Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146646.roa
File: AS146646.roa (raw, json)
Hash identifier: 3X1ZBsy3kGS/KVzWhR93zVpOD3qiONy1On3H6xc1vs8=
Subject key identifier: 07:B1:09:81:02:43:E2:D5:D0:B2:64:E4:FE:ED:2D:97:83:CC:F6:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 633C7DAA65FBD3E0109512F4502C3869D77F1A4F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146646.roa
Signing time: Tue 26 May 2026 02:35:15 +0000
ROA not before: Tue 26 May 2026 02:30:15 +0000
ROA not after: Tue 25 May 2027 02:35:15 +0000
asID: 146646
IP address blocks: 240a:af9c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3c:7d:aa:65:fb:d3:e0:10:95:12:f4:50:2c:38:69:d7:7f:1a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:15 2026 GMT
Not After : May 25 02:35:15 2027 GMT
Subject: CN=07B109810243E2D5D0B264E4FEED2D9783CCF637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:08:00:46:21:cf:77:b0:a6:cf:48:fd:f1:
e8:ed:91:53:4e:59:70:fb:97:f1:72:4e:ef:38:c7:
b0:0b:26:b6:7a:e9:1b:fc:82:52:b5:88:4b:44:c9:
35:6c:01:11:c0:37:5b:c6:6d:f7:a6:a9:3e:85:96:
bf:b3:9c:7a:ac:0d:a3:aa:76:d9:00:66:c1:fe:3d:
6c:d2:16:e7:bf:ef:1e:66:75:98:6e:93:e4:72:cc:
00:01:4e:39:06:24:43:30:57:ff:e4:bc:cd:73:4a:
db:c3:b2:9a:e9:cf:d3:40:ef:92:21:6a:cd:ae:0e:
23:25:cf:46:f5:96:0d:d8:19:5e:8d:4f:78:50:9e:
e0:4f:61:41:83:f6:a5:1f:e6:e6:ea:f6:b7:2d:46:
59:a2:76:db:62:38:fa:6a:c2:11:e5:e1:8c:37:1e:
a6:9c:eb:2a:15:58:59:1e:ed:82:28:50:63:14:ea:
01:31:d4:9d:10:19:b5:4e:d5:b3:2c:42:55:0e:e4:
1c:77:08:5c:8e:ed:e8:6e:29:88:e7:48:91:65:b6:
a8:08:84:5d:95:1d:c4:02:9f:3b:81:ad:c1:05:69:
30:97:5d:2d:7f:db:95:f3:c2:c9:53:ec:38:a8:b4:
fc:18:29:8d:c4:27:03:c0:88:db:39:56:23:48:72:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:09:81:02:43:E2:D5:D0:B2:64:E4:FE:ED:2D:97:83:CC:F6:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146646.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af9c::/32
Signature Algorithm: sha256WithRSAEncryption
19:35:89:ac:4b:10:98:ea:9e:df:c8:c2:b7:d3:4a:1f:c7:27:
73:90:7f:11:83:2c:6d:a2:8e:61:6c:b1:fb:2b:2f:24:59:61:
32:ca:3b:49:1b:e2:fc:5c:1d:2d:93:ae:1a:75:2e:6d:64:dd:
79:88:3b:e8:1b:b6:c2:22:b0:49:44:9a:44:4e:df:53:1d:e2:
45:b2:2f:ae:5a:7f:43:62:66:02:d5:39:d7:02:1f:69:df:ff:
46:35:cc:2d:3c:9f:5a:6d:cf:80:66:68:55:95:1d:03:58:b2:
89:4a:ba:39:d6:43:1d:9a:6b:0d:c7:66:54:39:05:cd:ed:a2:
b6:24:96:d7:8a:c3:7b:4e:21:3f:49:b1:85:d3:15:55:c6:20:
51:69:6f:9d:f9:b7:9b:10:a5:6b:55:32:fe:8f:fd:b1:3d:44:
30:b5:14:a0:ab:71:7e:6a:65:69:bb:1c:79:e7:ac:fd:44:93:
98:c9:bb:9e:65:43:d4:24:a5:55:bb:cc:de:04:3a:71:e5:39:
81:2c:ef:aa:74:7d:21:2e:44:07:52:42:e3:7e:d2:7f:46:f5:
db:fc:45:18:1d:9d:a2:1c:ba:d8:7e:a0:69:e9:4d:ec:a0:51:
dd:2f:f6:b7:0d:ea:93:21:69:45:d0:ac:07:e8:68:95:d4:48:
ac:4b:14:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client