Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146664.roa
File: AS146664.roa (raw, json)
Hash identifier: mSMv1yHlg3kfGiKC+A3Zdu5MTdPNPrR2G5MAX7jyTmo=
Subject key identifier: 50:47:61:88:2B:D0:B9:2E:D9:73:54:FB:E7:C4:AB:D0:8D:14:FC:9C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 527CBDD51C8A0AD29910C47F7F4D3BAF94351FEF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146664.roa
Signing time: Mon 25 May 2026 01:20:38 +0000
ROA not before: Mon 25 May 2026 01:15:38 +0000
ROA not after: Mon 24 May 2027 01:20:38 +0000
asID: 146664
IP address blocks: 240a:afae::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7c:bd:d5:1c:8a:0a:d2:99:10:c4:7f:7f:4d:3b:af:94:35:1f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:38 2026 GMT
Not After : May 24 01:20:38 2027 GMT
Subject: CN=504761882BD0B92ED97354FBE7C4ABD08D14FC9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:44:71:3f:e8:51:8a:27:0f:52:e2:ff:14:
af:51:ea:21:1a:52:f2:67:1f:55:59:2c:b3:80:95:
a0:f6:b5:a9:94:5f:f1:16:6a:39:c0:d3:cd:aa:6b:
c4:81:91:7b:20:5e:84:78:33:4f:13:23:35:63:46:
70:62:6e:ff:82:58:73:2d:cc:7e:d4:d6:e5:c9:75:
53:65:b5:84:ca:1b:37:1b:22:7a:14:8c:f5:9b:5f:
11:73:d6:0d:15:ed:3a:91:18:e1:fb:4e:56:6c:a8:
a1:9b:77:60:89:67:ef:fc:d1:8e:ca:54:29:ed:bb:
41:22:6f:7a:76:59:df:6f:a1:a8:92:31:5d:13:f0:
f3:56:64:42:30:90:08:ef:9a:24:90:87:7f:e9:fa:
18:25:b8:bf:ba:d7:ac:32:dd:4a:c1:06:52:ab:62:
72:39:0c:a6:72:3e:77:6e:61:1f:43:47:52:3b:b8:
7c:ac:2a:90:ea:1b:90:cb:1a:ec:46:7c:ba:91:1b:
04:02:90:34:c2:05:33:de:07:d9:8c:ea:dc:4b:6d:
a1:45:e0:b1:af:0a:e3:d9:54:17:18:3e:ef:3a:7f:
ed:77:5e:3a:48:5e:a0:ab:a7:d4:4f:8c:0f:f1:3d:
72:43:33:e4:2f:92:49:a4:16:43:44:24:bc:7c:cf:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:47:61:88:2B:D0:B9:2E:D9:73:54:FB:E7:C4:AB:D0:8D:14:FC:9C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146664.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afae::/32
Signature Algorithm: sha256WithRSAEncryption
1c:43:25:a4:a8:f4:02:4f:b3:1e:c9:54:27:8d:db:45:27:63:
55:05:de:0a:29:6d:9c:6d:ec:92:85:07:6f:2c:b3:35:b3:1f:
ce:c7:87:7e:8b:bc:ff:71:71:d8:53:a4:2b:ef:c0:7a:c0:6a:
80:b3:2b:9e:47:46:44:f7:e8:b7:be:5d:5e:53:ba:46:4e:ea:
1c:ad:b8:cc:a8:4d:6a:c7:7a:5d:33:21:11:27:50:2c:d3:f9:
7a:81:5a:19:93:99:29:02:2a:3a:bd:3e:8b:ed:bb:31:2e:10:
22:12:23:39:3b:f1:84:e1:cf:bc:5c:5d:37:db:7e:ef:15:06:
d5:d2:f5:f8:c1:ed:94:29:da:f8:80:c0:f4:f3:d4:4e:bb:d7:
7d:0b:cd:83:2f:22:90:0a:50:a4:aa:62:7d:12:e6:8b:9e:4c:
a8:ac:23:ed:54:24:fe:a0:36:65:38:0f:ca:9c:68:1b:30:93:
50:63:fd:4e:fc:e6:cc:1e:12:80:db:13:6f:83:b5:68:69:7d:
6d:41:00:27:05:e7:ba:eb:d5:5d:67:f2:19:07:7c:b9:5a:4d:
7e:0a:21:b2:c5:64:0e:60:71:41:cf:82:73:ee:2f:e2:dc:f6:
fc:f1:0e:09:1d:8d:96:71:57:a0:75:13:cb:2d:2e:84:48:53:
be:73:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:57 2026 by rpki-client