Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146604.roa
File: AS146604.roa (raw, json)
Hash identifier: KqKa6Po9LUKQQTj4mPXj9MMgeA/1kydtr/ov42x8Fp8=
Subject key identifier: D7:90:F1:D5:70:33:BA:0E:BD:BC:46:08:EE:20:AE:20:D3:E0:59:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 367C7D99834025DB8F7CD4FF1CA9824661017660
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146604.roa
Signing time: Fri 22 May 2026 04:08:28 +0000
ROA not before: Fri 22 May 2026 04:03:28 +0000
ROA not after: Fri 21 May 2027 04:08:28 +0000
asID: 146604
IP address blocks: 240a:af72::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7c:7d:99:83:40:25:db:8f:7c:d4:ff:1c:a9:82:46:61:01:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:28 2026 GMT
Not After : May 21 04:08:28 2027 GMT
Subject: CN=D790F1D57033BA0EBDBC4608EE20AE20D3E05973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:2d:9e:b7:54:05:ed:32:52:8b:19:bd:18:
13:b3:47:ec:53:b2:21:1c:81:05:99:f6:c5:68:0e:
f7:10:47:ee:39:13:e2:87:77:81:5a:9b:20:f7:39:
f4:66:94:f7:b7:59:f0:e6:da:ce:22:7c:6a:3c:c0:
46:5e:4d:02:55:3b:17:63:12:3e:1d:28:2c:fa:61:
6e:96:b7:3b:87:f8:d5:70:5c:77:1b:f0:e4:8b:6a:
8d:37:e7:16:50:07:f6:2c:20:c7:f9:b8:0c:d4:ba:
f7:da:99:ed:14:01:8c:80:0b:cf:0a:ab:ef:74:e7:
10:09:43:ca:d1:40:eb:12:3b:0e:39:1b:7f:fc:0b:
b3:6d:d8:cb:d8:a4:bb:63:7d:d0:1c:5c:14:ee:97:
b5:96:a7:85:a4:a5:65:03:23:80:f3:f9:b2:89:85:
e5:cd:db:02:fc:15:af:cb:27:92:45:b1:c8:76:8d:
93:14:5a:6a:a9:82:3d:bf:51:50:63:98:26:cb:b1:
94:8b:ff:24:c4:b2:72:4a:1a:54:d6:35:6e:d9:e6:
7b:c9:d6:ae:78:24:45:75:9f:d5:3b:f6:77:18:07:
56:a7:62:7c:8c:a1:65:e6:1f:00:e7:bd:d4:68:b4:
ec:aa:f5:e6:34:f5:d4:3f:e5:66:35:b2:60:5d:00:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:90:F1:D5:70:33:BA:0E:BD:BC:46:08:EE:20:AE:20:D3:E0:59:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af72::/32
Signature Algorithm: sha256WithRSAEncryption
97:48:4b:d4:d0:60:24:6b:3d:92:1e:e7:03:21:f1:9b:92:e5:
3d:39:bf:33:f4:ab:c8:c2:1c:17:c5:4a:ab:89:69:e1:82:8f:
da:f0:59:c3:bb:4d:df:29:c0:aa:23:58:cd:3a:d6:26:43:d7:
2c:ad:84:37:5f:12:ba:31:09:93:ef:10:50:ad:a4:5d:d2:df:
98:f5:24:3c:31:ad:ed:69:40:28:fa:e6:8e:b6:a5:58:18:c1:
de:2a:5b:ed:55:6f:44:2a:00:59:13:2f:7d:ee:e7:1c:73:c1:
0e:46:61:dd:22:07:7f:65:68:7a:4d:da:e2:98:6e:50:5e:74:
b8:64:e6:00:d0:6f:4e:f4:a1:2f:5a:d5:d6:bc:3f:74:65:e2:
3e:5f:59:23:99:c6:b0:35:34:d5:98:6e:d1:91:f5:ab:cc:4b:
8d:d6:df:ea:9c:f1:f1:5a:33:61:1a:5e:a0:ba:c5:bf:bb:1b:
e7:f0:06:47:f5:34:75:b8:67:1e:aa:8a:6c:c2:7a:e7:9f:88:
22:3f:17:f7:01:76:9f:9b:3a:79:91:96:e9:68:3a:56:10:4c:
6c:f3:b2:92:5d:c1:a7:76:ed:3a:76:c4:83:85:b9:27:d9:65:
82:15:dc:bb:f4:51:b0:cc:ad:85:7d:9b:bc:d5:87:8c:f7:d0:
34:76:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:20 2026 by rpki-client