Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146693.roa
File: AS146693.roa (raw, json)
Hash identifier: Ef1ktPDMLdecuwqm4dnVHlUylOVOqNVkplw/Tmrizro=
Subject key identifier: 4A:D3:2F:A8:47:37:9F:EE:FC:E6:6F:46:E2:8D:8F:A3:2D:B5:2B:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1E2037D6DB58531BCD572DB651C37DBCC55551DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146693.roa
Signing time: Fri 22 May 2026 06:58:25 +0000
ROA not before: Fri 22 May 2026 06:53:25 +0000
ROA not after: Fri 21 May 2027 06:58:25 +0000
asID: 146693
IP address blocks: 240a:afcb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:20:37:d6:db:58:53:1b:cd:57:2d:b6:51:c3:7d:bc:c5:55:51:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:25 2026 GMT
Not After : May 21 06:58:25 2027 GMT
Subject: CN=4AD32FA847379FEEFCE66F46E28D8FA32DB52BC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:f1:ea:96:08:b0:5d:fc:22:96:1e:e3:7c:
d9:46:be:f2:13:ec:9e:b1:25:a6:fa:04:8d:32:5a:
2e:e9:89:b8:eb:a7:f1:2a:f1:de:48:6c:4b:cc:bc:
dd:c3:e2:a8:73:79:5b:b2:ef:97:de:91:dc:a1:ac:
67:67:78:e8:98:8d:36:c6:ba:64:12:d2:2d:60:e9:
11:e7:fe:20:ab:ec:28:ba:7f:34:1a:8c:e0:5b:e9:
59:d4:ca:27:65:b4:07:1b:bb:79:26:7f:c6:42:77:
cb:17:a6:73:d9:a1:71:b9:6e:ed:b2:5f:15:28:33:
c0:4e:b8:09:fa:75:58:11:87:16:9f:a3:04:1b:31:
fa:c8:80:7e:55:ce:17:10:2f:87:eb:91:8c:8b:6b:
47:61:67:06:09:8d:c6:63:7f:4f:a2:db:8c:03:7a:
c6:55:6b:82:cc:ca:6c:1d:8b:ea:ca:67:0d:22:c7:
dc:38:0c:bc:83:16:d6:8e:a8:2f:d2:0e:f7:3a:4c:
4d:bb:43:b8:6e:30:7f:53:da:4f:e1:20:4f:5e:c8:
ad:f5:8a:7f:0e:3e:e1:b1:da:3b:77:c9:6f:12:9e:
82:08:95:88:29:f2:3a:dd:6a:e3:3d:a8:db:3a:a2:
b5:4a:09:c0:f0:b9:92:f3:24:f8:fb:47:8d:37:b4:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D3:2F:A8:47:37:9F:EE:FC:E6:6F:46:E2:8D:8F:A3:2D:B5:2B:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afcb::/32
Signature Algorithm: sha256WithRSAEncryption
9b:1d:0d:cc:1d:39:55:85:11:25:e7:65:84:24:52:ee:53:da:
5b:40:47:0d:40:14:51:db:ad:f0:83:ec:4b:cb:dd:82:b3:cd:
a4:1b:05:e6:ca:c1:35:b8:a6:cb:b4:5b:e2:78:2e:db:09:a3:
f9:40:62:7c:05:7f:44:6f:7b:e7:f4:89:29:37:d9:73:00:d2:
a8:d4:6c:1a:c9:62:a6:08:86:4e:36:ff:ee:05:5f:8c:ea:61:
68:c7:b8:82:3c:f2:b1:bd:34:f2:f8:78:8e:37:50:ad:80:6c:
14:01:5d:ff:2e:9b:12:10:30:48:cb:1d:aa:4c:ef:53:f8:bd:
98:93:16:bd:90:96:f4:86:0c:e2:66:0e:9e:d1:b4:f8:fc:97:
b8:ac:57:8d:42:db:48:8e:e0:b8:d3:59:db:d9:bc:c0:42:87:
e9:b1:25:27:cd:1e:bd:1f:f5:45:62:c5:06:5e:26:d0:91:95:
6c:98:ef:00:67:45:ef:11:79:d9:2b:c1:00:c6:62:18:c1:a3:
59:1e:0c:49:4c:25:95:51:df:0a:56:1e:b7:10:6a:dd:35:f1:
05:c9:19:26:49:ed:43:98:c7:1e:e6:01:4d:bd:89:fb:41:da:
49:83:20:b2:56:98:9e:65:26:5d:0a:29:46:e0:27:b2:38:61:
57:28:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:00 2026 by rpki-client