Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146692.roa
File: AS146692.roa (raw, json)
Hash identifier: 0UIuoCX/u28UMZSLc/e4kB1uJ3674D4r3cOfOoLlucM=
Subject key identifier: 91:6F:29:E4:70:1E:F1:43:93:7B:74:AA:EF:42:BD:40:7D:F4:E5:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4AD58075216CFDF8825C061CFECACC2721703763
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146692.roa
Signing time: Mon 25 May 2026 01:20:15 +0000
ROA not before: Mon 25 May 2026 01:15:15 +0000
ROA not after: Mon 24 May 2027 01:20:15 +0000
asID: 146692
IP address blocks: 240a:afca::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d5:80:75:21:6c:fd:f8:82:5c:06:1c:fe:ca:cc:27:21:70:37:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:15 2026 GMT
Not After : May 24 01:20:15 2027 GMT
Subject: CN=916F29E4701EF143937B74AAEF42BD407DF4E52D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:50:16:af:a1:c2:cb:82:75:38:0d:8e:d1:
fa:97:8d:b7:10:cd:86:d7:95:0f:9f:dc:86:c3:ff:
2a:92:f8:4c:81:bf:ef:0c:5d:ca:fe:8e:70:af:03:
35:55:8b:2b:29:5b:3f:10:3e:d1:55:8e:9d:72:21:
21:30:3d:e2:28:71:e7:87:e9:9a:32:7b:9f:d3:f6:
c8:21:f7:cb:a7:dc:5a:d3:6e:89:f3:ce:99:15:67:
e3:9c:b4:4d:93:0c:9d:e5:a7:cd:0d:f1:9f:29:c2:
8b:b0:45:ee:c2:79:3e:d8:d3:35:3a:92:93:5b:82:
d3:cc:55:e5:08:b1:46:13:31:30:ef:ab:6a:cc:be:
58:f7:3e:8f:a3:e1:c7:83:3b:ed:66:c3:5f:e1:5b:
16:10:54:c8:96:fb:d9:0c:28:2a:8c:68:70:a0:52:
bc:e6:a2:ef:46:9c:a5:65:59:9f:32:62:65:dc:49:
4d:81:10:a2:c6:f4:b5:35:01:0c:ad:f2:8f:f1:3a:
d0:7c:62:d3:15:94:9d:9e:8f:19:38:6b:a3:be:12:
81:20:f9:47:cb:70:f8:bb:02:11:cc:ec:7d:38:8e:
da:da:d2:16:0b:e8:90:8f:eb:cb:86:c1:00:c5:1a:
8c:af:e2:02:e0:58:4a:23:f8:ff:e5:be:34:af:c5:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:29:E4:70:1E:F1:43:93:7B:74:AA:EF:42:BD:40:7D:F4:E5:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146692.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afca::/32
Signature Algorithm: sha256WithRSAEncryption
ba:b2:2a:c4:19:b6:ff:04:09:96:08:2f:93:cc:c9:43:31:47:
4c:f5:fe:3b:01:12:08:92:c2:32:22:fb:98:b1:8a:85:10:b4:
90:96:b4:ed:a4:6f:00:f9:ad:89:76:88:61:41:42:81:88:6a:
19:18:d0:e9:5a:91:ff:4b:a9:88:9e:35:cd:6f:04:e3:92:c4:
a4:d8:8a:a1:36:c3:5c:95:57:8c:99:57:d5:b4:b0:44:55:7a:
09:64:96:53:26:a9:3b:a0:70:d9:2f:d6:26:19:14:bf:a0:3d:
16:10:2f:68:c5:6b:08:d1:81:1f:f4:9c:3b:32:4d:f0:65:7d:
59:3c:3a:5e:d1:f7:09:9d:fd:6b:01:2f:0f:41:6a:5b:01:02:
3b:4b:84:6d:be:01:3c:38:3c:30:4a:ce:50:86:20:ef:88:e7:
89:14:69:26:8a:18:e0:a8:d0:56:01:3c:fb:30:fb:87:f7:2d:
5b:47:c5:6c:6e:7b:82:0f:e0:98:98:db:fa:50:cb:a0:53:14:
c5:ba:13:a8:e2:df:45:3c:fe:52:15:31:e3:e0:48:17:16:cc:
ac:d0:91:09:0f:d3:28:66:a3:9a:4e:e9:43:53:64:01:e8:07:
4c:09:09:be:d0:70:30:43:ec:4c:11:65:01:40:b1:9f:7a:06:
2c:7a:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:01 2026 by rpki-client