Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146629.roa
File: AS146629.roa (raw, json)
Hash identifier: gleoTonXw2D335P5XgdKpMJoRoCgznrTfgsxiNul9Uw=
Subject key identifier: FC:72:A0:F5:E4:D6:A2:4A:07:DE:1F:57:E1:5A:EC:DA:D5:3A:26:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 177B95F9E1B629E6D52CAEE8B5A988442437D132
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146629.roa
Signing time: Mon 25 May 2026 02:22:13 +0000
ROA not before: Mon 25 May 2026 02:17:13 +0000
ROA not after: Mon 24 May 2027 02:22:13 +0000
asID: 146629
IP address blocks: 240a:af8b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7b:95:f9:e1:b6:29:e6:d5:2c:ae:e8:b5:a9:88:44:24:37:d1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:13 2026 GMT
Not After : May 24 02:22:13 2027 GMT
Subject: CN=FC72A0F5E4D6A24A07DE1F57E15AECDAD53A2633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:81:ad:ba:6a:37:67:b5:42:a0:c9:18:0b:
07:7d:1d:0b:e3:72:f3:88:57:86:d3:7f:4b:24:e0:
09:d9:9a:4f:aa:44:ca:8d:83:54:5e:73:a9:be:87:
4b:b1:4b:90:7e:a8:42:d5:73:99:ad:44:7a:9b:99:
b8:be:88:14:78:1d:f0:f7:4e:3a:84:ad:c8:5f:5d:
eb:d6:6e:f9:9b:3e:cf:5b:44:dc:65:4e:91:9c:61:
c7:6a:3e:8a:18:91:17:61:ec:f8:c7:43:83:0f:eb:
9f:77:cc:41:97:be:0d:91:a8:f7:fc:37:ba:17:d7:
12:15:81:e4:09:4d:34:99:d5:7a:4b:d9:21:bd:60:
79:ae:40:18:84:75:d7:85:8f:3f:98:5c:14:3c:a6:
1f:d7:c7:56:06:79:d2:a9:98:25:88:25:c7:88:97:
32:17:23:9b:1c:bf:4d:2f:d9:02:1d:a7:f3:cb:4b:
5d:a7:c2:fc:47:17:f3:89:0f:00:af:fe:6a:f8:46:
2e:e5:ad:18:10:60:7e:3a:f9:43:bd:3d:87:8a:de:
36:ca:6d:e7:1d:7c:9e:31:95:15:f4:19:d4:ef:a9:
27:25:73:9a:ac:98:96:6d:07:a3:fc:f0:0b:8e:60:
71:ab:fb:e9:d7:e0:af:17:bc:4f:62:ed:89:39:d4:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:72:A0:F5:E4:D6:A2:4A:07:DE:1F:57:E1:5A:EC:DA:D5:3A:26:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146629.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af8b::/32
Signature Algorithm: sha256WithRSAEncryption
32:b6:4e:05:2c:42:f7:41:10:9b:85:7e:4c:4f:e7:e1:0e:a5:
18:97:42:04:5c:76:3d:ea:7f:3c:e1:c1:e4:a6:f0:64:95:52:
64:37:72:f6:78:8d:54:ac:2e:4e:bd:09:1b:46:50:2b:27:2d:
44:9c:a7:e2:41:86:a1:9f:d7:c0:59:3f:b7:d4:f7:9e:d5:4e:
8a:ae:f4:f7:b3:4b:8e:8f:92:a7:09:5c:00:42:ee:fc:36:26:
14:39:23:ab:1a:20:80:e5:66:cc:eb:b9:e4:c7:c3:ee:40:2b:
11:75:2f:64:97:8e:55:b1:7b:a1:b4:51:74:bf:74:74:14:35:
b8:dd:b1:d3:c0:fe:a3:0c:aa:30:38:8b:1a:51:c6:a6:a7:4b:
00:d6:4a:f1:24:20:9c:d5:ef:30:12:4a:f6:76:ac:82:5d:de:
2b:96:78:b9:f6:42:d0:48:52:19:7f:7e:ab:9d:7a:12:76:5e:
e7:6f:09:64:f1:be:d1:d3:ad:79:b5:5e:76:6d:49:1b:e3:6f:
eb:c5:2c:bf:90:ef:b3:7d:ac:b2:87:61:85:f7:3f:9f:a2:63:
b9:5d:4e:4d:6c:3c:24:94:a5:52:a4:8a:1f:86:e6:de:53:e0:
5b:34:05:04:39:59:13:69:a7:22:6b:3d:f8:d6:b7:a3:ec:d7:
46:d9:21:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:41 2026 by rpki-client