Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146628.roa
File: AS146628.roa (raw, json)
Hash identifier: FKbh19/Oez5xskzhRyw+Mbbtkp9vJUXYMWtFR8P0CXY=
Subject key identifier: B9:1D:C1:BE:6B:C1:96:B8:43:69:D7:78:F5:04:5D:C6:23:28:A1:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 077A3E56849EA591A95F47806E94E0DED677E71E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146628.roa
Signing time: Fri 22 May 2026 06:58:15 +0000
ROA not before: Fri 22 May 2026 06:53:15 +0000
ROA not after: Fri 21 May 2027 06:58:15 +0000
asID: 146628
IP address blocks: 240a:af8a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:7a:3e:56:84:9e:a5:91:a9:5f:47:80:6e:94:e0:de:d6:77:e7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:15 2026 GMT
Not After : May 21 06:58:15 2027 GMT
Subject: CN=B91DC1BE6BC196B84369D778F5045DC62328A11C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:9b:02:92:40:9c:50:35:05:1f:b9:51:72:
c1:1b:84:38:7c:61:47:f7:c7:ab:7c:40:63:46:93:
88:62:38:d4:b4:75:37:4c:ab:e0:25:2b:fc:57:28:
59:13:cc:81:b1:6f:8e:93:56:c6:eb:f5:7b:19:a8:
50:f3:94:b7:d6:db:b3:4d:92:59:79:1e:84:32:d3:
c8:64:d4:ea:62:30:b2:2b:2f:73:9f:84:99:67:0a:
f1:73:b7:17:ec:a7:94:5f:a2:8a:87:13:98:97:b1:
b6:3e:ba:d6:e1:bb:28:8f:f4:31:8f:46:6b:44:1a:
15:a1:05:6a:2d:b2:e2:31:db:d1:16:f8:af:4c:1c:
1b:da:85:28:80:25:fc:21:d2:e4:29:09:0d:e8:40:
3b:73:bc:1d:8a:38:af:09:15:7c:6b:95:60:bd:d8:
c3:d0:6c:a2:e4:3e:da:d0:41:d0:eb:89:09:0a:c1:
2e:b9:13:cf:88:e3:62:b4:e5:49:ad:dc:86:0b:ec:
58:50:ac:0e:89:26:12:c2:25:7d:51:1f:d4:36:34:
37:c9:e7:ff:f7:37:71:05:92:42:a1:02:d5:e3:59:
9b:ea:5b:e8:aa:42:24:d0:0a:27:b6:7c:94:e9:78:
49:32:d7:d3:6c:e9:ab:ba:a4:a2:49:96:74:e9:91:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1D:C1:BE:6B:C1:96:B8:43:69:D7:78:F5:04:5D:C6:23:28:A1:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146628.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af8a::/32
Signature Algorithm: sha256WithRSAEncryption
b4:ab:6f:c2:6a:01:44:18:de:0e:d0:51:1f:20:7b:1b:c7:4a:
65:b3:bb:60:95:27:19:50:c5:70:17:45:39:9e:37:af:3a:75:
d5:46:12:1c:0c:04:9f:5a:aa:2b:fb:bd:53:0e:95:97:13:f2:
76:f5:3c:4f:5e:53:cd:28:05:7b:97:5c:0e:0a:55:f6:0c:67:
e6:e8:61:f4:0d:2a:d9:07:b6:d6:f5:44:a7:81:80:e8:c1:40:
9d:0f:d9:58:6f:ac:52:55:fa:c5:cb:5d:3b:57:03:e4:e1:7f:
63:3d:ee:16:2d:61:10:20:db:e7:62:9e:bc:cb:3e:72:eb:28:
ee:f7:4d:7f:85:46:da:ed:fd:d7:05:9d:3e:94:ca:45:a5:cb:
02:d4:8d:fa:df:cf:1c:e4:6e:10:8e:f5:42:7b:c7:b8:ae:1e:
fb:36:72:e3:eb:80:6e:87:0a:53:73:1c:84:68:33:a6:63:aa:
a4:87:32:2d:cd:bd:f6:42:28:bf:81:f1:4b:0b:40:b1:e1:6c:
59:3c:f2:51:a8:30:0b:1f:b0:39:d4:d5:e2:c7:b8:40:60:8b:
a9:32:99:81:a0:92:a0:f9:33:d0:ba:39:a8:24:a2:8f:b4:74:
e3:39:06:98:13:30:74:b1:47:b7:3b:22:88:98:48:09:a3:92:
3a:66:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:54 2026 by rpki-client