Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146606.roa
File: AS146606.roa (raw, json)
Hash identifier: yaRA8gkk8MC8mUSIqiVRvxN013xF5i8Kj+lrte9VDAI=
Subject key identifier: 23:E6:8B:C6:7B:C0:89:F8:58:75:F1:2D:41:53:6D:CA:8F:17:BA:8F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E6BCD1F8CFD9F3391C7A1547479EE508D94A936
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146606.roa
Signing time: Mon 25 May 2026 03:19:33 +0000
ROA not before: Mon 25 May 2026 03:14:33 +0000
ROA not after: Mon 24 May 2027 03:19:33 +0000
asID: 146606
IP address blocks: 240a:af74::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6b:cd:1f:8c:fd:9f:33:91:c7:a1:54:74:79:ee:50:8d:94:a9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:33 2026 GMT
Not After : May 24 03:19:33 2027 GMT
Subject: CN=23E68BC67BC089F85875F12D41536DCA8F17BA8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:53:94:19:da:1d:2e:56:b4:d7:b7:ba:a1:
34:5b:0b:f5:ca:dd:73:11:09:00:cc:6c:dc:19:b0:
ab:43:fa:4f:ff:01:10:a8:c2:42:20:cd:cd:85:b1:
89:73:3e:8c:3f:bc:bf:c4:19:db:f2:49:76:aa:70:
5f:59:38:c2:45:43:8c:21:36:a2:06:05:4d:75:6d:
52:58:86:70:5c:67:00:38:72:a1:34:78:49:f8:28:
ee:32:77:4b:fc:d8:59:4a:38:2a:1f:c3:18:03:ae:
8b:88:2f:36:f4:97:bb:df:91:9f:7e:c2:96:53:aa:
1d:a7:f7:ad:72:29:f1:bb:dc:b3:d4:97:36:13:76:
04:c9:79:65:2f:98:2b:53:89:5a:cc:97:19:df:24:
2c:32:24:9e:9d:38:42:cc:64:c6:27:1f:f0:58:0f:
a4:70:69:5d:86:e9:ac:ef:dc:38:21:03:59:a7:82:
8a:63:e6:fd:cf:f4:8c:dc:d6:3a:ab:3a:37:31:a1:
41:7e:40:cb:3c:be:5a:e2:28:e0:33:58:5a:da:f1:
00:a8:62:be:e1:d3:fc:6b:71:de:81:d1:33:52:f6:
f6:dc:33:06:ad:09:6f:96:ad:37:94:53:39:1a:d0:
fc:a3:4f:b5:1e:92:aa:4a:f4:6d:a4:34:9a:1f:82:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:8B:C6:7B:C0:89:F8:58:75:F1:2D:41:53:6D:CA:8F:17:BA:8F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af74::/32
Signature Algorithm: sha256WithRSAEncryption
bd:b4:84:ac:fb:92:e2:4f:18:9e:64:7d:eb:ef:0c:e3:7b:b5:
f8:d7:0d:ea:3b:58:a3:41:8b:36:c5:42:27:1e:bb:46:9b:99:
18:a9:a4:96:32:ba:83:39:86:e0:ea:c9:69:3c:01:f0:62:eb:
4b:f6:87:92:b2:dd:93:d2:86:87:71:f3:34:06:14:1b:74:c7:
9c:38:c6:e0:b2:0f:2e:41:9e:cb:56:1e:de:dd:15:2a:1f:9d:
18:f8:44:4f:60:95:0f:bf:27:d2:ee:69:18:b2:7b:c7:a7:4b:
be:79:5e:85:e1:b3:a6:26:e0:61:8f:2d:c8:9b:9d:e6:23:9f:
2a:c2:22:3a:71:d1:a6:21:d8:e8:b5:24:5a:80:48:61:27:2f:
bb:2f:8e:b1:ff:47:97:2a:cc:de:7e:b8:94:87:f1:40:a8:1a:
6b:c3:f0:5f:a3:9c:59:2b:da:75:2e:42:fd:90:10:72:9b:b8:
28:53:ea:8b:f7:01:59:eb:3b:df:a3:96:cc:d4:74:a0:f8:44:
5a:0f:8b:f5:9e:7f:c2:fe:18:20:f7:3c:3c:a5:80:29:e3:30:
04:ce:f4:f9:d3:fd:23:dd:53:ce:98:fc:08:73:64:76:b9:8c:
d7:30:63:b1:7c:44:1d:1d:3b:f7:69:e7:95:a7:3c:c0:d3:90:
ad:e7:26:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:07 2026 by rpki-client