Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146656.roa
File: AS146656.roa (raw, json)
Hash identifier: ROl3cdUuBP6OtMOECEWIs5ANhloeu/sxX7EDNEPdXEY=
Subject key identifier: A7:80:6B:F9:AC:91:AD:88:DC:FC:D5:70:B9:AD:CB:62:2B:50:3A:34
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6890C885E8F35FA6136EAFDC190A304A30FA8753
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146656.roa
Signing time: Fri 22 May 2026 06:05:27 +0000
ROA not before: Fri 22 May 2026 06:00:27 +0000
ROA not after: Fri 21 May 2027 06:05:27 +0000
asID: 146656
IP address blocks: 240a:afa6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:90:c8:85:e8:f3:5f:a6:13:6e:af:dc:19:0a:30:4a:30:fa:87:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:27 2026 GMT
Not After : May 21 06:05:27 2027 GMT
Subject: CN=A7806BF9AC91AD88DCFCD570B9ADCB622B503A34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:0c:11:cd:12:10:90:76:d1:71:9d:3d:a1:
64:29:16:ea:d9:e5:68:8c:b4:79:b6:2c:2f:3a:d0:
f6:07:10:6b:55:fb:fb:3b:ce:cd:d4:f5:ff:8a:49:
dd:07:50:c7:16:0e:e5:ec:24:cb:82:d6:9a:7c:22:
ab:bc:a5:f2:25:cd:be:88:60:02:79:05:27:66:f3:
95:df:ad:2c:9e:fa:49:c3:e9:3e:d4:b8:16:cd:42:
ac:db:18:f5:3f:d4:cf:c5:75:d9:64:21:11:c4:16:
fa:ba:c9:94:38:1e:12:67:63:a0:f3:c1:9c:50:79:
b9:47:ff:f8:4c:91:93:5c:8e:2b:78:56:0e:2e:6e:
35:63:2f:58:0b:66:6c:60:50:a8:32:ee:c1:86:cf:
e1:4f:76:2a:0a:f6:1e:36:cd:78:9e:95:ef:48:04:
bc:2e:c8:bd:10:09:bf:9f:65:b3:a6:0a:18:c9:5b:
4a:61:ce:04:a3:19:7c:2e:db:6f:38:a9:54:a8:c3:
8d:2d:2e:9b:a6:5c:91:e8:6a:f8:d5:52:b8:43:41:
28:7e:83:7e:6f:09:6d:f5:f2:e4:eb:35:2e:1b:64:
46:0f:6e:26:1c:52:e9:af:64:b8:4e:fc:9a:ea:c5:
8c:76:8c:a7:21:a1:a1:cf:3f:3b:b9:01:31:6b:2f:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:80:6B:F9:AC:91:AD:88:DC:FC:D5:70:B9:AD:CB:62:2B:50:3A:34
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146656.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afa6::/32
Signature Algorithm: sha256WithRSAEncryption
0b:4c:b9:02:63:b6:05:91:cb:59:6c:91:f6:49:b6:54:9e:9f:
84:fb:2d:42:d0:f2:7c:3c:a4:3f:d2:95:db:fc:35:4e:b8:4a:
80:80:1d:d7:3f:62:2b:35:1d:8e:a8:ac:3b:b9:6e:9e:83:0a:
84:ef:ea:4f:5f:9a:86:f8:c2:30:96:f8:36:c0:7e:8d:49:1a:
ef:cd:a8:c6:c4:c4:37:46:c0:df:34:00:bd:c9:de:b3:3d:cd:
51:6c:1e:65:9f:15:51:12:6a:58:6f:61:8b:d2:16:2c:72:bf:
3d:60:d9:56:df:4c:3c:49:dd:8a:97:f3:b9:c3:7c:8b:20:bd:
09:e0:04:ed:0a:62:b9:68:fc:54:ff:cc:75:9f:6f:6b:b7:a1:
b5:c9:ba:6f:ff:aa:e5:3e:10:2c:4d:1f:94:b7:2b:e4:b5:ae:
90:2f:42:82:19:5a:87:8a:4c:3e:64:55:7b:27:96:72:ec:26:
3c:d3:fe:69:10:1c:bc:b5:e4:cd:49:3d:d3:42:fe:f1:0f:6b:
1a:55:98:9f:27:9a:99:4c:4b:fb:dc:4e:49:9b:72:70:2e:94:
c6:a5:ef:00:92:7f:28:af:52:52:d3:25:d1:c9:49:02:52:09:
16:7a:12:60:43:19:de:10:6d:c9:b5:39:6b:0f:81:d0:c3:a6:
3b:e0:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:01 2026 by rpki-client