83:4f:d1:c1:4b:45:32:9d:61:4c:15:7f:7d:27:b0:f6:
f2:91:bb:19:92:53:9f:ec:93:ba:b9:8d:bc:0b:e3:70:da:f5:
34:29:d4:17:ef:5a:f3:f6:d7:fc:e8:00:75:ad:e3:4e:35:4d:
b8:54:37:86:c8:d0:70:ac:14:78:fd:e2:05:00:38:08:59:34:
b4:4e:ad:ea:86:85:a2:a1:c2:49:08:13:2b:62:7f:e6:33:a1:
af:9c:d7:d0:6b:82:0f:80:cb:17:07:19:3e:7e:3f:7a:1f:e5:
a7:02:b6:22:44:46:86:87:fa:78:f3:41:75:03:6b:93:64:15:
d5:4b:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:59 2026 by rpki-client