Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146654.roa
File: AS146654.roa (raw, json)
Hash identifier: BNapU3WHeev31MCnxf9xhg845JdknlVQV7OmZPfmnxU=
Subject key identifier: A6:64:5E:95:47:4A:0B:6B:33:FA:64:45:B1:43:D9:63:CE:3A:CE:D6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 294AACB20B2072C29074A9A9D90E04E9128E013B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146654.roa
Signing time: Mon 25 May 2026 01:51:21 +0000
ROA not before: Mon 25 May 2026 01:46:21 +0000
ROA not after: Mon 24 May 2027 01:51:21 +0000
asID: 146654
IP address blocks: 240a:afa4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4a:ac:b2:0b:20:72:c2:90:74:a9:a9:d9:0e:04:e9:12:8e:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:21 2026 GMT
Not After : May 24 01:51:21 2027 GMT
Subject: CN=A6645E95474A0B6B33FA6445B143D963CE3ACED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:64:1c:bf:d6:b9:9e:56:29:ff:78:a4:16:
11:f9:d5:96:94:c2:a9:f5:3c:6d:fa:11:8b:85:87:
f9:2b:94:2a:27:04:00:2a:e9:c4:88:e3:34:07:3e:
d8:ba:73:82:0c:d7:84:ae:5e:48:74:18:c8:9c:ff:
68:5e:a2:54:90:1f:01:63:48:50:59:65:0b:07:7c:
67:b4:82:48:0a:43:e1:8a:3b:6d:e0:fc:06:c7:f1:
f8:72:be:c5:73:c4:d2:f7:32:44:8f:1c:80:59:af:
e5:f0:a6:4c:9d:fd:c8:58:b9:ad:07:85:b5:45:63:
6c:5c:5d:fa:de:66:61:ea:c6:4e:2c:13:7e:6c:7d:
fb:ee:0b:00:46:39:02:20:5d:67:d2:a4:70:5e:7f:
96:54:d8:d6:ce:da:ca:26:dd:2d:81:4b:df:27:de:
fe:63:2b:79:b0:e4:f8:b4:2a:98:21:f4:77:84:63:
b7:4e:9d:83:e7:d2:1b:64:ba:3c:0d:63:07:ff:2f:
2b:a1:2c:c3:05:29:0f:bd:ba:6a:c8:9d:7b:a3:2d:
a4:95:c0:d0:13:ea:3a:6f:7f:2f:d2:ca:b2:03:1d:
5a:14:d1:4e:6d:5b:6c:83:bf:6f:fc:ea:87:87:67:
f7:29:6f:ac:fc:f8:c0:e1:8b:6f:84:62:64:1e:3a:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:5E:95:47:4A:0B:6B:33:FA:64:45:B1:43:D9:63:CE:3A:CE:D6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afa4::/32
Signature Algorithm: sha256WithRSAEncryption
5b:a5:c2:62:0c:5c:4f:7b:8a:99:52:3c:d5:8d:b8:9c:5b:37:
a0:ab:22:46:0f:73:14:c2:2c:e8:07:48:fd:4f:d2:5d:78:e2:
b2:90:4c:0e:5e:eb:6b:5d:6f:d7:b5:88:6e:f0:9d:8b:8a:33:
33:ba:e7:d0:c9:43:a7:43:41:31:bc:b1:04:f9:d0:91:e4:44:
cb:eb:c5:1a:2c:e3:ff:0f:be:f5:ec:ae:90:b5:91:19:ef:4c:
80:ea:8b:2e:e1:e3:83:1d:76:31:f3:6d:20:99:d9:5e:12:5a:
fa:11:73:15:2b:98:ec:0b:b5:40:f5:28:00:ae:b4:bb:82:82:
39:f7:ff:38:9a:b0:93:60:25:d6:2f:71:d3:6d:b8:d8:9d:f3:
9e:50:c1:b3:35:47:9c:d7:13:3e:3e:27:a3:4e:18:c6:77:0f:
78:06:1c:f0:31:da:62:bd:0e:bc:8e:a5:38:d2:cd:f6:fd:d3:
e0:11:d0:ff:f8:46:ca:da:bf:49:db:cc:c1:7c:5f:80:c1:70:
70:b5:6b:95:0e:21:bd:34:50:6c:0f:ae:6b:5f:85:e6:99:24:
a0:be:fb:26:8e:18:c7:b5:61:89:8e:33:8b:a1:b6:b9:f8:c6:
2c:1c:86:88:1d:f1:d8:8f:09:15:14:a5:02:56:44:22:2f:06:
1a:33:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:56 2026 by rpki-client