Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146599.roa
File: AS146599.roa (raw, json)
Hash identifier: LXAnVX+CK6zzFz9vLOF+/FgoyHndvJU6tSflr++98Vs=
Subject key identifier: 8F:89:0F:3B:48:B9:0D:BF:92:B4:A5:9D:75:A0:E8:D4:BF:01:3E:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 408BBA1A071E1A8703ABFC7C191CE5081FF8D5A4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146599.roa
Signing time: Mon 25 May 2026 02:22:42 +0000
ROA not before: Mon 25 May 2026 02:17:42 +0000
ROA not after: Mon 24 May 2027 02:22:42 +0000
asID: 146599
IP address blocks: 240a:af6d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:8b:ba:1a:07:1e:1a:87:03:ab:fc:7c:19:1c:e5:08:1f:f8:d5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:42 2026 GMT
Not After : May 24 02:22:42 2027 GMT
Subject: CN=8F890F3B48B90DBF92B4A59D75A0E8D4BF013E25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:af:1d:88:7c:f6:03:ff:5e:09:bd:56:45:
53:c1:76:6e:f7:0a:b7:1b:f8:b0:63:9d:7d:17:54:
f7:e6:1f:b5:3b:45:87:41:18:b4:7e:82:dd:22:df:
14:3d:f6:4c:b7:4c:40:f5:18:62:18:a9:ee:34:62:
6e:4d:bb:59:88:8c:44:82:e9:b3:6c:8d:13:d4:1c:
d2:4d:ff:19:da:55:e3:a8:e2:d5:e2:06:8b:99:19:
5e:22:7e:3a:a8:4f:89:71:1a:f7:8a:60:13:f4:07:
4c:ff:91:b6:95:a4:72:22:fd:05:f2:55:c3:b2:21:
28:c8:7b:ea:f3:7a:65:3c:df:97:39:b4:5a:aa:da:
8a:49:0e:d3:21:71:8a:e3:e4:82:6a:81:f8:90:dd:
b6:ef:48:06:42:49:97:2b:a1:f3:11:13:51:03:f0:
f1:13:b6:d1:02:8f:2f:31:e9:d1:44:ff:79:a0:38:
36:1d:e0:c3:45:9f:09:19:a3:07:3d:fc:ad:cc:18:
31:50:63:72:a5:0d:af:04:91:6d:c5:a1:dd:20:f9:
ec:62:0e:b0:72:2b:6b:e3:e0:05:00:c7:af:10:8f:
4f:76:53:0e:d6:f8:54:25:f8:cc:e0:99:61:a6:a2:
3d:f4:e7:92:2f:b6:d1:9b:1e:d6:b7:3b:4b:d2:c8:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:0F:3B:48:B9:0D:BF:92:B4:A5:9D:75:A0:E8:D4:BF:01:3E:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146599.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af6d::/32
Signature Algorithm: sha256WithRSAEncryption
99:1e:2c:4e:c9:2a:77:dd:98:7d:a0:5e:b7:4e:27:94:6d:50:
a2:37:cc:22:96:bf:f0:44:a4:28:e8:a1:c9:05:24:e1:f0:c8:
8c:59:10:68:0f:0c:70:a1:10:78:ba:51:1b:65:9c:b3:47:01:
87:66:41:3c:d1:14:43:97:32:da:c8:a2:4d:65:ec:3d:bc:bf:
c4:08:89:b6:ee:e5:88:07:7c:17:f0:d5:4e:d3:5f:97:6f:aa:
de:f8:5f:86:21:a6:86:cc:d0:79:2e:7a:36:7a:e4:e0:71:0f:
89:2d:93:1a:f6:99:a5:01:b2:9f:c8:a3:77:8e:0c:98:c7:c8:
e1:53:3b:49:8a:0a:5a:0a:3d:53:1b:e3:25:03:f7:73:3f:b8:
a4:4f:cc:b3:69:da:88:8c:04:5b:1c:57:3d:06:68:3d:ef:76:
a5:b8:f2:14:6d:b4:b5:e4:a1:23:26:c5:2f:04:ad:08:e2:9a:
dd:f8:ff:2e:fa:9c:ea:c8:7c:da:77:31:24:9b:c2:e7:bb:75:
f8:73:fa:70:66:84:90:1f:75:f0:78:7a:a3:8b:86:66:12:f0:
34:c0:09:45:82:0c:9f:54:92:f5:2f:20:3d:6d:b7:ed:88:c0:
db:77:96:cc:0a:81:d0:3f:d5:61:cf:3c:66:d4:d2:45:af:a5:
3a:53:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:50 2026 by rpki-client