Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146602.roa
File: AS146602.roa (raw, json)
Hash identifier: R/3CBqBLgGD788mIw9dWdmv02hRBo9zOTHYz4/ZNeLw=
Subject key identifier: 92:78:F9:4D:AA:50:21:3D:BC:63:B0:5B:D1:0F:20:89:4C:50:38:3C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38CA658566807C6B65921689710DEA6E25F8D210
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146602.roa
Signing time: Fri 22 May 2026 07:08:47 +0000
ROA not before: Fri 22 May 2026 07:03:47 +0000
ROA not after: Fri 21 May 2027 07:08:47 +0000
asID: 146602
IP address blocks: 240a:af70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ca:65:85:66:80:7c:6b:65:92:16:89:71:0d:ea:6e:25:f8:d2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:47 2026 GMT
Not After : May 21 07:08:47 2027 GMT
Subject: CN=9278F94DAA50213DBC63B05BD10F20894C50383C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:f2:85:a2:91:9c:b6:c3:ae:d2:b4:51:77:
b7:45:f2:00:ce:73:e8:8a:34:cb:dd:62:74:d6:ee:
1a:d8:42:16:fc:0f:44:a2:e2:53:27:fb:d1:56:2a:
23:ce:0e:be:16:dc:32:42:aa:85:41:66:b3:1d:39:
df:67:4a:14:aa:6b:f3:43:70:89:bc:4c:89:38:50:
95:4a:d1:23:99:b4:26:9c:dc:a8:fb:cb:b4:e7:0d:
9e:bf:04:39:66:26:21:36:6d:60:86:d4:98:16:80:
da:6a:67:3d:82:a8:72:13:74:f7:66:8b:46:e5:fe:
66:45:a0:87:a9:6d:53:8c:50:bc:f1:81:42:0c:9a:
12:2e:26:c9:22:95:16:ad:ac:00:5a:e6:44:2d:0f:
81:28:0c:aa:d0:a6:8c:1a:90:6f:66:6d:4f:c4:59:
65:bf:04:aa:05:b2:a9:53:f8:b6:00:43:4f:ea:2d:
dd:9b:a4:38:ed:21:81:8a:85:0c:7d:15:c7:33:0b:
e5:d0:d0:93:d9:9e:04:67:c5:bf:e3:9c:19:cd:1f:
90:79:4b:f6:04:c4:7e:cb:6a:b0:01:7d:e9:3e:66:
2c:c6:03:18:6c:35:98:27:e9:35:6a:22:18:44:69:
c8:da:33:57:bf:32:5d:f5:61:1b:8a:c4:60:73:6b:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:78:F9:4D:AA:50:21:3D:BC:63:B0:5B:D1:0F:20:89:4C:50:38:3C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146602.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af70::/32
Signature Algorithm: sha256WithRSAEncryption
71:f0:3a:72:d4:2f:5a:3e:30:db:d9:6a:a2:ee:7a:cd:77:e0:
89:b1:f7:e9:7d:bd:66:57:b0:dc:65:dc:9c:84:64:2b:9d:fb:
ee:0e:2d:02:83:5a:bc:17:70:64:7e:66:ca:3e:b3:98:eb:b7:
67:f2:12:8c:10:59:f1:f1:d8:fc:4d:1a:72:54:c2:ef:4b:40:
03:3e:bc:06:f6:b1:d8:af:22:82:63:c6:52:3b:58:47:50:bf:
bb:e4:5d:f4:b2:32:4f:63:6c:91:15:b4:1d:ee:90:d3:0c:9d:
91:b6:57:38:7b:ac:73:cd:96:e1:c6:5c:29:ea:5c:d8:ad:07:
ce:84:5d:f9:5e:05:b2:d1:10:17:23:24:dd:81:d8:d6:51:ff:
10:3e:d2:9b:c6:da:3e:0b:3e:4a:39:53:e5:80:28:6b:31:e1:
c1:b1:23:e8:76:14:a5:42:2d:c1:2a:89:4f:a6:bd:b1:5d:ba:
94:5b:22:3e:cf:e3:78:09:d0:33:98:20:5d:d8:3a:56:8d:5c:
74:a3:08:39:ed:83:18:55:ef:35:51:4f:c3:0a:3e:ef:64:b7:
9e:45:12:4d:f3:55:4c:c4:dc:ee:f7:93:c5:6f:90:e1:b1:0c:
fc:72:62:f8:c7:49:93:dc:14:16:52:5a:46:a3:e5:96:21:b8:
64:08:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:08 2026 by rpki-client