Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146669.roa
File: AS146669.roa (raw, json)
Hash identifier: LMVSCMNzN0Nvvl4I7KGNB4rrjUFs1qc+zYTkMMaRiPI=
Subject key identifier: A3:AF:B5:CA:DB:2A:2F:29:EE:74:F2:7D:12:B8:21:EF:B3:D6:F9:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F0F052EB572217BD2DF472CC772CE51409C5B99
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146669.roa
Signing time: Tue 26 May 2026 02:34:48 +0000
ROA not before: Tue 26 May 2026 02:29:48 +0000
ROA not after: Tue 25 May 2027 02:34:48 +0000
asID: 146669
IP address blocks: 240a:afb3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0f:05:2e:b5:72:21:7b:d2:df:47:2c:c7:72:ce:51:40:9c:5b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:48 2026 GMT
Not After : May 25 02:34:48 2027 GMT
Subject: CN=A3AFB5CADB2A2F29EE74F27D12B821EFB3D6F936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:08:61:6b:db:96:31:3d:75:b2:bb:11:b5:
8b:4a:8e:a1:eb:88:4d:54:ad:82:be:a2:b8:d8:2d:
07:05:28:89:bc:f0:fb:e7:f8:50:d0:a6:66:b1:d4:
06:7a:4e:a2:34:c5:2d:1e:4a:65:bf:7a:ff:92:d8:
ef:4a:f7:4e:95:5b:ef:e8:fa:77:97:16:1e:64:67:
aa:30:3e:a2:fb:85:4a:60:81:00:52:7a:8b:df:a4:
13:5c:41:77:12:d8:2e:7b:e0:52:ea:12:49:da:f9:
cf:c7:00:d4:24:b6:77:a7:52:c0:79:c8:4d:c1:15:
1b:ec:a3:fa:84:e5:49:27:ca:2e:28:46:6b:06:b9:
8b:6d:96:54:17:ac:7c:ec:08:37:33:21:60:bc:dc:
3d:48:ee:86:ed:40:56:6a:6a:84:c5:d0:54:c8:6d:
ef:db:b7:f8:4d:0d:c9:d9:5f:cb:e3:54:13:04:9e:
d7:07:56:a1:62:06:29:cd:0e:e1:4e:f9:09:e5:81:
e1:7a:b4:f8:c6:f1:fe:ad:b1:47:7f:07:82:79:77:
60:da:8a:e2:ad:ef:78:80:f6:0c:e5:98:82:77:85:
41:a7:f6:5e:f9:1b:31:e4:cc:99:31:ed:5d:22:ca:
2f:8b:5f:80:de:dc:ea:00:a4:dc:17:04:dd:48:22:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AF:B5:CA:DB:2A:2F:29:EE:74:F2:7D:12:B8:21:EF:B3:D6:F9:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afb3::/32
Signature Algorithm: sha256WithRSAEncryption
08:32:70:31:93:3d:67:e3:21:1d:db:e7:bd:5c:fb:6d:31:e7:
a7:75:b1:21:44:20:7a:9e:3b:e1:16:be:a1:b3:2b:6f:c3:5f:
22:a9:3c:b1:d7:c8:8b:7a:2a:53:8a:f2:91:9b:b0:60:b0:8a:
7d:a7:95:98:a9:12:f8:5d:cb:61:f7:06:ca:3b:0b:04:ff:e7:
d9:62:7c:65:4c:97:ef:77:02:47:45:91:32:d2:7d:dc:9f:9d:
e8:97:c8:92:85:b0:87:11:1f:85:98:37:6f:77:63:73:07:3b:
66:ca:60:73:1c:80:5d:07:9b:9c:9f:70:55:f4:ed:85:29:ba:
2b:98:76:09:cc:76:92:db:ba:4b:e1:17:13:e7:6d:85:28:e1:
eb:fb:4a:23:32:61:38:96:28:0d:3b:55:e6:3d:4f:9a:d3:b2:
e7:49:b0:42:90:94:ce:b2:cc:c3:a0:4a:35:ef:3b:3e:5a:9f:
1f:55:64:86:e9:f1:dd:19:ac:4e:de:e4:5d:a3:90:40:4d:a6:
02:0f:a1:51:aa:13:b2:f0:e9:f3:9a:9c:3d:1a:be:7d:34:30:
08:ca:0e:9e:52:fc:17:38:05:04:f5:e7:5e:12:05:82:13:9c:
55:1f:ae:e5:1c:f3:f8:b0:5d:d4:79:69:d8:c3:b3:da:6b:16:
ea:74:46:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:07 2026 by rpki-client