Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146620.roa
File: AS146620.roa (raw, json)
Hash identifier: POGxLcEW7XG5EZ+5r/8xHQpm2zhiOjKBHFdYQ6jR2iY=
Subject key identifier: 37:0B:0E:C1:5B:3B:EA:3B:2C:5A:A5:10:37:CC:5E:CF:53:F3:B1:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 71C49602FDB9213ED0A5E3C0CC95186497A560AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146620.roa
Signing time: Mon 25 May 2026 01:38:10 +0000
ROA not before: Mon 25 May 2026 01:33:10 +0000
ROA not after: Mon 24 May 2027 01:38:10 +0000
asID: 146620
IP address blocks: 240a:af82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c4:96:02:fd:b9:21:3e:d0:a5:e3:c0:cc:95:18:64:97:a5:60:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:10 2026 GMT
Not After : May 24 01:38:10 2027 GMT
Subject: CN=370B0EC15B3BEA3B2C5AA51037CC5ECF53F3B113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:e6:82:70:b6:f7:67:c8:18:69:59:72:5c:
f3:7e:14:f7:86:97:9f:81:10:3f:98:15:fe:7e:40:
7a:7f:52:7c:f5:c7:cf:42:69:b3:d7:65:4f:37:b7:
b1:e6:13:1f:7f:ec:03:c6:eb:05:bd:69:25:b4:1f:
e6:10:a3:76:dc:65:43:e6:d9:95:67:e1:8a:d5:44:
72:46:4a:49:fd:64:ae:e1:aa:d5:e9:af:9a:23:83:
a7:f3:63:12:90:19:e9:70:2f:d0:9f:5f:2a:9f:03:
40:16:2a:a0:fb:e6:cb:21:4d:95:3d:55:8d:88:c8:
60:84:65:c7:81:9b:b1:7c:f1:05:17:5c:92:a0:3d:
0b:71:c3:6b:e0:3c:3b:38:54:52:60:82:87:87:fd:
40:00:6c:d3:69:e2:c1:35:99:6a:39:1d:52:6b:eb:
ec:da:02:e2:e9:89:70:da:8b:da:a0:04:a1:6d:f6:
3b:2e:c9:f4:56:f8:8f:40:63:7b:f3:c7:18:30:99:
7b:4d:71:27:97:7c:05:e0:05:07:ec:cf:01:6e:cc:
3b:85:cc:ea:fd:e2:90:14:b7:e6:cf:53:f5:2c:6f:
55:e2:ee:4c:30:d7:a1:52:8f:3b:f1:cf:b4:3c:ef:
28:3d:79:92:6e:0c:9b:34:ea:bc:0d:91:b0:61:53:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0B:0E:C1:5B:3B:EA:3B:2C:5A:A5:10:37:CC:5E:CF:53:F3:B1:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146620.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af82::/32
Signature Algorithm: sha256WithRSAEncryption
44:87:4f:bd:4f:66:74:bd:74:c1:83:37:3b:51:f5:c8:06:af:
e7:9f:a5:36:59:5c:1a:1e:a3:e9:16:21:02:60:54:69:d9:b8:
6c:fe:38:03:b2:94:85:d1:2f:f9:5e:8c:a7:40:29:18:e5:6e:
7d:0d:68:86:22:bd:8c:10:01:02:50:5b:80:d1:e0:02:1a:0d:
60:ae:b2:67:77:1d:0d:92:5f:16:78:5b:f0:3c:03:eb:73:53:
f2:28:af:25:91:55:81:9d:13:93:98:1e:79:ea:21:45:12:d7:
99:0a:2e:6f:3c:87:28:1a:94:16:cf:ed:c0:43:37:94:8d:a5:
24:e4:28:f0:0f:40:dd:e6:be:cb:09:62:11:9f:86:9b:8a:e3:
2a:46:11:8c:6d:ab:af:8f:89:4f:de:04:99:d5:2f:e5:20:82:
90:df:5a:6d:4f:86:9d:eb:72:bb:c5:10:a7:d2:d9:02:30:ab:
75:f9:cd:47:92:31:30:eb:cd:6d:45:63:b0:41:74:27:33:ba:
1d:ae:da:24:d3:88:91:8c:f3:0b:a0:8b:64:d6:7e:53:56:6c:
3d:a6:ce:73:07:b2:4c:f6:a0:cb:6f:fa:8e:67:08:26:06:2f:
aa:b4:54:8a:c4:59:fd:74:bf:40:0c:f1:a1:e7:26:10:58:eb:
79:a8:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:13 2026 by rpki-client