Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146679.roa
File: AS146679.roa (raw, json)
Hash identifier: N23La8qrOTuBZAr4eOVsEhLWpwpMakWQwjkqgU5xN7Y=
Subject key identifier: 49:42:23:4A:18:7A:5C:C4:33:32:17:87:3F:1F:33:51:8B:EE:4B:07
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40EFA3CFC405D82A45EEB9168C1ED46F8FE748C7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146679.roa
Signing time: Fri 22 May 2026 04:08:12 +0000
ROA not before: Fri 22 May 2026 04:03:12 +0000
ROA not after: Fri 21 May 2027 04:08:12 +0000
asID: 146679
IP address blocks: 240a:afbd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ef:a3:cf:c4:05:d8:2a:45:ee:b9:16:8c:1e:d4:6f:8f:e7:48:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:12 2026 GMT
Not After : May 21 04:08:12 2027 GMT
Subject: CN=4942234A187A5CC4333217873F1F33518BEE4B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6b:3e:ff:15:aa:4d:83:c0:85:35:89:c2:e6:
c8:89:18:77:35:80:34:41:ba:2e:a6:57:16:6d:8d:
9e:44:52:1a:38:54:e8:ad:e7:19:c1:31:99:8b:04:
1f:d1:c6:53:4b:f8:68:f8:d5:04:30:8f:62:15:ab:
8d:0e:6a:ea:38:b3:45:ee:43:98:fa:82:d6:45:40:
48:9c:ea:7b:6f:a3:77:b7:7f:a0:94:35:78:7d:7a:
f7:3b:f3:e5:24:74:59:8f:70:2d:be:c9:dd:38:c3:
42:3a:85:10:3d:e5:07:0f:c3:7f:c8:4f:27:c3:23:
d5:4c:f9:c5:3f:d5:f1:ee:73:96:3c:e1:a2:90:c2:
08:8a:7c:3f:88:e4:3b:12:87:35:1c:b0:6b:45:40:
0b:b2:f0:b3:de:37:59:db:3c:16:25:6a:f5:4d:e8:
2e:47:a1:89:ce:f8:43:1d:78:dc:80:4a:1c:d6:87:
f6:0c:e3:2c:a7:d1:6d:30:60:78:74:af:9c:11:7f:
b1:db:72:ac:80:37:a3:97:d0:a2:e8:e0:f7:30:15:
b5:db:0f:bc:06:0e:59:ff:5e:7c:ed:53:e8:03:ec:
91:a2:87:2d:fc:73:3a:69:a8:47:bd:f8:14:ef:08:
12:90:6f:99:7f:90:b0:7b:b3:f8:80:81:b3:8e:9e:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:42:23:4A:18:7A:5C:C4:33:32:17:87:3F:1F:33:51:8B:EE:4B:07
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afbd::/32
Signature Algorithm: sha256WithRSAEncryption
8b:4b:ce:46:1f:2f:8b:3d:57:17:18:26:07:7d:96:d2:e0:c3:
2d:3e:9c:fa:de:8b:b9:85:d9:f6:9f:79:26:eb:94:40:d9:0a:
e6:73:67:cc:75:f8:f3:21:bb:8c:88:dc:43:5e:5f:ae:91:8a:
54:94:3a:62:c4:3d:17:72:cf:82:9e:3d:4c:93:3d:45:90:3b:
0d:ec:3d:69:f3:42:fe:b6:0e:05:d8:c1:d4:7e:c3:86:51:48:
a8:3f:39:dd:02:8c:ed:e7:4d:27:1e:89:b0:bc:6a:53:ce:fb:
84:4d:78:f7:90:41:22:60:b2:cb:b6:85:99:89:d9:b2:55:84:
99:68:0c:39:cf:ad:56:42:3f:5b:48:c8:be:5e:1e:6c:1d:de:
c5:d7:85:63:4e:3a:8f:28:ec:d8:e6:78:82:fd:73:7b:ed:3f:
17:07:66:46:d0:14:3d:c8:cf:03:3c:10:fb:e2:1a:16:d4:23:
32:ff:80:28:23:40:af:66:e1:01:72:e5:e1:4c:b9:3c:dc:2e:
2b:86:70:3b:10:3d:77:8b:c8:44:4a:85:81:e0:f4:d5:c8:8f:
88:86:6c:1e:be:7f:ce:de:fe:9e:08:cc:22:8e:95:69:67:40:
1f:6e:b2:e9:5d:22:83:25:cc:c5:41:a6:67:21:8f:8f:b8:1e:
1c:83:1d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:22 2026 by rpki-client