Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146690.roa
File: AS146690.roa (raw, json)
Hash identifier: hTpdijY/fHcXUegByxQzqp3UH9+xtkpIh5bWmb6L3/I=
Subject key identifier: 6F:8C:39:45:4B:21:D3:CB:9D:59:BD:96:0B:A7:32:99:B6:01:24:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 76C2D56E1D08282DD413B00BAB5577D1A3109A13
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146690.roa
Signing time: Mon 25 May 2026 06:28:24 +0000
ROA not before: Mon 25 May 2026 06:23:24 +0000
ROA not after: Mon 24 May 2027 06:28:24 +0000
asID: 146690
IP address blocks: 240a:afc8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c2:d5:6e:1d:08:28:2d:d4:13:b0:0b:ab:55:77:d1:a3:10:9a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:24 2026 GMT
Not After : May 24 06:28:24 2027 GMT
Subject: CN=6F8C39454B21D3CB9D59BD960BA73299B6012467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:bf:ca:c6:2a:de:0b:f9:57:7c:a9:04:9a:
4e:e5:9a:6b:5b:52:80:1d:99:09:76:e2:56:d0:db:
ab:4d:cc:fe:ad:d0:c2:d8:1c:55:97:2d:79:c1:6d:
67:f1:50:09:df:05:1c:fc:3b:87:9d:4a:fd:1f:1a:
ef:04:3e:c1:13:a3:39:a6:36:93:3b:38:b1:42:e2:
cc:4d:32:b6:c3:d0:e6:8c:11:43:f6:82:98:dd:df:
a7:57:c6:cd:a5:9f:df:24:84:88:4a:73:a1:c7:0c:
b5:20:78:a1:15:5b:5f:29:30:5e:d7:93:82:38:e3:
c7:14:41:34:63:de:01:e8:5c:50:80:0e:95:3a:86:
df:bc:53:16:78:9b:db:73:ae:97:d8:ef:ba:0c:97:
0c:b3:68:c5:d8:df:da:d5:0b:da:b4:cc:dc:f8:76:
aa:20:fa:54:12:82:d2:66:0b:21:1b:0a:47:57:e2:
5d:c8:56:f8:1b:94:32:ee:da:bb:73:cc:23:6a:e6:
ee:d4:54:49:08:f3:b4:cd:89:80:8e:17:a2:7f:87:
9d:da:9a:07:4b:55:b0:ca:46:66:a4:68:96:85:11:
6b:0d:22:4d:2a:bf:63:9f:a6:5a:3f:54:e1:20:62:
6d:8a:c5:de:0c:4a:f3:41:44:a4:91:30:bf:5a:81:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8C:39:45:4B:21:D3:CB:9D:59:BD:96:0B:A7:32:99:B6:01:24:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afc8::/32
Signature Algorithm: sha256WithRSAEncryption
39:5d:95:02:80:75:6b:6b:45:7f:2d:b2:6c:1c:95:0b:94:16:
9e:0b:f9:55:ab:df:87:c9:94:15:c0:f7:3f:1e:bd:07:15:93:
27:83:d5:f0:f9:95:2b:31:a8:ec:48:be:be:05:31:9f:16:9f:
6a:ac:c3:e1:01:39:f4:6e:57:36:a9:db:f6:e5:f8:45:18:e9:
96:d4:4a:9c:eb:55:97:c4:a6:c3:23:93:92:ef:ad:2a:40:b4:
3d:c7:7e:1b:08:10:79:b1:a9:91:13:c3:a1:b8:39:b5:d5:0f:
72:ed:18:d9:72:61:98:5a:7d:61:2a:23:d9:9b:fc:20:54:6a:
d0:0a:92:82:0c:e8:a8:45:b2:4c:a0:13:eb:84:85:ce:25:17:
97:7f:a8:9d:3e:44:14:6c:63:ad:d7:08:9c:d5:33:dd:d5:d6:
a6:b5:66:ba:30:28:51:5c:13:a4:b4:12:85:6b:1b:be:ec:9a:
a4:e2:1a:a5:ed:ea:0f:93:56:9a:13:91:87:ef:ba:86:4f:e3:
4a:50:79:c0:11:ea:b7:de:c7:c7:45:08:e0:a3:af:ee:a2:51:
1f:77:15:78:9e:d6:6a:24:14:35:19:7f:38:76:ed:c4:32:24:
e6:af:b2:1a:30:82:8a:79:c9:b6:e3:2a:8b:01:44:2d:c4:76:
da:29:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:18 2026 by rpki-client