Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146645.roa
File: AS146645.roa (raw, json)
Hash identifier: 5c/dEVKA5ZHu4eIWEIbhptHkg7rq01zLN4Che84LMm8=
Subject key identifier: 73:9F:0D:4D:D4:C8:52:72:0B:2C:98:E4:86:5C:D4:E3:B7:16:52:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7728C3023F18C65FF5332096AC73B5D99F6B0466
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146645.roa
Signing time: Mon 25 May 2026 01:38:26 +0000
ROA not before: Mon 25 May 2026 01:33:26 +0000
ROA not after: Mon 24 May 2027 01:38:26 +0000
asID: 146645
IP address blocks: 240a:af9b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:28:c3:02:3f:18:c6:5f:f5:33:20:96:ac:73:b5:d9:9f:6b:04:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:26 2026 GMT
Not After : May 24 01:38:26 2027 GMT
Subject: CN=739F0D4DD4C852720B2C98E4865CD4E3B71652CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:cd:5b:4d:22:8d:da:06:de:8e:f1:39:92:
a1:8d:30:14:cf:ab:92:20:9d:96:88:13:d4:65:f2:
bd:e2:10:30:d6:fd:43:32:f3:19:2a:96:2f:94:0f:
97:5c:be:ea:a6:ad:b2:57:46:e5:fb:c0:16:8d:fe:
a0:4c:f5:89:12:f0:ba:0b:02:8a:d1:df:df:ee:63:
46:2b:d2:38:17:41:fd:36:b6:46:e0:7f:8f:1f:33:
ca:49:fc:4c:3a:af:c0:aa:cb:2b:98:3d:83:4e:a2:
32:f7:f6:d2:74:8d:6d:6e:38:e4:61:e5:81:68:80:
09:f8:5d:21:27:2a:43:d0:de:69:e0:97:04:fa:6a:
0c:12:3a:e7:b7:90:90:6d:37:ed:b3:80:ca:55:09:
a4:c3:4b:19:97:26:e5:28:9c:34:16:fd:56:a8:2c:
22:42:b2:77:e6:28:b5:46:6c:b4:42:34:10:ab:b0:
ef:d2:12:1f:39:21:dd:cb:65:f9:1b:84:db:db:2d:
86:3d:83:9a:da:e4:c0:df:a7:b0:e5:b1:73:ff:a9:
d8:03:43:fa:26:26:2d:3b:89:f9:33:02:71:e9:9b:
48:f4:7d:ff:0b:73:e0:6f:90:16:2e:26:11:91:e2:
a9:6b:11:cc:e2:2c:d5:54:7c:d6:d2:32:ee:63:9e:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9F:0D:4D:D4:C8:52:72:0B:2C:98:E4:86:5C:D4:E3:B7:16:52:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af9b::/32
Signature Algorithm: sha256WithRSAEncryption
95:39:42:b3:5c:aa:8b:51:a1:b7:6d:8f:5b:5b:a7:70:d4:76:
65:1c:a5:44:a2:7e:64:16:c6:6c:ec:17:f2:4c:3e:30:6e:f7:
c1:05:ea:56:3a:a5:fb:0b:bb:ba:17:b6:6e:08:1d:b9:04:4b:
12:d8:61:00:3f:f3:b5:bf:c8:98:04:a6:30:98:75:5d:15:15:
b8:1b:9f:bf:8b:96:f3:07:b5:08:47:28:86:ef:a3:89:42:5f:
02:57:83:9b:61:78:a8:99:24:49:1e:24:a9:38:d3:b9:22:ad:
13:9e:16:28:da:32:d7:31:80:4e:04:12:43:25:3a:83:30:4b:
ae:21:4b:da:23:60:ee:ff:b8:12:c2:19:1c:e2:cb:02:fb:1e:
a7:88:c7:22:08:a8:73:77:82:f8:b9:42:50:b2:75:e3:2b:2e:
73:0f:b1:10:9e:ae:a2:75:79:1b:36:36:cd:26:28:90:cf:bf:
72:ab:53:c7:ea:2c:60:cf:a9:ad:ee:14:8b:86:ff:39:a5:c9:
a5:76:cd:c1:e0:5b:11:e0:3b:13:fb:56:42:08:b7:70:73:90:
75:c6:60:c5:56:95:f1:96:5b:6c:f1:6d:5d:70:89:48:61:7d:
9e:6e:5d:b8:a4:71:f1:7c:e8:03:a7:64:2b:09:4d:6c:71:37:
e6:ca:e3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:37 2026 by rpki-client