Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146607.roa
File: AS146607.roa (raw, json)
Hash identifier: Wh27B2dQnyUGFsPL1l2vhhuDJjfRmzmb0aZCaDq57rQ=
Subject key identifier: 77:C6:27:49:B4:52:1A:60:D6:1B:FF:ED:49:DF:40:B4:62:9C:48:21
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C03FEC447DC984AA88D9B00A7EB690734927CB9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146607.roa
Signing time: Fri 22 May 2026 06:27:51 +0000
ROA not before: Fri 22 May 2026 06:22:51 +0000
ROA not after: Fri 21 May 2027 06:27:51 +0000
asID: 146607
IP address blocks: 240a:af75::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:03:fe:c4:47:dc:98:4a:a8:8d:9b:00:a7:eb:69:07:34:92:7c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:51 2026 GMT
Not After : May 21 06:27:51 2027 GMT
Subject: CN=77C62749B4521A60D61BFFED49DF40B4629C4821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:a5:54:5a:d9:5d:50:b2:54:6e:d7:55:a5:
7f:b4:7c:f8:46:40:91:fa:97:a8:cf:05:d8:07:27:
6c:69:63:ea:f6:e6:9b:9a:f3:56:5c:88:39:ed:95:
c9:7c:60:5f:7c:0e:6d:7e:2a:36:9d:ca:36:14:d7:
8c:56:6d:b6:40:b6:27:74:65:aa:5e:2c:5e:80:6c:
4b:21:1a:fd:26:67:55:5f:86:75:0d:d7:40:23:b3:
a2:bb:3d:fa:ca:af:20:8d:27:72:ad:38:3b:1a:49:
f4:69:58:77:c4:51:1f:eb:da:02:7e:93:1b:fa:54:
4d:10:34:6d:65:c0:a7:eb:14:4f:80:01:c5:c6:70:
79:49:4e:4e:18:b6:10:31:cc:a3:a5:b1:97:0a:2e:
7a:83:7c:73:90:3b:b8:68:0b:4f:2f:ee:92:16:e5:
90:ed:86:06:45:76:39:69:ec:43:46:82:19:73:e9:
db:ad:a4:c0:9d:7b:a2:09:fc:80:7b:22:86:0c:ef:
70:94:c0:ec:e4:78:5b:11:17:4a:4e:8c:68:02:19:
b8:c4:e4:c2:e5:30:e9:5d:17:65:81:42:1c:22:27:
2d:03:75:08:06:58:0d:72:82:4a:4a:00:6d:f1:80:
49:00:ba:92:88:40:9f:05:67:27:c6:b9:8f:78:d4:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C6:27:49:B4:52:1A:60:D6:1B:FF:ED:49:DF:40:B4:62:9C:48:21
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af75::/32
Signature Algorithm: sha256WithRSAEncryption
38:23:bf:e1:4e:6b:40:58:52:41:af:70:3c:da:77:71:99:b3:
11:43:c3:c4:e0:0b:4a:77:b2:16:da:a6:f9:48:c1:7a:22:97:
94:b8:75:78:0d:dd:2e:5c:2a:cf:8a:02:df:85:8e:20:8c:04:
7b:47:bb:14:1f:db:96:d2:98:e8:fe:89:c2:82:61:d8:0f:68:
af:5a:a9:49:8f:d0:b2:dd:b9:ea:0c:11:cb:04:af:41:e0:c6:
1b:a3:0a:d5:68:58:ae:40:52:8e:7c:68:e9:69:50:3c:49:65:
8a:e7:fc:a0:3d:3d:e4:41:5f:91:d3:21:87:54:a2:6c:e1:64:
8f:0f:b3:e9:12:69:f4:75:a5:36:b0:9c:27:1f:ba:4c:0b:69:
6c:0e:fc:a4:d0:4b:ea:58:4c:18:1c:7e:20:2f:01:5a:d8:59:
2c:08:41:f5:74:9c:55:03:c7:24:79:2d:56:9f:01:62:4e:c6:
b9:6c:59:b0:2b:77:f4:4d:60:8f:1a:1d:05:b2:e1:a6:18:07:
07:77:f4:6d:1e:37:88:16:d0:1f:3b:8a:15:2f:59:e5:a8:31:
c3:c9:1b:31:2f:de:4c:d4:83:69:dd:99:84:a5:10:89:df:5e:
da:dc:da:d7:c9:f1:ab:cf:91:54:74:81:24:c8:fe:85:52:38:
f4:cd:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:26 2026 by rpki-client