Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146685.roa
File: AS146685.roa (raw, json)
Hash identifier: PVbt/c2V1RtgpfqAFEP/OvA8dcEavP910oeMixNq3mo=
Subject key identifier: 21:FD:55:33:48:F9:42:E1:9C:9A:DD:7F:78:DC:0D:CD:4F:F9:E2:EE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73A05416960FA3D410570B7D86AB5E6F4E0AFD53
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146685.roa
Signing time: Mon 25 May 2026 01:51:17 +0000
ROA not before: Mon 25 May 2026 01:46:17 +0000
ROA not after: Mon 24 May 2027 01:51:17 +0000
asID: 146685
IP address blocks: 240a:afc3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a0:54:16:96:0f:a3:d4:10:57:0b:7d:86:ab:5e:6f:4e:0a:fd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:17 2026 GMT
Not After : May 24 01:51:17 2027 GMT
Subject: CN=21FD553348F942E19C9ADD7F78DC0DCD4FF9E2EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:d1:59:8d:83:33:db:75:f6:c2:ac:de:94:
82:83:1f:ad:9d:14:11:70:14:54:bc:b2:59:1d:46:
ae:3d:0b:2d:73:f2:dd:0d:c3:3a:bd:9d:a2:7e:65:
81:dc:79:1f:7b:85:cf:8d:c5:91:d8:ec:ba:32:e4:
6a:b1:52:4f:f9:4d:ff:17:88:b9:a8:38:c7:30:42:
1a:69:86:07:18:79:7e:4c:4f:29:60:30:93:b8:0d:
0d:31:94:f9:32:5a:6a:cc:2b:83:56:3e:6e:18:6c:
9a:b7:63:9e:c9:80:4b:c2:06:9e:b9:23:9f:99:c1:
54:77:61:b4:1f:15:18:29:c4:77:73:a3:42:e0:d8:
36:ac:6b:3e:30:4a:28:7d:f3:88:bb:cd:5a:aa:b6:
d2:42:3d:43:fa:b5:0e:50:a0:be:29:8b:b0:9d:a8:
a3:ba:be:07:6f:a3:5c:3b:b0:14:6e:4e:bd:1e:77:
b9:c2:b6:ce:6e:a6:15:1e:b3:b1:a4:50:ec:1c:b4:
d9:b8:60:4b:b5:54:53:62:8e:63:fb:2b:79:ea:24:
f7:b6:2c:1f:8a:e9:11:88:ac:6e:30:53:91:fc:1b:
a1:1c:ad:6f:17:84:a2:60:fa:89:19:0f:12:27:81:
aa:64:cc:47:08:5f:22:09:b5:22:95:f1:b6:7b:e2:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:55:33:48:F9:42:E1:9C:9A:DD:7F:78:DC:0D:CD:4F:F9:E2:EE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afc3::/32
Signature Algorithm: sha256WithRSAEncryption
3c:08:76:36:d3:ee:ef:89:b6:09:55:ac:dc:ab:b8:92:7e:20:
b9:33:c2:47:24:60:01:93:29:1e:60:93:f2:50:50:7a:97:0b:
71:4c:0d:88:cc:35:53:f2:fa:6d:d4:85:c1:65:52:51:45:30:
82:6b:d3:71:af:b8:5b:fd:e8:23:61:09:9e:8e:47:25:17:b4:
1b:27:a6:4e:1b:ea:90:24:43:6c:2a:97:0e:1e:44:65:9e:f9:
c6:15:b8:f5:b2:d7:80:95:b5:12:64:ff:67:1c:ce:ca:45:5f:
77:d5:ff:5f:f6:31:d6:06:30:15:96:48:f3:ad:30:7b:19:c7:
d6:f3:da:24:ab:f5:89:36:68:40:ef:4a:e8:16:10:57:16:29:
01:dd:ec:38:71:fc:09:00:04:29:fc:50:5b:79:c9:1a:e8:52:
90:c9:a6:2d:dd:cf:39:8e:dc:1c:70:c3:de:77:9b:82:c2:37:
d1:c3:8d:da:cb:14:92:b5:3b:b3:47:d5:a6:1a:4e:1b:0b:a1:
be:3a:38:52:11:24:77:a4:51:af:c5:1d:8b:76:0f:bb:c9:f6:
c6:26:1e:c6:e0:d8:16:b6:c3:54:be:59:d5:2d:90:69:be:49:
11:ce:de:79:ff:20:52:68:47:f5:c9:95:3a:b0:34:9d:81:ad:
64:f7:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client