Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146691.roa
File: AS146691.roa (raw, json)
Hash identifier: ZvsYR+cjxRP7QIGvXD1y8xzzad0YM5qxe7ncDtplLK0=
Subject key identifier: D2:5D:84:F4:A4:EC:3C:07:FA:77:80:E7:CE:08:18:04:CB:B7:CB:9D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 777E5009F1B5DBDE66F46FD61AF43D6BB30B025A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146691.roa
Signing time: Tue 26 May 2026 06:12:58 +0000
ROA not before: Tue 26 May 2026 06:07:58 +0000
ROA not after: Tue 25 May 2027 06:12:58 +0000
asID: 146691
IP address blocks: 240a:afc9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:7e:50:09:f1:b5:db:de:66:f4:6f:d6:1a:f4:3d:6b:b3:0b:02:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:58 2026 GMT
Not After : May 25 06:12:58 2027 GMT
Subject: CN=D25D84F4A4EC3C07FA7780E7CE081804CBB7CB9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:bd:ce:e2:1f:70:98:dc:e7:9f:46:f5:e0:
89:0b:9b:a4:08:75:88:2f:09:7b:47:59:23:30:8a:
9a:6b:6c:e3:0f:4e:b2:49:ae:fb:89:35:24:fe:c7:
fc:0b:aa:57:e0:2f:aa:cd:48:1e:e9:c8:4b:d5:6d:
e1:a1:a8:3f:1e:05:25:57:80:9e:b9:f8:59:07:b3:
a8:ff:fa:67:a4:ac:49:da:12:33:73:1c:15:d3:3d:
55:36:ca:fc:e7:3b:d3:5b:8f:41:d7:66:4a:2f:c6:
7e:e7:0c:14:ed:e7:0f:32:d3:61:c6:d1:ee:15:12:
e3:67:ef:7d:08:87:a0:18:b1:13:aa:6a:cc:bb:87:
7c:d0:f0:87:b4:ea:a5:2b:13:07:1e:00:3e:a9:0c:
39:b1:05:03:36:19:80:f1:da:d4:d1:b1:0c:1d:66:
29:90:51:d6:83:85:2d:8c:ec:1f:1d:09:fb:4a:31:
89:88:94:80:8e:cd:37:c6:1d:a1:31:8a:7e:80:a6:
60:6a:6c:57:3e:10:d1:4a:ea:25:55:72:9b:3e:ec:
bf:2f:36:87:9d:53:31:57:a8:73:96:97:0f:9e:51:
82:eb:70:37:b6:46:10:80:fc:ec:a8:74:78:5a:e9:
af:88:39:23:ef:1e:39:5c:57:17:65:07:f7:5d:27:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5D:84:F4:A4:EC:3C:07:FA:77:80:E7:CE:08:18:04:CB:B7:CB:9D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afc9::/32
Signature Algorithm: sha256WithRSAEncryption
2d:ac:a4:3a:83:0f:c5:26:23:3e:87:46:6c:ec:75:8e:6e:18:
f5:b1:8c:46:a1:d3:26:08:24:6c:bf:5a:2f:84:b5:18:4e:d6:
e5:a3:84:5c:6d:03:c1:f5:09:95:9a:b6:d1:d9:c6:12:c7:83:
ce:b4:2a:2a:4b:83:3c:d7:0f:c9:82:c0:d7:d8:55:ac:ba:e2:
cd:bc:a8:62:9c:6c:27:3a:0d:24:47:f7:4d:99:f1:42:61:97:
b6:c8:f0:d2:64:b6:79:0b:ee:b0:fe:82:f6:c8:d7:36:16:c1:
f2:ad:63:91:1c:b2:24:e7:d7:c9:db:1b:cf:bc:a1:a6:e8:f5:
73:49:84:d7:c0:bc:f4:32:53:d9:b7:d5:75:74:f4:9b:4a:94:
33:6e:30:96:e4:ca:e4:c9:6b:b6:08:1b:36:12:e8:26:dc:f6:
1b:1c:21:a9:8d:62:74:a9:cf:d2:54:4d:4f:89:c7:69:c4:2d:
5d:5f:f0:4d:5c:bb:e9:d9:8e:62:77:1f:e2:49:f5:f2:25:41:
2e:e9:38:59:6c:86:a7:d8:05:30:27:34:49:00:64:13:03:d1:
29:66:16:f0:b6:a0:9e:7b:89:59:e4:61:2d:ca:30:00:5c:18:
56:ae:e4:58:f1:18:b7:bb:7a:70:25:6b:ce:45:e4:e8:4a:8a:
aa:94:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:58 2026 by rpki-client