Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146623.roa
File: AS146623.roa (raw, json)
Hash identifier: epBEylH60Nemgn3ZcXA1IF3uYvfq1cEnx8Om1TGfv8U=
Subject key identifier: 94:D3:D0:4A:48:B1:6D:C7:BF:CE:80:96:F3:E0:98:F3:E1:85:D5:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 705D2A8FFD1910B43FB1436BE2965476C94B034C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146623.roa
Signing time: Tue 26 May 2026 08:52:47 +0000
ROA not before: Tue 26 May 2026 08:47:47 +0000
ROA not after: Tue 25 May 2027 08:52:47 +0000
asID: 146623
IP address blocks: 240a:af85::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:5d:2a:8f:fd:19:10:b4:3f:b1:43:6b:e2:96:54:76:c9:4b:03:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:47 2026 GMT
Not After : May 25 08:52:47 2027 GMT
Subject: CN=94D3D04A48B16DC7BFCE8096F3E098F3E185D5AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:a1:3a:63:23:cc:6e:da:fc:e5:65:96:9a:
5b:d2:2a:ce:18:bc:3b:ee:b2:53:c0:79:69:1f:21:
d5:e9:fc:fb:37:4c:04:b5:fe:02:74:eb:50:e8:1c:
2d:8d:a3:7d:ff:e3:be:7d:a0:6d:9a:c7:8d:fe:d2:
ec:f9:3c:10:16:bf:d8:f4:2a:8b:11:33:fb:31:1f:
70:f8:e6:09:44:79:9c:9a:ac:9f:c8:9a:c7:3a:d1:
80:4d:70:53:af:be:3e:32:fc:de:e6:2b:dc:50:e9:
c0:1c:96:43:c4:bb:48:03:5a:d4:2f:70:f8:a2:dc:
7a:b5:97:ff:66:7a:b0:f7:fb:d0:10:51:92:bf:65:
4b:80:ae:5d:b2:cf:74:c6:1a:66:c4:66:30:05:31:
f9:75:f9:23:bb:90:2b:03:14:80:83:a5:75:90:54:
44:05:cc:12:8c:5f:d0:0a:c0:e9:28:fe:63:98:4a:
9f:78:cd:b0:d1:4b:3c:b1:56:17:fa:3d:f8:4e:3b:
93:99:ea:67:c0:5d:01:d0:0e:6f:9e:36:ba:28:b4:
76:6d:5a:42:79:6a:0c:ec:87:6b:5d:30:83:ba:7c:
ab:dc:2e:c3:e5:d2:21:18:ac:d3:cf:95:f3:18:fd:
f8:56:64:80:b0:68:dc:c8:1e:5a:e0:01:0b:53:2f:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D3:D0:4A:48:B1:6D:C7:BF:CE:80:96:F3:E0:98:F3:E1:85:D5:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146623.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af85::/32
Signature Algorithm: sha256WithRSAEncryption
b7:ee:0a:a9:76:1f:ba:0c:02:32:87:86:d1:dc:e2:31:81:af:
38:21:95:3e:2e:28:15:65:63:34:c1:81:2d:16:f9:70:ec:68:
21:c2:c2:5d:ce:db:02:7a:df:8f:f9:a9:e0:b0:0f:21:38:32:
1a:45:57:21:f6:c8:c6:93:47:37:0b:0d:c6:39:03:bd:92:cf:
12:38:78:92:d7:82:73:e8:9b:99:de:ce:c3:4b:35:63:2b:08:
4b:a9:db:c6:d8:f8:29:7b:6a:5f:7c:52:db:f6:a8:ee:44:d9:
8c:ca:ed:ee:a4:0b:3c:a3:a4:72:f8:8e:bf:75:da:6d:89:ae:
1b:81:48:02:0b:44:7e:98:07:5f:f9:11:ff:c5:1f:55:fe:d5:
ed:61:c8:9e:80:35:0a:19:13:d3:d6:c2:cf:0a:4a:7e:88:5d:
8c:d5:12:d6:1b:15:d1:08:e4:00:0c:5a:69:ac:36:08:8b:55:
92:ed:a2:51:c1:08:69:a7:65:55:8a:d7:8d:29:e5:b6:0a:f9:
10:14:2d:50:71:22:ac:0e:97:7c:6e:c2:aa:2b:0c:64:f7:21:
9e:49:c7:19:4f:c4:a5:ba:9a:10:29:fc:33:51:a1:00:fd:86:
1f:ee:f7:de:cf:25:43:53:9c:fe:7d:8f:38:f9:9b:48:4e:ed:
66:51:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:15 2026 by rpki-client