Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146697.roa
File: AS146697.roa (raw, json)
Hash identifier: js3oINIHlARI7gIKF/JYz9BB+UpSX/LI31fs7Bwc0cc=
Subject key identifier: C3:13:FC:52:51:63:FC:45:87:78:56:89:06:3E:E7:27:9B:93:CD:4D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E381B2B9B99777E3986D4C0D56BB07B04D54232
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146697.roa
Signing time: Fri 22 May 2026 07:41:20 +0000
ROA not before: Fri 22 May 2026 07:36:20 +0000
ROA not after: Fri 21 May 2027 07:41:20 +0000
asID: 146697
IP address blocks: 240a:afcf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:38:1b:2b:9b:99:77:7e:39:86:d4:c0:d5:6b:b0:7b:04:d5:42:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:20 2026 GMT
Not After : May 21 07:41:20 2027 GMT
Subject: CN=C313FC525163FC4587785689063EE7279B93CD4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3c:7a:bd:34:e5:d0:13:14:03:79:21:be:fb:
ec:a4:b7:48:07:8a:50:66:4c:95:db:1c:c1:b1:4d:
8a:62:4c:09:1f:5a:b3:bd:69:40:db:c6:d6:ba:c9:
7e:5e:64:07:c3:4b:e0:26:2b:c8:49:85:53:4f:6e:
64:fe:ff:5b:57:f9:22:7d:94:2c:3d:18:60:74:ec:
ab:3b:db:d2:0f:fa:8a:20:6f:7f:a1:de:04:c2:9b:
cc:b8:00:96:d4:09:b5:25:6c:fd:78:aa:07:6b:59:
39:c2:f9:c6:88:5e:ca:48:36:47:d3:ec:d0:fb:94:
d9:89:b8:bf:f2:56:1d:72:d2:4e:7d:59:06:f0:92:
0f:96:7e:41:76:be:fa:be:4c:74:f3:a5:d8:5b:95:
78:60:54:1c:0f:0c:38:ca:bb:a9:ce:c5:47:11:8e:
87:bc:b9:89:73:1f:50:b7:a7:6e:0e:37:e6:da:e5:
aa:14:7b:df:77:17:76:c1:9c:20:2a:f9:ce:2e:2a:
6e:3f:ab:aa:ca:5b:38:44:69:86:45:db:89:0d:14:
e1:8d:c6:1e:10:6a:e9:c7:cb:83:0d:46:1a:c5:64:
4b:f2:fd:e4:bd:fe:09:61:ce:8f:21:9d:56:58:a4:
cb:1c:d5:ba:b4:15:c6:bf:d8:b4:13:6a:1e:f1:c4:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:13:FC:52:51:63:FC:45:87:78:56:89:06:3E:E7:27:9B:93:CD:4D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146697.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afcf::/32
Signature Algorithm: sha256WithRSAEncryption
25:9f:f3:43:7e:d1:ac:c1:00:2c:2e:2b:1a:b9:bd:e6:8c:71:
3d:c2:62:75:42:58:b4:4b:4e:3f:58:a5:89:e0:31:ac:d9:84:
a8:e3:2c:58:0a:b7:ba:dc:bf:d1:06:77:47:3e:cd:88:7b:75:
5c:1c:d2:5c:58:c7:7a:f0:34:ca:02:cd:eb:89:25:06:d8:f1:
e6:3e:76:73:cb:81:7f:aa:d7:76:0d:5a:4a:73:f8:2e:c3:20:
85:aa:94:d0:72:58:83:e0:c8:8a:84:cc:fc:23:af:3f:5a:11:
e5:54:b1:47:df:44:66:85:a7:6b:e4:f7:b8:0a:86:e7:d7:fb:
99:e9:c0:88:5c:b9:88:02:ec:94:31:a8:b7:45:42:ba:bb:69:
1c:8d:e0:5d:8c:8c:16:56:e3:c5:1c:fb:32:61:ab:c4:5c:73:
20:b8:a2:e5:05:3f:20:02:cd:53:eb:f9:a2:17:92:dc:1f:3a:
35:d9:d7:13:5d:9b:3b:38:d9:95:c2:bd:60:3f:52:bf:b7:8a:
b9:3f:23:05:43:00:54:3e:9a:4c:e6:9e:08:aa:06:df:8d:9e:
2c:bb:51:b0:5e:a2:23:bc:47:f0:46:ea:c0:fd:ff:6c:58:ac:
48:4e:02:26:b6:16:d1:5d:4a:bf:a0:ae:07:22:a8:fb:d4:52:
9e:f2:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:21 2026 by rpki-client