Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146619.roa
File: AS146619.roa (raw, json)
Hash identifier: krlKfR4G5QR5XVUG75dey5RE7TwFoHKE3pSCuGneoEI=
Subject key identifier: 8B:63:E9:CA:F5:42:76:46:F7:DF:37:A7:75:AE:64:EC:27:F1:17:0A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7FE320696EA002D6B0FD132BFFCE75E056EE7C6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146619.roa
Signing time: Fri 22 May 2026 06:28:05 +0000
ROA not before: Fri 22 May 2026 06:23:05 +0000
ROA not after: Fri 21 May 2027 06:28:05 +0000
asID: 146619
IP address blocks: 240a:af81::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e3:20:69:6e:a0:02:d6:b0:fd:13:2b:ff:ce:75:e0:56:ee:7c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:05 2026 GMT
Not After : May 21 06:28:05 2027 GMT
Subject: CN=8B63E9CAF5427646F7DF37A775AE64EC27F1170A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:fc:9d:95:48:d6:b9:7f:9e:8a:08:58:cf:
1c:e0:bf:c8:cf:7c:d7:d3:0b:90:04:a1:36:5e:09:
c6:8d:7f:39:57:3d:c4:05:c3:aa:9b:d0:58:ca:66:
ed:35:2a:a2:6a:28:b1:a6:aa:41:e1:08:69:96:db:
b0:c5:3b:c0:ef:84:3e:22:b5:53:92:b3:09:ca:72:
7f:f4:2b:e0:85:66:68:23:28:77:ff:3e:fb:b1:5b:
f9:16:14:83:19:15:be:ec:41:6e:ab:66:7d:c5:ac:
dd:69:c0:bb:d0:e7:b4:7b:8a:88:f3:f4:aa:1c:1b:
8b:1f:32:fe:78:f1:a4:57:11:76:d7:eb:40:31:50:
bb:01:9f:3d:08:42:f8:6b:7d:f6:45:f1:3c:f6:ea:
32:e4:e5:43:de:5b:9e:cd:c3:ba:24:18:d3:f3:e2:
b1:41:81:7c:c9:4b:f0:ed:f9:6d:ad:88:75:02:33:
12:38:9a:b7:73:db:7e:72:de:1c:c0:c1:b2:46:e8:
f3:0f:8a:8f:c7:c2:91:8e:ee:24:f2:69:59:b0:7f:
4d:1c:4b:b0:f7:65:47:7f:06:d5:9f:55:03:80:63:
55:91:e1:8f:0e:3f:35:40:8a:1c:56:0a:4b:63:50:
24:7e:07:bf:5b:63:10:95:31:b1:1c:34:17:72:c7:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:63:E9:CA:F5:42:76:46:F7:DF:37:A7:75:AE:64:EC:27:F1:17:0A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146619.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af81::/32
Signature Algorithm: sha256WithRSAEncryption
59:a7:b8:31:54:4f:48:a6:a6:a2:8f:a9:c7:d6:18:a2:17:0b:
b2:df:27:13:3d:89:bc:b8:29:40:0c:93:4f:ea:6a:df:0b:82:
ab:4d:66:d8:c4:1e:39:63:10:1f:20:75:51:0d:69:0a:e3:95:
40:17:65:9e:76:07:c5:70:12:1e:cb:b0:0d:67:e2:cb:34:ee:
50:d6:a1:7e:1c:21:55:00:ed:14:f8:6d:11:ab:27:34:89:68:
cf:28:5d:21:bf:41:12:d9:7b:29:67:59:81:67:6f:26:cc:b1:
44:a7:44:92:ac:58:7d:b0:b1:24:f6:24:36:63:49:45:1b:7a:
cf:c0:c5:73:a6:0b:1a:da:30:11:fb:85:4d:ea:cc:f5:2a:67:
c8:4a:7e:71:89:5a:85:61:88:5d:6c:48:a4:40:4c:38:a2:4a:
8d:0e:5d:b6:52:f7:ee:fc:6f:49:a3:56:39:ba:5d:6d:00:dd:
95:63:ba:43:25:c0:69:cb:7b:ab:e0:8d:eb:60:69:3d:ef:57:
2c:96:8d:69:ec:39:46:f4:25:ee:19:4b:6b:f4:c4:12:8c:9a:
d7:e4:57:d9:29:4e:ce:c6:6f:02:4d:e6:99:9b:40:47:3a:e8:
b0:ca:41:bd:c0:9a:ce:1d:4d:5a:b5:33:a4:85:17:6e:10:9e:
40:c3:1d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:07 2026 by rpki-client