Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146668.roa
File: AS146668.roa (raw, json)
Hash identifier: IPNJ/94Hz8unjfaG/nfKA9hkn5PUTSPTaAUxbQz0M/c=
Subject key identifier: 6F:5C:62:96:B8:D7:FB:32:C6:16:5E:BD:A1:8B:27:44:A7:C7:CD:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 44C0418910422B079971B103AC76FFD0BD70F81C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146668.roa
Signing time: Mon 25 May 2026 06:28:41 +0000
ROA not before: Mon 25 May 2026 06:23:41 +0000
ROA not after: Mon 24 May 2027 06:28:41 +0000
asID: 146668
IP address blocks: 240a:afb2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c0:41:89:10:42:2b:07:99:71:b1:03:ac:76:ff:d0:bd:70:f8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:41 2026 GMT
Not After : May 24 06:28:41 2027 GMT
Subject: CN=6F5C6296B8D7FB32C6165EBDA18B2744A7C7CDE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:0f:c8:ef:84:ea:cf:79:e1:39:aa:07:58:
98:21:cf:3c:c8:c7:d2:80:28:8e:da:fb:af:fc:a6:
c5:38:5b:86:77:7c:76:35:db:60:6f:ed:d4:64:05:
65:b6:b9:d9:14:58:ee:fd:c5:5d:73:7b:65:5b:99:
4e:0e:1e:90:58:ef:46:8c:d1:7d:0a:62:86:c0:18:
84:4c:1c:1a:0e:b2:94:88:86:ba:bd:83:ad:7e:21:
57:6e:6f:f7:59:de:f2:fa:6d:d7:55:2c:d3:97:3f:
ff:42:f1:10:56:59:4f:31:66:0c:35:d3:b1:ec:bd:
83:1a:1f:10:8c:7e:be:84:94:8e:a0:bc:c8:00:8d:
44:1f:d6:07:5f:fa:ac:69:53:80:3a:70:85:b8:97:
3b:44:58:77:23:2c:ce:b2:d9:21:0c:ec:f8:41:e4:
11:4e:d6:81:e9:63:35:f5:c5:16:9f:2b:ef:a8:48:
c7:76:ad:ff:93:cf:18:53:ce:5e:1d:07:fd:19:75:
b2:a5:5a:2f:f2:ac:5e:64:55:bf:13:6f:a5:bc:a3:
a9:ca:78:7a:a7:3b:11:2a:b4:66:57:ba:ac:d1:9e:
dc:6e:0e:09:f4:52:4a:f8:b4:87:44:3b:ce:2b:80:
9c:90:e4:ec:53:02:2a:07:d1:38:35:2e:ae:98:bb:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5C:62:96:B8:D7:FB:32:C6:16:5E:BD:A1:8B:27:44:A7:C7:CD:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146668.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afb2::/32
Signature Algorithm: sha256WithRSAEncryption
30:70:a1:07:91:ca:2f:b0:f9:2d:04:20:14:9c:f8:41:cc:77:
67:ad:69:a9:d6:9a:23:17:4f:74:e5:90:d3:af:45:fa:f3:51:
1e:75:e8:a8:0c:44:a4:ae:de:2a:9d:40:94:48:56:7c:85:a9:
87:94:be:04:34:05:3d:06:42:51:04:cc:20:68:f0:92:e8:3a:
fe:a3:ba:94:8a:d8:a9:fa:39:71:f6:6b:82:cf:29:04:f8:bc:
50:87:97:3b:97:aa:bf:e5:15:68:72:68:2c:84:d0:d3:73:6f:
3b:bd:ca:f4:c1:c7:6e:bf:4d:5d:51:54:4c:c2:de:d1:c6:75:
c4:25:c5:73:9d:3a:2c:70:37:06:53:33:37:78:b8:4a:6f:6b:
ab:a5:6e:4c:53:9d:a6:1e:15:a8:8e:0c:a0:80:f3:3b:4f:64:
dd:68:70:31:39:c4:47:8c:86:6b:a6:08:6e:eb:e4:ab:8b:5f:
5a:17:bb:6b:77:c2:d7:f6:17:ec:1d:16:51:49:de:d8:74:7b:
78:28:53:66:52:98:05:b5:2c:88:c8:92:5d:40:6e:3c:22:41:
3c:70:79:61:16:b0:e1:83:cd:81:c6:25:6c:71:51:11:2b:d0:
55:c5:3e:20:b6:39:27:03:b2:1d:f0:75:c2:4a:c4:8b:e6:4c:
b6:d6:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:28 2026 by rpki-client