Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146683.roa
File: AS146683.roa (raw, json)
Hash identifier: chdyrEbLB/6wDc9gBzW9HPUrBE5FubylVWAUR/iyfJ0=
Subject key identifier: EC:7A:AE:D3:43:F9:B6:20:A5:29:91:ED:C1:FE:59:1E:9F:80:97:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2050C0AA48600B5357D20818868776EFA134FE06
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146683.roa
Signing time: Tue 26 May 2026 06:30:28 +0000
ROA not before: Tue 26 May 2026 06:25:28 +0000
ROA not after: Tue 25 May 2027 06:30:28 +0000
asID: 146683
IP address blocks: 240a:afc1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:50:c0:aa:48:60:0b:53:57:d2:08:18:86:87:76:ef:a1:34:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:28 2026 GMT
Not After : May 25 06:30:28 2027 GMT
Subject: CN=EC7AAED343F9B620A52991EDC1FE591E9F80977B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:7c:1d:e0:af:85:f9:34:fb:30:63:07:f8:
78:25:d5:70:8e:fa:45:14:15:88:53:9b:5a:08:b3:
a5:f7:46:63:96:74:35:bd:b4:85:94:90:52:11:79:
6c:88:36:c0:82:d8:82:b4:60:42:22:e7:b8:99:b8:
71:af:d4:7b:af:b9:c9:b5:7e:38:2e:42:cf:ae:38:
df:ad:22:4d:4f:a6:d1:c7:1a:ae:4f:ab:45:30:c2:
e8:3c:88:6e:82:d7:2a:3d:b9:ad:cc:f6:d0:40:c2:
22:4d:b2:ee:5b:a9:1e:20:97:df:85:bd:e2:06:d6:
f5:c2:98:1e:99:d2:f2:ec:23:a5:72:9e:51:00:fe:
cc:c8:8b:c9:34:44:29:0d:78:03:ab:81:22:4a:50:
11:67:0e:92:38:42:c5:41:a3:d3:db:f0:cf:5d:fe:
46:b3:89:c7:f3:b7:b8:76:75:61:21:d0:b8:af:a7:
cb:f2:a7:b3:1e:ea:d0:69:e6:e9:40:bd:48:5a:7a:
0d:95:1c:3e:f0:66:82:63:89:f0:2f:6c:dd:0b:da:
c5:69:44:7c:52:f5:15:00:01:72:f2:3f:b8:61:3f:
60:37:67:7d:79:32:b6:55:2a:bc:c0:4d:cd:db:88:
30:60:0b:2c:85:7d:9b:05:74:d4:2a:0e:37:e5:5c:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:AE:D3:43:F9:B6:20:A5:29:91:ED:C1:FE:59:1E:9F:80:97:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afc1::/32
Signature Algorithm: sha256WithRSAEncryption
17:56:fb:ea:ec:4c:36:eb:28:ad:9d:cb:e6:af:40:50:4a:2c:
18:2e:76:01:80:26:06:58:bb:c6:d9:c5:e8:6f:d2:a8:ad:e9:
f2:61:04:8c:f2:1d:18:10:5f:c1:68:5b:9c:4a:3d:dc:be:28:
0d:bd:f4:be:a6:17:57:2a:ea:6c:af:10:0d:da:09:9c:79:8a:
c5:5c:70:9b:78:29:6d:f0:b5:14:e7:da:b1:9b:7c:b4:a7:be:
ea:e1:05:12:e1:2e:0b:92:b2:8e:95:eb:b4:17:77:a0:2e:30:
58:e8:82:32:85:ac:80:89:6c:9a:24:5a:fe:a5:16:4c:fc:1f:
10:65:29:15:1e:01:6f:e1:6d:26:1e:fe:35:ab:c4:3e:d9:94:
0f:9f:ba:b8:b1:ce:a4:73:7e:75:ac:f0:04:06:8c:e8:cc:4c:
d5:b6:a0:cc:ff:44:d2:9c:8f:7f:60:7c:13:a6:0e:50:e2:bc:
cb:ae:6d:47:ec:24:6b:a4:5d:fb:4c:56:60:6c:9e:ab:e2:f2:
34:ee:d5:bd:1a:b8:d6:e3:12:44:6f:23:05:fb:01:ed:5a:9c:
f1:59:2e:92:c8:7f:ac:31:11:50:04:b8:57:b1:b5:3d:2e:bd:
33:8b:a9:c6:89:60:48:f8:1a:02:b2:58:67:02:22:28:25:f3:
d5:64:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:20 2026 by rpki-client