Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146688.roa
File: AS146688.roa (raw, json)
Hash identifier: q9e4InQtHTlzISt4mQWdEfvSsu0MPK2hdNCP2F0RIO0=
Subject key identifier: 61:20:F9:F3:FA:D0:32:50:51:72:41:BE:33:63:69:E8:5B:45:15:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 441F93A7CF648EDD94188B333CAD348C40AE08E8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146688.roa
Signing time: Mon 25 May 2026 01:20:22 +0000
ROA not before: Mon 25 May 2026 01:15:22 +0000
ROA not after: Mon 24 May 2027 01:20:22 +0000
asID: 146688
IP address blocks: 240a:afc6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:1f:93:a7:cf:64:8e:dd:94:18:8b:33:3c:ad:34:8c:40:ae:08:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:22 2026 GMT
Not After : May 24 01:20:22 2027 GMT
Subject: CN=6120F9F3FAD03250517241BE336369E85B451585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:99:80:72:dd:93:98:15:29:20:78:24:28:
97:d9:ca:47:73:db:fc:4a:5d:37:8f:86:e1:10:fa:
16:24:9c:1f:79:a1:c8:40:94:de:b3:e8:f2:a7:25:
c0:b1:18:62:e2:af:5a:d9:f1:b6:c4:8f:ff:5d:9c:
f5:af:8a:a7:26:b3:cf:73:42:4e:38:f2:8f:8c:ed:
01:ba:34:74:35:72:17:46:9c:4f:ff:02:c3:58:ed:
7b:de:14:18:93:57:cd:4a:c9:bd:89:11:3a:1c:f2:
b4:99:b1:c7:cc:cd:9c:aa:f6:91:1a:de:61:ac:48:
d6:8d:64:7b:dd:2b:3a:4a:c0:f9:46:7f:28:8c:1f:
5a:74:3c:0b:6c:6b:4d:41:99:fc:88:63:0c:fa:f6:
70:7a:d4:7d:eb:eb:ab:b0:46:73:db:3a:3d:4a:b2:
72:24:a5:a6:1c:ad:3e:54:55:0d:62:50:e1:80:95:
db:c7:4d:0f:e5:2c:ef:01:73:7e:1a:e8:64:e1:21:
ca:b8:f1:e7:6d:32:b6:5a:6c:33:ac:9b:aa:3f:9c:
1e:a2:28:9d:50:a7:06:75:8e:30:f7:e7:b6:6b:6b:
59:ed:2e:de:6c:27:9d:d6:8d:ff:16:27:48:0d:97:
7b:3e:8f:95:c6:d2:6b:04:86:be:0f:df:10:ce:d9:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:F9:F3:FA:D0:32:50:51:72:41:BE:33:63:69:E8:5B:45:15:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146688.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afc6::/32
Signature Algorithm: sha256WithRSAEncryption
54:a5:69:39:25:5a:1e:0c:77:64:e5:43:10:8a:02:68:43:d8:
90:93:05:05:87:e1:7b:16:ff:b1:5a:ff:67:de:f4:bd:a7:ec:
d3:ba:d5:89:f0:3c:9a:54:c1:b7:28:28:4a:1f:48:7a:95:2e:
f7:f8:f9:10:3a:c1:c2:5d:e6:ab:cb:40:04:65:cb:81:f3:54:
21:64:9e:17:cf:60:47:62:11:cd:cf:ae:d4:7c:f3:b2:a2:b5:
7a:07:66:91:1b:8c:35:29:6e:d5:84:69:d0:43:95:e7:80:58:
8d:54:10:98:58:e2:52:a4:bb:87:bd:09:4c:05:1c:9b:f6:75:
8f:35:33:56:2e:51:2f:9b:b2:89:50:5a:54:55:82:d0:98:7e:
94:82:b5:93:d5:ad:96:32:79:05:57:8e:9c:69:1b:06:55:59:
e1:58:56:70:17:02:9e:7c:d8:04:c1:68:b1:ce:97:88:87:2d:
ec:81:2e:26:24:89:36:6b:14:83:e1:59:53:cb:f9:e8:ca:7e:
4f:d3:53:05:ff:a1:97:70:92:a6:2a:c2:6e:68:60:b0:ba:76:
af:70:4e:7a:8c:8f:2d:8a:42:36:16:e7:cf:aa:78:8e:33:21:
56:8b:8f:65:62:dd:87:bc:ea:31:4d:71:b8:c1:ef:99:b8:86:
c7:74:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:25 2026 by rpki-client