Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146636.roa
File: AS146636.roa (raw, json)
Hash identifier: P50PHX9HvgALGd2cCL6roVqHboTJUdoH7X9QlSOVaQ4=
Subject key identifier: CE:F6:A6:31:7E:33:D8:B9:95:15:A8:D3:0B:D1:A8:C8:8B:9E:37:EA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D667A6E3A559B517C0BB489BA42141F4FC84721
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146636.roa
Signing time: Tue 26 May 2026 01:13:07 +0000
ROA not before: Tue 26 May 2026 01:08:07 +0000
ROA not after: Tue 25 May 2027 01:13:07 +0000
asID: 146636
IP address blocks: 240a:af92::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:66:7a:6e:3a:55:9b:51:7c:0b:b4:89:ba:42:14:1f:4f:c8:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:07 2026 GMT
Not After : May 25 01:13:07 2027 GMT
Subject: CN=CEF6A6317E33D8B99515A8D30BD1A8C88B9E37EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:f0:7a:ab:15:a5:24:65:dd:ae:6d:69:b1:
a8:6c:8e:fc:82:c3:8d:53:b2:c4:12:20:35:14:b3:
98:e8:e4:68:e9:0c:42:29:af:40:b5:b5:95:6b:45:
18:b5:25:3d:23:d4:7f:86:93:51:92:3c:43:f3:13:
74:c6:99:ca:f3:27:42:60:d2:a9:a0:ab:6a:b5:89:
44:ea:dd:67:76:10:35:c6:c9:2c:cd:b8:a5:75:ab:
33:17:5f:74:b4:fa:49:30:1d:5e:16:a1:a4:5a:dd:
74:9c:6a:ce:6e:db:65:60:c2:49:bf:77:97:ff:0f:
af:39:6b:0a:f6:14:b0:58:94:fc:18:d6:83:f5:88:
19:2e:45:3c:ef:b0:ea:b7:c2:c4:2f:00:81:8c:09:
2f:f6:4a:1f:c4:70:74:38:33:32:33:22:99:a5:ff:
e5:e8:7c:e6:3c:c9:06:13:61:00:38:b1:7e:03:5b:
60:c3:d6:83:55:06:35:d6:79:29:66:c2:e2:73:c6:
a3:ff:93:d5:16:f1:d1:69:6e:c7:10:94:f7:4b:8c:
3f:29:a3:53:2b:58:05:4e:56:7f:e6:72:bd:1e:f4:
ba:54:fb:a9:db:eb:39:6c:1e:bf:96:c5:36:5c:24:
ed:61:ed:d8:cf:5b:56:58:51:26:83:c8:f4:22:c6:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:A6:31:7E:33:D8:B9:95:15:A8:D3:0B:D1:A8:C8:8B:9E:37:EA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af92::/32
Signature Algorithm: sha256WithRSAEncryption
9c:86:26:47:bb:35:8c:bd:4c:1c:37:27:2e:9e:93:d5:d1:ed:
2d:65:c6:db:8f:00:18:a1:6c:55:6d:ba:b0:a1:3b:00:b9:05:
88:79:0d:d1:76:a8:34:34:a6:a3:aa:1f:62:a1:48:13:41:3a:
c4:80:72:e0:cf:01:81:15:8d:f0:59:df:db:8c:bc:f4:dc:a0:
55:65:8d:a2:b0:df:b1:66:48:15:e1:95:f3:f1:fe:04:3e:2e:
8a:63:79:0d:6d:e8:c2:ea:e3:a9:7e:41:a5:8b:6f:22:35:d9:
e5:c1:9d:83:41:62:37:22:28:26:d4:da:c8:99:1a:7d:1e:4d:
99:a2:3a:63:39:01:90:a2:4f:68:91:68:16:38:63:0e:80:ba:
6c:ee:d2:45:4e:e6:78:8c:e8:2d:e1:ee:85:d8:b3:6c:0d:69:
9d:01:9e:7f:df:e1:9d:e7:a9:a3:4e:f3:7d:54:07:0b:1b:66:
32:69:46:52:1b:6a:00:f0:1d:62:f1:f1:3a:16:c3:b7:b2:50:
2c:29:ed:ca:17:be:73:04:ff:5a:c1:71:84:4f:8d:6b:87:9a:
8e:3f:cd:c5:3a:0a:a5:50:84:82:7e:93:08:94:c4:62:a3:ef:
21:db:3d:2c:ac:9b:f1:fd:0e:1d:77:68:2e:92:d8:f3:22:cc:
ae:86:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:27 2026 by rpki-client