Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146630.roa
File: AS146630.roa (raw, json)
Hash identifier: bW45JWx8qMAP/HN0pGN44MMCa9rbExNrZ2KkRAUKXn0=
Subject key identifier: E2:9D:7B:8B:11:B7:5C:BA:D5:AC:AB:C8:3F:07:53:C2:15:6B:E0:3B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C37ED3525C607A8DB578D9924E6735DAF50C9AE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146630.roa
Signing time: Mon 25 May 2026 06:49:10 +0000
ROA not before: Mon 25 May 2026 06:44:10 +0000
ROA not after: Mon 24 May 2027 06:49:10 +0000
asID: 146630
IP address blocks: 240a:af8c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:37:ed:35:25:c6:07:a8:db:57:8d:99:24:e6:73:5d:af:50:c9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:10 2026 GMT
Not After : May 24 06:49:10 2027 GMT
Subject: CN=E29D7B8B11B75CBAD5ACABC83F0753C2156BE03B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:e3:12:6d:64:1e:65:47:ed:c6:9e:ce:ff:
3c:27:ff:3a:50:7a:f3:0c:4a:15:b3:78:df:19:57:
fa:26:c9:a1:51:3b:58:96:31:63:43:d2:9f:73:89:
9e:95:c9:a0:d7:64:a7:af:e8:49:73:fc:15:2c:d9:
6e:5f:dd:2a:04:39:a9:68:e7:de:58:86:89:f2:e9:
91:6d:67:11:ea:af:38:7f:8c:b4:4b:2e:a0:63:50:
56:e8:ab:92:7f:77:f1:70:ee:44:d7:92:90:36:8b:
a3:24:6c:1a:bd:2f:d7:ff:1a:5d:be:49:07:d1:1c:
d0:80:fe:fe:0a:a3:3e:e5:0e:dd:1e:ca:5a:78:04:
f0:6c:ff:b0:30:d0:06:11:19:6e:74:5c:46:c2:bc:
ed:cc:a8:1d:85:7b:e0:0f:b6:b0:61:c2:fe:75:49:
23:73:8a:1a:a6:48:0b:61:e5:88:e3:75:1d:82:4b:
03:77:6d:da:f9:49:c8:69:56:c9:0a:b9:15:68:70:
ae:49:a0:8e:a8:ed:4d:de:ea:e5:86:25:a5:91:1b:
b5:28:a9:bb:5e:17:05:a1:0a:58:d9:6e:ab:96:cf:
60:58:fc:9f:da:7b:c6:2c:07:87:a1:3f:77:09:e6:
d5:79:92:85:46:92:f7:3a:e4:90:05:10:f3:60:b3:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9D:7B:8B:11:B7:5C:BA:D5:AC:AB:C8:3F:07:53:C2:15:6B:E0:3B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af8c::/32
Signature Algorithm: sha256WithRSAEncryption
9b:00:d0:bd:93:c2:61:f4:0f:37:45:34:31:1d:4d:a2:82:6d:
a4:69:cc:ec:41:9b:65:92:7b:69:8f:18:ce:1c:e8:a1:e6:68:
d4:e1:5a:dc:ce:43:1d:cb:05:f1:34:75:53:ea:a6:37:9d:47:
21:42:1a:5b:27:7e:b2:56:f6:e6:d0:6c:34:de:77:ba:26:e0:
61:11:40:99:24:06:b9:dc:f9:42:6b:f5:7f:1f:fd:d3:d5:f2:
9a:3b:af:58:c5:fc:ce:7e:39:3b:bb:fc:94:74:db:f4:7d:76:
20:b2:d3:be:e2:bd:83:fa:e5:14:fb:53:ee:c1:aa:43:3b:74:
d8:7d:94:61:06:7f:a4:7f:44:11:2a:99:72:15:26:00:61:a5:
98:e3:15:ca:a5:c6:bc:27:f7:96:f2:04:33:88:6b:b3:96:2c:
12:b9:8c:45:12:a5:d4:15:c5:20:9f:f0:b9:a5:9b:b8:bb:8c:
87:d9:40:23:38:5c:46:30:21:69:fd:d6:74:66:d4:c8:80:f9:
d0:01:7a:a8:bd:3c:f0:04:a5:13:3e:2b:a5:0d:4b:57:55:2c:
4f:aa:05:3a:5e:43:a3:fe:49:3a:8a:21:00:81:ec:91:5f:08:
ac:98:17:f4:5c:de:e6:fb:11:8a:77:aa:e6:10:c5:0d:05:8a:
0a:eb:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client