Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146686.roa
File: AS146686.roa (raw, json)
Hash identifier: RQwGSpS1rrGtlXkViR1SQlSswnCUta53jRY3ipIZOTQ=
Subject key identifier: 0A:39:1F:69:42:C6:EF:8B:AF:83:82:E0:98:98:04:D0:1D:E4:2C:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 35F6288E38C6BE7B3A0B09E01F2B6714BF19FBB1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146686.roa
Signing time: Mon 25 May 2026 01:20:30 +0000
ROA not before: Mon 25 May 2026 01:15:30 +0000
ROA not after: Mon 24 May 2027 01:20:30 +0000
asID: 146686
IP address blocks: 240a:afc4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f6:28:8e:38:c6:be:7b:3a:0b:09:e0:1f:2b:67:14:bf:19:fb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:30 2026 GMT
Not After : May 24 01:20:30 2027 GMT
Subject: CN=0A391F6942C6EF8BAF8382E0989804D01DE42C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:be:7e:85:86:db:8e:c9:53:44:82:75:83:
18:78:f5:74:e4:99:c1:23:ba:d4:ff:f1:26:4c:70:
75:55:5a:0d:97:53:c5:46:34:12:f0:14:76:2f:b9:
3b:20:d1:9d:26:80:c9:06:61:05:b2:f2:9c:ed:de:
a9:95:41:d0:f2:05:ba:4b:bf:37:2c:f0:19:a9:32:
cc:a5:e2:fc:5d:f0:88:45:53:c5:41:97:2f:d4:e1:
a8:d4:95:c3:22:e5:e1:ec:93:00:6f:01:73:69:7d:
2d:e7:fc:aa:55:de:75:e1:df:35:b9:ea:bf:0e:6c:
c4:f2:83:df:5d:76:f7:ba:35:16:e5:7f:08:28:22:
ae:db:6a:69:e8:72:4f:e4:68:f4:09:d3:4d:a8:0b:
d8:8c:d7:27:62:98:09:67:a3:fa:61:92:52:d2:cd:
6d:0f:de:c3:74:db:8e:43:86:36:b9:85:5d:c4:90:
6a:4a:3a:57:78:6b:db:e9:8c:6c:ca:f5:f6:bb:47:
e1:c5:35:a7:c9:43:9e:f6:c1:26:b7:c6:97:d6:85:
f3:2a:4e:d1:01:90:4d:7e:f8:8a:3d:4f:8e:ac:b8:
b5:ef:3b:bc:fd:ae:b3:f7:1d:e9:98:c1:71:a4:11:
af:be:fa:7a:81:59:d5:b3:1d:ff:09:bc:27:c6:0f:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:1F:69:42:C6:EF:8B:AF:83:82:E0:98:98:04:D0:1D:E4:2C:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146686.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afc4::/32
Signature Algorithm: sha256WithRSAEncryption
69:93:59:87:32:81:7b:b5:fc:09:d8:16:df:03:bb:fd:c7:06:
51:f3:09:ca:c4:72:b4:52:03:54:e0:9a:a0:20:05:d5:c0:f6:
4a:eb:3b:8a:64:a5:43:fc:95:3c:b2:b1:39:02:8e:1c:f5:f0:
d7:c3:db:24:50:08:f9:b8:c5:9f:8a:fa:66:75:d7:95:65:02:
91:dc:59:45:25:09:02:f0:3e:65:0c:21:dd:ad:3e:98:23:cf:
e9:e7:5e:a8:b0:28:65:db:76:00:74:8f:6d:40:21:ad:ba:7a:
c8:07:23:4d:b3:70:61:5e:79:f9:d3:9d:d6:46:70:5d:f7:3c:
e3:51:34:4c:3c:f7:ba:6e:34:5c:01:fa:09:cf:5c:04:30:70:
4b:98:c3:23:e0:20:e4:0d:9f:4e:6e:54:ea:19:f1:cb:44:2b:
d3:b3:cd:6b:b4:7c:50:c7:d0:c9:94:81:36:9f:6e:c5:71:22:
62:fc:56:54:fe:a6:7c:73:fb:b1:da:00:2f:a0:ad:9d:64:45:
94:da:28:4c:b2:a4:02:27:b2:eb:d5:09:4d:c4:ff:34:a2:87:
03:bd:12:84:ce:2c:d4:3a:0f:73:19:c5:f1:0a:d9:74:5a:96:
f6:38:44:38:e3:bd:88:1a:49:1e:eb:3d:9e:ca:78:97:66:14:
0e:d9:fc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:15 2026 by rpki-client