Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146699.roa
File: AS146699.roa (raw, json)
Hash identifier: DeWV/wUIDLAhJmS481foOfiQ8Vrtu05nh5fLyBTb8Aw=
Subject key identifier: 25:99:31:F3:7D:FA:67:AE:B3:FC:43:FC:89:5C:37:79:F5:DF:D4:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3578BDBFF38C599A06B3146B138004AF3925E730
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146699.roa
Signing time: Fri 22 May 2026 07:24:41 +0000
ROA not before: Fri 22 May 2026 07:19:41 +0000
ROA not after: Fri 21 May 2027 07:24:41 +0000
asID: 146699
IP address blocks: 240a:afd1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:78:bd:bf:f3:8c:59:9a:06:b3:14:6b:13:80:04:af:39:25:e7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:41 2026 GMT
Not After : May 21 07:24:41 2027 GMT
Subject: CN=259931F37DFA67AEB3FC43FC895C3779F5DFD41C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:1c:2e:cf:6d:0b:2e:27:0f:27:bf:e0:38:
cb:45:aa:40:29:af:f8:6c:48:57:01:1f:83:42:6e:
2e:46:90:4f:ba:f7:46:0d:3e:36:c7:31:b7:51:d7:
27:b2:c1:fb:0d:61:d6:6c:f3:e4:21:cd:c1:5a:04:
bf:75:e3:b1:c5:34:ec:18:a8:ec:72:98:85:ea:16:
35:83:12:13:c0:0c:69:b4:c8:e3:dd:a0:c0:9a:7b:
5f:3b:d6:a8:fa:d3:2f:3f:32:77:f0:a7:81:e4:85:
58:62:1f:78:69:55:98:a3:98:9f:56:84:ff:a6:d8:
28:19:76:2d:3c:a8:8a:21:01:d6:fa:2e:b6:8a:f3:
00:a9:c4:8c:be:ba:07:14:89:f5:8b:7a:75:af:41:
f9:21:2d:d2:bf:0c:f2:e6:ed:97:b1:05:fa:61:5a:
df:76:e6:18:77:7c:2b:fc:f6:32:04:32:c3:6b:ca:
d5:81:8b:d7:98:76:f4:bd:4d:27:2e:a9:2b:40:40:
1a:ac:a5:bc:f1:bb:c1:a4:35:2c:d5:9c:c1:b1:e6:
56:89:2f:1d:b1:28:cd:e8:4d:4d:15:03:f4:67:78:
46:df:5f:4e:6a:d8:55:22:78:8a:96:f5:d7:51:a5:
ae:97:ec:c2:02:73:18:c0:ef:51:11:9e:17:91:31:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:99:31:F3:7D:FA:67:AE:B3:FC:43:FC:89:5C:37:79:F5:DF:D4:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146699.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afd1::/32
Signature Algorithm: sha256WithRSAEncryption
14:ff:63:60:2c:8f:bd:3a:0f:24:6a:9c:06:74:4e:aa:6c:85:
c0:18:bb:ef:7c:b0:6c:e9:65:6c:72:49:08:6b:5a:2d:6c:14:
23:95:0f:fa:f0:6c:61:51:bf:82:75:d8:68:27:b3:ab:36:c4:
89:15:8d:14:96:16:c1:0d:90:40:44:b5:62:80:d7:f7:6a:51:
fd:18:c3:11:c1:d1:66:34:b2:f9:65:5c:b2:00:63:76:2c:80:
27:73:a0:94:69:13:ad:07:1c:e2:eb:df:82:79:0d:74:19:72:
d8:6d:19:74:02:ea:83:e6:e0:a3:ce:bc:32:53:0b:df:ec:5c:
6b:43:04:4c:84:55:de:1c:b8:40:65:90:3c:34:64:8e:82:a8:
15:51:a1:01:28:32:c3:45:1c:b9:0e:f9:9a:cb:f0:ee:e2:ae:
c5:d4:80:35:b1:32:74:1d:6b:82:06:02:8e:24:bd:81:b6:a5:
d2:7e:2d:d9:60:04:46:49:a4:b3:57:09:e8:1a:b9:9a:9b:36:
64:cf:cf:02:5d:8f:41:4a:f7:39:88:5e:a2:36:70:7d:e2:2a:
59:69:ec:90:45:e7:df:ac:cc:ff:9e:02:26:13:d4:0e:98:95:
27:f1:2f:db:90:36:fa:5c:61:85:7b:87:a7:74:d1:be:ba:ae:
e0:fa:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:12 2026 by rpki-client