Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146589.roa
File: AS146589.roa (raw, json)
Hash identifier: FYNcWjid+y/ccaENxh7s5i+VMgu4yhZB6mwxUG7gOag=
Subject key identifier: 77:62:CF:E4:5B:C8:1F:63:94:90:CA:98:35:15:2C:53:A3:AD:2E:34
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 016D999D0122C0712A455B4060DA85FDC763EF57
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146589.roa
Signing time: Mon 25 May 2026 03:19:48 +0000
ROA not before: Mon 25 May 2026 03:14:48 +0000
ROA not after: Mon 24 May 2027 03:19:48 +0000
asID: 146589
IP address blocks: 240a:af63::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6d:99:9d:01:22:c0:71:2a:45:5b:40:60:da:85:fd:c7:63:ef:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:48 2026 GMT
Not After : May 24 03:19:48 2027 GMT
Subject: CN=7762CFE45BC81F639490CA9835152C53A3AD2E34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:86:48:e7:b6:e3:53:72:07:24:1f:2b:c0:
64:81:41:66:75:0d:9f:66:bd:f3:d2:f8:7b:8b:82:
d5:71:12:63:fd:89:09:c8:c8:2e:bd:c9:0e:0e:a7:
2e:39:52:83:17:74:f3:0f:65:1d:2d:e3:d2:6d:84:
36:19:47:e6:17:5a:97:1f:5c:21:5d:62:0a:70:bd:
c1:78:0d:a5:31:fb:61:54:80:51:38:eb:f3:32:1e:
9c:ab:be:f8:79:e8:f4:d9:90:34:a9:dd:80:08:a1:
48:3f:1d:89:73:5c:ff:2d:7f:23:19:46:47:d5:aa:
23:bc:12:fe:91:a6:d7:f7:8c:96:e0:e3:c1:b8:7e:
68:08:c9:0b:fe:64:cd:9d:61:70:b4:57:70:9c:1f:
0c:af:e1:f2:ab:40:b6:f1:df:d8:f1:c2:3a:b1:74:
3c:a0:d4:3e:ee:d5:f6:cd:4a:cb:39:d5:94:aa:e0:
b0:17:1a:68:f6:5d:00:54:e1:0c:49:d1:5f:3f:18:
52:ec:5b:2f:8b:fc:b9:f4:01:d8:42:3a:25:3d:e6:
9a:6a:35:e0:24:6c:46:51:ba:c4:da:e6:34:4a:6b:
81:47:93:61:51:12:d6:b7:1a:5f:1c:e8:b7:04:ff:
2a:df:aa:60:45:88:46:14:40:fa:aa:82:dd:68:af:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:CF:E4:5B:C8:1F:63:94:90:CA:98:35:15:2C:53:A3:AD:2E:34
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af63::/32
Signature Algorithm: sha256WithRSAEncryption
67:fb:c4:f9:48:0a:3a:6e:36:4d:e2:0b:f1:04:54:93:e0:54:
76:5f:85:0e:87:7f:f8:73:1a:ef:62:1e:cd:fa:e0:a9:61:7f:
c7:da:7f:48:fe:e9:b8:f2:0e:4a:01:eb:ce:16:e9:17:02:75:
b9:13:5a:10:58:b4:57:e0:1d:a4:5e:32:34:23:54:a9:a8:31:
ba:d0:60:22:5b:31:08:84:90:26:8b:53:d0:c2:fc:5e:06:ef:
32:94:bc:60:90:52:dd:d7:a8:b9:fe:06:db:c4:4f:20:dd:c4:
c4:12:7e:0e:88:32:5b:90:18:08:46:9f:78:6c:3c:4c:78:ab:
0d:52:85:a8:6e:ff:91:80:fc:8d:4f:a3:d3:d5:fb:89:1f:b2:
3e:e7:76:76:90:f7:6a:1a:86:db:9c:e7:56:52:01:52:9f:24:
6a:33:23:b4:08:34:22:db:43:9b:eb:06:f0:cb:e1:7b:6c:fb:
1c:d3:a6:48:68:a2:7b:14:e5:38:c9:1d:52:2b:6b:b4:a4:46:
93:48:79:3b:80:d5:62:bc:2c:46:d6:48:01:ef:5a:f0:8f:c6:
cb:59:55:a5:56:96:b8:54:17:46:f4:2e:5e:e7:b1:8b:ae:f7:
7a:22:1f:47:40:a8:74:2f:9c:6b:71:ff:4b:de:4b:be:53:f7:
ab:e3:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:24 2026 by rpki-client