Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146719.roa
File: AS146719.roa (raw, json)
Hash identifier: aPqdvR1hqlscvee2LsUk8HfmNDFlKI58yhD3LS0ymMY=
Subject key identifier: C5:72:68:E4:E7:9E:46:1C:29:30:E9:D3:69:61:8C:7E:17:AB:65:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0ADC3DA2535A60873D221E8A5CFC9D3034D6D6DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146719.roa
Signing time: Tue 26 May 2026 01:13:06 +0000
ROA not before: Tue 26 May 2026 01:08:06 +0000
ROA not after: Tue 25 May 2027 01:13:06 +0000
asID: 146719
IP address blocks: 240a:afe5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:dc:3d:a2:53:5a:60:87:3d:22:1e:8a:5c:fc:9d:30:34:d6:d6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:06 2026 GMT
Not After : May 25 01:13:06 2027 GMT
Subject: CN=C57268E4E79E461C2930E9D369618C7E17AB6548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:d2:f0:d1:0a:16:f0:d9:89:7c:14:a3:a6:
0c:9b:40:c4:c8:03:c9:5b:8a:ba:c6:29:4e:9f:07:
0f:14:a5:2e:c4:3b:f1:21:73:f8:7f:2e:c6:ef:c9:
80:bf:dc:aa:da:17:27:e1:7c:5a:96:7f:d6:a9:f6:
35:f9:2f:85:61:0a:60:52:73:98:7c:3d:34:e1:96:
99:65:35:6d:f9:c7:e8:36:7f:1d:21:41:7d:10:f4:
d6:28:00:10:fe:c6:f7:7a:30:ea:b0:98:33:91:b8:
d7:d2:95:3b:86:81:bb:cf:6c:df:22:72:2a:27:fa:
d0:f9:db:72:50:01:08:fe:01:5a:84:a7:0f:d0:38:
27:7f:56:97:39:a6:bc:36:bd:6b:27:b0:85:d6:1b:
54:8c:29:f4:8f:72:b6:3c:60:50:64:60:1e:9d:ad:
2c:dc:71:e3:fa:5d:fd:9f:51:e3:3d:95:6c:d4:57:
04:a0:6b:81:0f:77:8f:38:55:1d:49:dd:09:6a:07:
17:d8:5b:93:33:f3:85:7c:d2:24:0c:f1:98:5f:82:
c3:4e:8e:b0:5c:ba:40:41:a3:14:b0:5f:be:8d:2a:
42:a1:e8:84:f5:47:b3:33:3f:8a:39:da:3b:19:71:
21:c5:fe:a1:25:d5:e9:f0:3b:1a:72:81:78:a9:be:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:72:68:E4:E7:9E:46:1C:29:30:E9:D3:69:61:8C:7E:17:AB:65:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146719.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afe5::/32
Signature Algorithm: sha256WithRSAEncryption
a1:ee:03:8c:73:57:06:cb:c8:47:e0:72:b9:0e:2f:06:f5:d3:
d3:bd:8b:0c:93:fd:ca:06:42:93:79:11:6b:74:81:82:59:79:
34:4e:d2:59:08:ae:4d:b8:9b:93:f0:fe:e4:42:b6:46:62:30:
ea:79:1b:79:2b:d4:c5:8d:ed:ac:3f:f8:18:e6:40:54:d4:8c:
b1:a3:04:e4:cd:17:a3:92:91:4e:39:e8:22:73:04:bf:e3:1c:
6f:bd:95:b8:c8:b7:9d:5f:ab:bb:bf:9d:45:a4:39:9d:84:b1:
b3:f4:cd:8a:b0:98:62:ee:06:1e:a7:89:ad:a1:63:91:95:b0:
51:7b:a4:7c:d7:cc:47:86:8e:9f:12:9e:9e:db:7f:e3:4f:22:
f7:4d:c7:ee:cf:0e:b3:9d:b3:31:01:b2:fc:e4:fa:99:84:60:
99:44:3a:27:29:88:bb:df:6f:bb:d8:e2:d2:94:bb:f9:cf:8e:
de:26:ac:01:88:3f:be:96:14:31:48:ae:15:b0:05:90:cc:7d:
a6:0d:a9:be:ed:43:73:41:ae:3d:c0:b7:f8:51:d1:9d:38:00:
af:55:52:1a:7e:6f:3d:06:28:08:9a:2b:3a:5b:f6:bf:88:e7:
d4:73:b2:47:09:23:11:99:3b:7f:e5:f5:5a:36:84:bb:00:7f:
90:b7:4b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:09 2026 by rpki-client