Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146708.roa
File: AS146708.roa (raw, json)
Hash identifier: 8m7f/7/Zs7mXkuBg/j9SDl5fnIWs3pYX5pIkMsjeL3M=
Subject key identifier: 60:45:2C:BF:7E:A8:98:03:4D:73:B9:96:D1:BC:0F:F1:92:BE:5B:CF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78A5FC7A4EFE233221FE9EAF5AB46A26C2F04622
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146708.roa
Signing time: Fri 22 May 2026 04:27:14 +0000
ROA not before: Fri 22 May 2026 04:22:14 +0000
ROA not after: Fri 21 May 2027 04:27:14 +0000
asID: 146708
IP address blocks: 240a:afda::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a5:fc:7a:4e:fe:23:32:21:fe:9e:af:5a:b4:6a:26:c2:f0:46:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:14 2026 GMT
Not After : May 21 04:27:14 2027 GMT
Subject: CN=60452CBF7EA898034D73B996D1BC0FF192BE5BCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:44:3c:87:4b:41:63:8f:7f:45:f5:f3:85:
d2:2e:4e:63:9b:07:26:94:19:6a:aa:d2:ca:b4:4a:
13:d5:d5:b1:b1:44:4f:44:8d:03:c6:5e:14:65:af:
04:f5:50:27:10:ef:c1:22:e6:1b:ca:65:ea:fc:d2:
4d:9d:0d:a3:63:cf:c7:b4:e0:26:8f:6c:9d:02:8d:
9d:f9:0a:55:22:18:eb:b9:08:7c:66:9b:a8:2d:1c:
2b:61:ff:6e:e1:aa:c8:59:ea:0f:16:3a:ee:a8:bb:
be:31:57:cf:7f:59:55:ed:07:44:98:b9:ba:33:ab:
15:93:52:cb:78:8f:51:8b:de:60:de:c4:44:4e:02:
5e:7a:ca:48:7f:16:ea:de:eb:8a:6d:f1:95:2c:b9:
2e:6a:a6:34:f5:05:ee:2d:1d:3d:ff:f9:28:16:43:
94:30:3c:75:ce:59:36:73:f6:42:5a:10:14:f7:89:
9e:86:ce:ca:e8:ac:fd:1f:92:07:06:90:e9:bd:18:
05:87:59:57:76:39:5a:9c:4a:d6:12:90:41:b2:1d:
99:78:8e:d7:b3:10:59:52:80:e6:40:46:32:1f:fb:
a4:75:2b:ac:64:a9:42:e7:5d:20:86:59:51:3b:e9:
b3:2b:bb:43:6b:c6:b9:7c:94:52:9c:da:87:c8:6a:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:45:2C:BF:7E:A8:98:03:4D:73:B9:96:D1:BC:0F:F1:92:BE:5B:CF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146708.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afda::/32
Signature Algorithm: sha256WithRSAEncryption
57:6d:a0:cf:37:08:fc:ca:ce:22:1d:cc:ed:9d:14:2d:61:8f:
53:93:d4:36:fd:2c:06:30:37:b8:3a:e8:20:fa:ed:23:b1:99:
ee:cb:b6:64:3c:e2:d1:92:5d:22:e4:5e:67:d0:fe:eb:9e:fb:
f2:df:f2:73:cb:cf:00:3f:25:65:28:00:27:a0:a1:7a:13:38:
ba:bd:93:e1:16:62:c3:3e:15:76:ee:3b:e0:e9:97:9f:07:a8:
e7:c7:d4:86:dc:60:64:72:ec:7b:51:09:07:f1:72:b8:7b:b2:
5c:ef:55:f4:98:a4:cb:3d:c6:82:75:4d:26:f8:c2:2a:4f:7a:
0a:1d:bb:63:6a:26:94:a7:2e:62:29:e5:6a:f8:cb:b5:b9:ef:
e2:1d:08:c8:f2:c5:73:91:fe:ac:f5:55:5d:a7:fa:fd:13:d9:
06:e0:b9:80:f1:6a:68:9f:e0:0c:a9:7b:fd:72:21:e5:03:fe:
78:27:82:47:22:be:a5:b4:99:c3:05:3d:c5:1a:18:a3:47:99:
85:7b:8b:69:f8:25:3e:f5:51:d4:9e:b2:9d:ec:91:8f:5e:51:
0f:bc:50:6e:4d:4b:d7:6e:87:d8:26:9a:9c:db:4b:17:78:df:
aa:39:ef:91:4c:c8:eb:b6:d1:a4:27:b3:b2:ba:50:f9:88:78:
26:c1:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:38 2026 by rpki-client