Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146653.roa
File: AS146653.roa (raw, json)
Hash identifier: N4db5s27O9BRH15EqmiViGCHVVRvZrEcaCswkthzmXE=
Subject key identifier: 98:AC:C3:F9:DF:7E:BF:81:2C:E4:22:0C:81:DF:DA:3A:D7:F8:BC:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F70AAC9914B15FD8ECF3793A580769370E7B120
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146653.roa
Signing time: Mon 25 May 2026 06:28:25 +0000
ROA not before: Mon 25 May 2026 06:23:25 +0000
ROA not after: Mon 24 May 2027 06:28:25 +0000
asID: 146653
IP address blocks: 240a:afa3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:70:aa:c9:91:4b:15:fd:8e:cf:37:93:a5:80:76:93:70:e7:b1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:25 2026 GMT
Not After : May 24 06:28:25 2027 GMT
Subject: CN=98ACC3F9DF7EBF812CE4220C81DFDA3AD7F8BCA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:b4:ac:36:6e:72:2f:a9:a3:cc:d1:b3:c1:
86:ad:d5:93:6f:c7:9e:6d:35:e8:e5:e9:b1:f9:76:
93:77:31:b1:c4:85:37:d4:32:c3:b9:62:5e:a1:4d:
ca:02:19:5e:f1:ff:6a:6a:97:02:55:62:1c:d9:90:
28:f4:ac:4a:ac:0d:ab:95:30:01:15:81:b7:a2:05:
07:8b:61:c4:fb:4c:bf:5f:53:ff:ad:0c:e4:ff:49:
0a:01:40:28:89:19:7d:12:04:a1:28:cb:1d:1e:70:
eb:90:d0:49:0a:a0:fe:14:15:d2:e5:21:8b:d6:8f:
90:70:44:e8:f5:d8:ca:02:9e:0f:79:c0:19:30:d4:
91:1f:de:72:28:43:2f:24:35:f6:ec:f3:0b:58:fe:
41:5b:35:a1:1b:04:76:b8:e1:fa:21:5d:14:29:18:
84:9b:cf:f5:68:16:3a:db:24:84:af:e3:27:56:ad:
26:25:c3:e8:6a:50:72:be:47:7f:8a:a1:f1:c7:2d:
df:6b:9d:33:a9:37:95:2b:cd:7c:60:a1:2f:7c:d4:
4b:12:6c:58:81:1b:4a:5d:3f:94:19:41:91:4b:2a:
3c:7b:4b:26:0f:a8:b8:00:d3:5e:4c:e0:2a:f6:0c:
6d:a4:0a:3f:c5:f1:5a:4d:41:28:a5:a0:2c:9e:2d:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:C3:F9:DF:7E:BF:81:2C:E4:22:0C:81:DF:DA:3A:D7:F8:BC:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146653.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afa3::/32
Signature Algorithm: sha256WithRSAEncryption
4b:cc:61:04:c1:e8:b1:84:18:d6:70:e3:ce:38:e0:fc:dd:22:
81:8a:32:d2:9d:61:4f:d4:1d:cd:85:35:48:b1:08:e3:a5:5b:
27:fc:12:a0:fa:9b:9d:1b:0e:93:37:27:d1:bf:a9:50:84:03:
7b:8a:1b:42:4f:40:24:ce:1c:84:11:64:2d:04:9e:fb:22:e1:
5c:bd:46:4d:98:c7:0a:db:e1:e4:3f:23:4e:02:58:3b:65:86:
9b:3d:6c:de:22:e4:cb:9d:35:ea:23:67:00:6f:c4:f1:40:3c:
c6:43:59:2b:c9:d1:f1:d8:bd:f9:2c:bd:a6:19:41:d3:31:b8:
52:b6:8c:13:66:38:c7:7e:e6:61:6a:1d:56:26:e2:86:48:26:
65:35:6d:6f:48:3b:19:6d:1d:b0:79:2c:f6:73:7f:c3:ec:68:
54:d1:a9:bc:49:e6:d5:31:45:d7:66:5a:27:e3:6a:fc:f1:83:
30:cc:84:95:e1:2c:08:c8:1d:e3:3d:06:e5:95:07:65:b8:33:
7b:6e:2e:e6:fd:fe:9c:b7:9e:af:90:a4:74:9f:7b:25:c6:4d:
60:79:09:fb:5f:09:fc:4e:73:c6:ad:8c:31:35:0d:f8:d6:fe:
02:31:36:07:56:6b:00:43:ed:82:14:30:16:a9:e7:ae:b5:c7:
fa:20:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:42 2026 by rpki-client