Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146703.roa
File: AS146703.roa (raw, json)
Hash identifier: I0bqh+idpfG4IGqaDBtmaiazNxr6qbxtl6/H4NRgxBE=
Subject key identifier: B0:B4:28:32:C3:00:23:C6:21:06:BA:BB:36:54:C8:F2:E6:6B:A5:BE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 12CDA48D83FDF1ED4667275D4E869757EE63E09F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146703.roa
Signing time: Mon 25 May 2026 01:20:14 +0000
ROA not before: Mon 25 May 2026 01:15:14 +0000
ROA not after: Mon 24 May 2027 01:20:14 +0000
asID: 146703
IP address blocks: 240a:afd5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cd:a4:8d:83:fd:f1:ed:46:67:27:5d:4e:86:97:57:ee:63:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:14 2026 GMT
Not After : May 24 01:20:14 2027 GMT
Subject: CN=B0B42832C30023C62106BABB3654C8F2E66BA5BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:20:fb:aa:9b:74:e2:3e:bd:c2:d4:c6:c3:
4a:27:3d:56:1e:fc:30:91:ed:7a:f7:83:cf:af:20:
06:ab:4b:82:25:e4:f5:14:a4:f8:31:b6:45:59:4b:
dc:08:5e:ae:eb:c6:a4:66:b8:30:e7:aa:14:1e:7f:
c9:eb:b8:ff:39:2a:20:85:f4:92:bb:78:88:e1:7a:
c9:45:5c:58:b8:cf:a8:3f:e6:e9:78:13:d4:a1:08:
67:cd:97:e9:dc:ab:56:2c:2f:5f:26:fb:d6:ac:99:
6b:f2:b7:66:7c:ef:02:aa:0e:38:db:6f:c5:95:a5:
aa:c2:7f:32:b4:fa:6e:ca:32:4e:3c:96:e5:98:93:
d7:e2:44:6a:3e:ea:4a:71:20:2f:f9:8d:a8:86:40:
c7:7c:ac:b0:9b:c9:0d:bc:d1:23:d7:3d:94:ab:5d:
28:4a:8a:58:3b:87:8a:17:9f:af:76:7c:83:6a:da:
24:2a:24:30:d9:d7:ef:43:f4:97:86:71:95:45:a0:
08:00:25:9a:a9:42:44:a9:04:11:13:8e:ae:30:75:
b3:15:69:2f:c2:f2:a9:eb:af:4f:4e:2b:c5:f7:29:
07:c4:f9:ae:58:1f:36:7e:38:ad:13:e2:36:b7:60:
48:02:8d:19:3b:39:d9:f8:67:6d:16:27:76:fb:cf:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:28:32:C3:00:23:C6:21:06:BA:BB:36:54:C8:F2:E6:6B:A5:BE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afd5::/32
Signature Algorithm: sha256WithRSAEncryption
a5:73:92:df:8b:39:12:81:e0:bd:78:05:6c:d2:7f:b8:f8:b1:
ae:25:aa:64:eb:6e:5e:b9:1e:09:d3:f2:6b:b3:a6:63:a6:3a:
a7:a6:a9:68:6e:9f:72:b7:2c:6d:f7:de:4a:56:4b:be:d5:fd:
11:07:6a:50:8a:4a:81:3e:c5:8b:a6:08:1d:85:b0:be:de:8a:
c0:e6:27:f4:f7:d0:52:71:e1:64:65:d0:b1:44:95:f9:d9:07:
dd:45:94:0d:bd:50:35:17:68:b9:97:fb:de:b2:1f:92:e1:1e:
b3:0c:34:b9:cd:74:ff:9b:39:9d:b7:f1:d1:09:4d:68:1d:c2:
21:78:89:39:53:d7:47:e7:65:88:7a:d7:22:ad:97:be:7c:e4:
8f:de:36:4e:33:97:e4:7e:cb:71:2b:d2:8a:1b:d0:42:b0:30:
27:98:a9:aa:05:6e:9e:ec:54:09:53:96:55:e9:60:3d:6e:09:
4b:5d:f5:23:18:3b:39:36:f5:29:db:b6:82:be:1f:f1:4b:d6:
a4:9e:8f:c4:60:07:51:2e:66:81:ba:19:3f:a1:f3:a6:c3:8c:
9f:52:36:6c:36:9f:23:3d:98:02:ca:eb:0c:15:b9:fa:aa:96:
34:5a:af:e5:06:3d:55:7d:cc:7d:8f:5a:97:a6:2f:46:79:7c:
ed:7b:c2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:44 2026 by rpki-client