Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146709.roa
File: AS146709.roa (raw, json)
Hash identifier: yIMYTDkU/5Pp8Cs6CmXeyAwHFgavcDlxBzLKjWpqQ20=
Subject key identifier: 0D:F0:F8:6C:04:38:ED:A6:B8:13:2B:F5:06:DF:6A:A6:DD:C2:90:AD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77DA5E1F5FC128D3A7A69C7AA8593C8CCF9C2208
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146709.roa
Signing time: Tue 26 May 2026 08:52:47 +0000
ROA not before: Tue 26 May 2026 08:47:47 +0000
ROA not after: Tue 25 May 2027 08:52:47 +0000
asID: 146709
IP address blocks: 240a:afdb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:da:5e:1f:5f:c1:28:d3:a7:a6:9c:7a:a8:59:3c:8c:cf:9c:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:47 2026 GMT
Not After : May 25 08:52:47 2027 GMT
Subject: CN=0DF0F86C0438EDA6B8132BF506DF6AA6DDC290AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:18:fd:dd:c0:aa:d9:73:d9:54:bb:5a:34:
15:2b:64:08:7a:8e:44:5a:eb:57:a5:6e:dd:d2:0d:
d2:a3:eb:4e:8a:ff:29:75:e5:0e:d0:9f:6e:3e:55:
de:17:f5:f5:ea:78:21:00:52:24:d1:91:92:d0:f4:
44:ff:22:63:43:29:97:6f:79:f3:e5:80:97:da:a0:
27:19:2e:9c:b9:7b:a1:78:94:1b:a4:8e:ac:f2:34:
bc:4f:a2:3c:e7:61:3b:2b:7f:ae:cf:84:f0:2c:dd:
65:3e:85:4b:b1:ea:ce:77:c6:3a:ce:30:ab:be:e6:
23:b1:71:15:33:ad:92:08:64:20:45:63:ad:8d:a6:
8f:1a:8b:4e:0b:03:f7:55:af:56:c8:15:75:e4:31:
8d:11:a9:1e:1c:73:82:cd:0b:96:f1:0e:3f:ef:00:
a4:4a:63:2c:c7:46:bb:58:32:ff:0d:62:74:2e:1d:
4d:e3:02:35:33:82:c9:08:94:ab:b3:64:a3:c1:79:
cd:ee:41:43:80:b7:65:32:46:c3:5f:d6:b4:c0:1b:
81:5d:51:49:d0:4b:44:61:e4:dc:54:8e:89:5e:47:
18:d1:8d:c5:32:4f:ea:55:6f:1f:5a:b8:b8:14:32:
f6:2c:e7:f7:12:a8:af:5a:ce:31:11:89:8a:fe:3d:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F0:F8:6C:04:38:ED:A6:B8:13:2B:F5:06:DF:6A:A6:DD:C2:90:AD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146709.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afdb::/32
Signature Algorithm: sha256WithRSAEncryption
91:2a:d5:2a:1b:0a:cc:ad:a9:b4:02:a2:bf:db:df:2e:77:ab:
7b:04:04:1b:d2:5b:da:1e:8b:4d:73:ff:ed:d9:e2:cd:36:88:
0f:11:23:89:52:05:bc:a3:0d:c4:cf:79:d9:6a:e8:23:7b:8b:
5d:d6:3f:16:e1:17:05:02:2f:cf:6c:57:95:c4:3a:20:ef:ed:
a8:14:ce:b4:b2:5f:da:53:b6:8b:ff:92:6a:27:e3:19:c9:be:
5e:3c:eb:8e:9e:65:98:72:8e:9b:c4:59:2b:d2:91:bc:47:77:
da:29:b8:8e:fb:2b:43:24:33:27:ab:cd:e5:54:0b:ba:ff:be:
c1:ef:a7:bb:33:8a:97:f8:3a:2b:32:8a:15:d2:82:22:71:87:
1c:1f:6c:6a:9b:4f:b5:6c:6b:d8:ec:d4:21:82:ee:0e:92:54:
78:63:80:59:54:72:94:54:b3:71:9e:09:35:fd:95:cc:93:93:
08:23:8a:04:c6:e1:c9:95:a0:0a:62:61:e7:a7:4b:da:33:3d:
34:3d:67:d7:55:dc:62:5c:e9:12:27:92:bf:59:99:af:d3:10:
bd:b8:3a:e1:34:23:85:8c:fd:a6:dc:9e:8d:df:01:f6:a7:6d:
ba:70:c4:ec:4c:0a:dc:89:f3:c9:3b:9c:db:75:3e:b6:ce:4c:
98:46:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:51:01 2026 by rpki-client