Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146627.roa
File: AS146627.roa (raw, json)
Hash identifier: z/WGpomj4BLov8bhmJU5yh46UqsYYTL/D+Fak26An7Q=
Subject key identifier: DA:26:11:47:39:D8:20:8D:79:6B:31:A0:23:B4:08:D4:5E:73:F7:65
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52B6CD101405D9FA897F4C7CBAB4D81DF34E1D82
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146627.roa
Signing time: Fri 22 May 2026 06:58:31 +0000
ROA not before: Fri 22 May 2026 06:53:31 +0000
ROA not after: Fri 21 May 2027 06:58:31 +0000
asID: 146627
IP address blocks: 240a:af89::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b6:cd:10:14:05:d9:fa:89:7f:4c:7c:ba:b4:d8:1d:f3:4e:1d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:31 2026 GMT
Not After : May 21 06:58:31 2027 GMT
Subject: CN=DA26114739D8208D796B31A023B408D45E73F765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:d9:e2:d2:ec:9b:b5:76:33:6f:73:18:77:
69:9b:ef:54:99:86:05:98:5b:9f:b7:66:e7:45:c0:
ac:73:8c:fe:9f:ac:aa:2e:da:1f:4a:65:3c:05:27:
16:cf:72:8b:d5:42:bf:bd:9b:0f:8b:6d:2c:17:e0:
03:97:9f:9f:c4:84:56:ab:02:d3:18:b2:90:fc:48:
40:44:02:49:0b:57:4f:06:21:5a:f7:de:85:38:95:
e5:ea:38:f8:e9:2e:43:d6:cc:cb:05:91:3a:80:7e:
90:a9:0b:f3:99:73:57:8c:d7:fc:a9:bb:d1:77:bd:
e9:ed:c1:58:2b:5a:31:76:93:0f:76:63:6d:be:15:
44:cf:bb:21:04:a9:23:af:a3:7e:4c:39:32:58:e3:
ad:d1:e2:9e:81:31:0a:be:f4:f3:e2:d4:89:20:7d:
7f:5a:84:23:d4:48:0a:dd:19:c1:a1:24:28:ea:9f:
38:ed:bb:91:3e:33:57:28:38:df:99:54:de:cc:3b:
d1:08:a0:7e:31:7d:ac:b3:51:1b:d2:3d:e6:f2:44:
9c:17:08:0e:76:ad:ec:4f:48:0e:8d:01:a9:ce:5f:
34:54:c9:ab:93:6b:ff:94:a0:13:45:b3:25:fd:f4:
56:18:f5:3e:7a:13:56:f9:05:f9:7e:27:4a:51:e1:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:26:11:47:39:D8:20:8D:79:6B:31:A0:23:B4:08:D4:5E:73:F7:65
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146627.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af89::/32
Signature Algorithm: sha256WithRSAEncryption
67:03:3f:c2:a5:ad:58:b7:88:c2:6c:9d:8f:42:22:45:e4:d6:
3f:80:da:c1:a4:08:2f:3d:83:4e:d7:ff:87:11:bf:50:4e:89:
65:55:13:b4:e2:b2:5d:c2:8e:4b:c3:38:f6:83:c3:fb:90:78:
6c:4e:bd:59:a8:7a:38:b1:ea:63:55:a6:52:d6:92:1e:24:bb:
cb:27:00:d6:62:de:39:d0:5a:33:c3:7e:6a:08:2c:5f:59:57:
ae:3f:38:88:cf:19:e3:3d:87:f5:a1:e1:09:bc:7d:ba:2b:34:
2b:0b:d6:5c:f9:c0:98:6c:f5:6a:2c:68:84:b4:1c:a8:66:02:
6f:77:99:bb:a7:86:e9:aa:e6:00:6f:61:fc:6a:a2:35:64:e6:
b2:db:a3:5b:fc:2e:31:2f:4b:c3:48:66:c8:3a:6f:6e:85:5d:
58:eb:91:9c:92:ab:e3:8f:73:7c:78:1c:5f:17:bd:dc:18:4e:
26:af:68:69:65:cb:cc:e7:12:b4:f7:a1:4d:50:53:27:fa:3a:
72:5c:49:37:12:45:f3:7b:14:d5:2c:c5:12:77:6c:0a:fa:fa:
37:4c:91:7b:29:71:ec:7b:2c:f4:ea:56:b4:6e:03:2f:fd:68:
97:c3:05:1b:f9:cb:43:e5:e1:05:e6:ae:b8:27:90:2c:e6:33:
50:62:8e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:42 2026 by rpki-client