Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146635.roa
File: AS146635.roa (raw, json)
Hash identifier: Kok2Pk15NnZXGRzQWI7EVnakrJFTmTiLwEvXRfcseuw=
Subject key identifier: A8:D2:98:B4:A0:30:13:B7:15:78:DB:99:E3:BD:10:61:B1:8A:16:B4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3E706FDA777357DB04CCF04A1F4842BF3F31AB56
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146635.roa
Signing time: Mon 25 May 2026 02:22:25 +0000
ROA not before: Mon 25 May 2026 02:17:25 +0000
ROA not after: Mon 24 May 2027 02:22:25 +0000
asID: 146635
IP address blocks: 240a:af91::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:70:6f:da:77:73:57:db:04:cc:f0:4a:1f:48:42:bf:3f:31:ab:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:25 2026 GMT
Not After : May 24 02:22:25 2027 GMT
Subject: CN=A8D298B4A03013B71578DB99E3BD1061B18A16B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:c2:02:2f:ed:49:11:4d:db:f7:81:00:e0:
85:02:f8:06:46:93:5a:ec:7c:4e:35:f9:29:05:ed:
0e:d1:25:ea:47:e4:56:db:63:f3:1a:00:25:86:45:
48:14:ee:38:41:40:7c:51:09:f7:b0:d4:4a:90:6e:
d2:b0:3b:43:0a:40:02:53:98:e0:b2:42:59:f6:8a:
71:48:31:e2:e7:7a:d9:32:b9:47:f3:0f:7c:7e:17:
ef:dc:7b:e1:91:64:e4:ac:63:85:5f:42:f0:08:3f:
d7:1c:58:51:ac:dd:02:1f:66:18:e5:3e:65:ce:3e:
44:98:21:bb:10:46:f6:e7:28:10:5d:7f:34:6d:f0:
c9:7f:43:f5:96:1b:4f:30:32:85:41:2d:23:83:c3:
4f:ee:cf:7e:dc:16:3e:4b:da:13:6f:cd:58:25:5f:
46:55:35:c5:cb:d4:a4:34:ca:43:3f:20:e1:0f:f2:
70:c4:67:ec:de:62:b8:66:6f:8a:91:19:c5:2e:40:
24:5e:5b:69:8e:92:c4:a7:9e:5d:59:b1:7c:f4:09:
88:8a:75:b4:98:6b:f7:a0:e0:5d:e4:18:ba:66:c9:
e4:f5:a9:a2:b4:85:71:d5:cc:ca:72:dd:97:0c:76:
6c:7c:20:73:dd:db:94:1e:cb:5e:b3:01:da:15:11:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D2:98:B4:A0:30:13:B7:15:78:DB:99:E3:BD:10:61:B1:8A:16:B4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af91::/32
Signature Algorithm: sha256WithRSAEncryption
26:69:c5:55:60:c3:52:c1:34:e1:d4:b7:60:d7:81:3a:6d:87:
b2:5b:75:3f:68:5a:53:ee:fb:fb:1d:fe:c3:b1:57:6d:79:cd:
e3:80:5d:7b:bf:c9:2e:2a:1d:cb:36:4d:28:ae:de:57:53:9f:
53:96:31:2d:dd:f3:18:28:31:83:1d:35:fb:c3:fd:25:51:0a:
67:32:be:3f:c0:5b:c1:8b:a7:b6:91:34:44:22:6e:b7:19:6c:
a1:04:8a:64:fd:d0:00:96:9a:21:59:0b:60:0d:f0:29:e3:97:
87:db:57:db:58:08:96:18:52:ab:04:8a:7b:c3:0e:26:cf:36:
9c:7a:74:00:2d:8f:eb:b1:0f:5a:7b:83:71:5c:f8:a9:c2:87:
de:28:f4:0b:a7:44:b5:19:a5:74:ce:8a:29:86:24:fb:8c:4d:
8a:f0:6a:7d:e1:82:eb:a9:2c:7d:0f:c0:b4:09:2a:87:50:e5:
14:d0:09:c4:94:b8:10:57:05:f8:50:90:0d:1a:10:a5:9c:68:
09:29:70:f0:49:98:41:33:c8:ad:0f:ef:25:92:48:c0:61:82:
ab:1d:91:ef:cb:7b:9f:03:2b:fd:d9:ff:9c:6a:33:4d:8a:23:
3b:48:c1:eb:06:e5:a5:d4:33:7a:93:ef:5b:58:67:c7:74:02:
ba:b6:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:19 2026 by rpki-client