Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146640.roa
File: AS146640.roa (raw, json)
Hash identifier: lXbIW4kHxbhLXEHxuUZy7v+lZ1K3rZ1X5ChtdRen5jA=
Subject key identifier: DC:34:8D:9C:AA:26:58:B2:8D:A5:9D:DC:70:FB:1B:0C:4C:1A:5F:0B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0E424E52025703C32CE49D399F97A1320B7B1A29
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146640.roa
Signing time: Mon 25 May 2026 01:51:14 +0000
ROA not before: Mon 25 May 2026 01:46:14 +0000
ROA not after: Mon 24 May 2027 01:51:14 +0000
asID: 146640
IP address blocks: 240a:af96::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:42:4e:52:02:57:03:c3:2c:e4:9d:39:9f:97:a1:32:0b:7b:1a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:14 2026 GMT
Not After : May 24 01:51:14 2027 GMT
Subject: CN=DC348D9CAA2658B28DA59DDC70FB1B0C4C1A5F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:12:67:a3:4f:85:b8:db:73:4a:bd:ef:66:
a7:f2:82:fa:c3:ec:18:10:01:03:d5:55:90:1b:2c:
3d:91:2f:4f:53:e3:58:79:7e:8c:fa:72:93:99:0d:
92:2f:c1:f7:dd:95:3d:05:f8:8b:60:45:e1:0f:25:
77:a1:2c:72:0f:3c:f4:fa:bf:6e:12:a9:b6:23:1a:
a9:b1:78:fa:90:dd:92:82:d8:ca:c3:09:90:68:2c:
89:e2:fd:04:4a:74:f5:ed:fa:21:b4:e5:90:a8:62:
a7:55:36:3b:0c:0b:1d:f9:36:b3:d1:e8:33:aa:a6:
ae:60:67:59:9e:43:f1:39:b5:07:03:40:96:e5:0b:
f0:0a:02:69:d6:a7:45:c9:17:25:04:99:f5:39:44:
a9:e6:9c:1b:5d:0f:40:30:ad:82:3b:00:d5:5e:e2:
cb:77:c2:88:df:1f:59:d2:7f:3c:29:2a:a9:15:0d:
20:34:d0:ee:e0:c4:44:ab:f8:f2:e4:96:0a:f2:b1:
cb:a5:d2:5a:b0:aa:2c:5b:0e:53:c5:36:d1:62:08:
11:1a:76:d5:a1:fd:6e:af:18:42:05:e3:c3:e3:c9:
8a:51:9c:16:a9:90:3a:fd:4d:b7:9a:99:6a:0c:68:
fa:e4:f6:d5:21:b6:e7:1e:8b:d8:01:4b:87:d8:5e:
1c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:8D:9C:AA:26:58:B2:8D:A5:9D:DC:70:FB:1B:0C:4C:1A:5F:0B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146640.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af96::/32
Signature Algorithm: sha256WithRSAEncryption
50:38:a8:58:39:c4:88:7d:49:6e:8c:68:53:16:f9:ff:b6:45:
8d:66:b6:5a:66:da:cc:14:d2:d9:58:29:b3:e7:d0:ca:4b:db:
44:a6:51:c4:c1:f8:5a:da:b4:e0:88:6b:6d:61:7e:6f:82:86:
9a:86:72:c8:92:10:ef:09:23:a8:92:1a:34:66:9f:75:d9:f5:
06:14:0d:a9:b8:fd:38:6c:e5:ad:38:77:0f:9b:05:c4:5d:c7:
6b:8f:cd:06:8c:85:b9:5a:86:a6:03:01:f5:f4:4b:5b:57:84:
87:aa:c1:56:10:2d:6b:ec:03:1f:ae:9d:fc:4d:f1:19:37:ed:
ec:ea:45:64:70:97:62:44:ee:11:fb:2a:cc:43:b5:51:f3:2c:
eb:da:28:57:2d:13:0a:ec:81:84:c3:0f:3e:37:ca:d9:11:c9:
15:ac:14:6f:e9:c5:18:76:1e:28:d2:05:bb:be:31:30:56:38:
9f:e7:74:31:81:75:f1:fa:8c:a2:4d:a3:b9:6d:89:42:35:d2:
0f:bf:90:6e:55:3d:c8:3c:97:ec:91:78:ed:6a:da:a6:19:6d:
b6:3c:ef:86:72:d7:3c:cb:6c:c6:10:06:05:d3:ae:fa:c1:ca:
ac:db:d6:6f:aa:32:9e:a3:eb:4b:5e:d2:c0:b9:d7:39:35:b7:
07:a7:36:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:55 2026 by rpki-client