Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146631.roa
File: AS146631.roa (raw, json)
Hash identifier: QI1wy41i2nGB7djocTnBXt88gb533NpwW5P0jF8Tkfw=
Subject key identifier: 1F:A3:DA:4C:FF:33:5A:38:1D:92:B6:5E:26:68:9B:CB:6E:FF:74:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C98C8A623AF6EA6853F04A81214FEB5061FF70A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146631.roa
Signing time: Mon 25 May 2026 01:20:18 +0000
ROA not before: Mon 25 May 2026 01:15:18 +0000
ROA not after: Mon 24 May 2027 01:20:18 +0000
asID: 146631
IP address blocks: 240a:af8d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:98:c8:a6:23:af:6e:a6:85:3f:04:a8:12:14:fe:b5:06:1f:f7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:18 2026 GMT
Not After : May 24 01:20:18 2027 GMT
Subject: CN=1FA3DA4CFF335A381D92B65E26689BCB6EFF7433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:fd:e1:28:d8:b6:99:23:8d:94:0e:3e:d2:
56:e5:cb:67:ee:78:4f:82:c6:1e:f4:19:ce:77:be:
f9:c5:73:1d:82:25:c9:a1:4d:ea:9e:af:7f:f2:7b:
fa:3d:90:42:b3:51:6e:d3:30:bd:f8:11:83:bb:06:
dc:9b:e9:5f:e9:60:c7:23:be:b4:84:3a:f6:16:b0:
bb:ad:92:4c:fa:dd:51:2b:ee:9e:20:68:b8:36:a1:
ad:de:24:e7:11:c0:63:a8:44:48:6e:09:8a:45:54:
d3:53:44:1e:78:28:d5:30:8e:36:ac:4d:1e:b1:00:
39:a1:29:51:62:85:e3:9e:1d:2a:54:aa:16:a7:7d:
9e:d5:b3:a6:a0:e9:15:06:96:e9:69:09:10:81:62:
79:1c:fd:cf:30:15:95:09:89:48:db:2d:87:f2:e9:
69:74:a9:29:c1:97:83:35:46:46:a1:26:9e:59:25:
c7:77:ce:b1:5e:ff:88:d0:09:c2:5b:5f:1d:15:28:
dc:b9:e8:bd:0f:96:e9:a1:12:a0:3a:f0:ba:c5:77:
91:5c:35:44:33:59:d4:c8:2d:98:12:e4:3d:9a:29:
e9:88:6f:af:61:27:d9:bb:d1:e5:ae:78:33:3b:1a:
2f:1e:e6:56:ea:61:90:73:c3:0a:dd:d0:73:64:14:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:DA:4C:FF:33:5A:38:1D:92:B6:5E:26:68:9B:CB:6E:FF:74:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af8d::/32
Signature Algorithm: sha256WithRSAEncryption
4a:64:79:a0:9e:43:03:4a:43:ab:b1:d2:f3:98:bb:ba:39:0a:
2a:4d:50:8e:f5:88:26:2d:89:90:57:42:f7:db:0d:6d:ae:e9:
28:37:4a:c3:7f:a0:5c:13:e7:d8:77:bc:74:56:25:79:7d:4f:
82:cf:c0:b5:96:e6:7c:b6:1b:30:2b:8e:62:d5:f3:28:4d:36:
d7:9d:b2:19:2c:1f:0a:f5:af:3b:bd:ad:64:47:22:cf:d6:35:
10:4d:54:92:3b:70:7a:4d:7c:a0:54:67:fe:71:d6:54:f0:b2:
d6:97:6e:cd:05:31:76:37:17:7c:ab:9f:98:24:b3:73:ca:67:
69:ee:12:37:e6:34:c4:78:22:e0:91:2d:04:0b:0d:a0:a5:db:
c2:e2:0c:2e:63:d9:10:1f:04:03:93:77:57:fb:73:42:01:23:
7f:4d:78:db:93:36:42:c4:09:4d:e2:6e:4b:e2:91:d8:41:dc:
86:5f:61:b1:cf:f6:c5:9f:9c:12:79:86:27:54:0d:65:4c:9a:
4d:ca:6f:46:0b:2c:d0:09:e4:c4:85:ed:9c:0d:5c:d3:41:15:
0c:f4:e5:7b:c8:fc:28:56:a8:12:9a:e4:0a:c3:c7:74:aa:44:
5b:cd:a1:4a:13:6e:fb:fc:25:06:60:95:ba:57:e9:6b:3d:57:
c2:b8:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:47 2026 by rpki-client