Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146716.roa
File: AS146716.roa (raw, json)
Hash identifier: YFL8RJNtcCuF8gD8QiyKeft7E2Z4q2CNIf5zjm0+D4I=
Subject key identifier: C5:96:90:8F:71:A3:4F:65:C3:46:29:75:75:52:D9:FE:76:1B:59:18
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 784939CAE0F87FF8D6848D4BA1D37323639300B6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146716.roa
Signing time: Fri 22 May 2026 07:32:09 +0000
ROA not before: Fri 22 May 2026 07:27:09 +0000
ROA not after: Fri 21 May 2027 07:32:09 +0000
asID: 146716
IP address blocks: 240a:afe2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:49:39:ca:e0:f8:7f:f8:d6:84:8d:4b:a1:d3:73:23:63:93:00:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:09 2026 GMT
Not After : May 21 07:32:09 2027 GMT
Subject: CN=C596908F71A34F65C34629757552D9FE761B5918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:0c:dc:07:d5:44:ea:1c:72:92:f5:9b:7a:
67:e0:41:16:71:77:8a:8e:19:81:18:ed:b6:8e:74:
61:8a:a0:73:43:ee:13:d1:2c:51:b2:45:3c:ad:2e:
8f:be:76:95:ef:b8:50:74:ca:04:1f:9f:af:e7:10:
ee:3f:eb:ee:9b:dd:41:42:83:b8:6b:52:dd:1b:76:
4c:ae:b5:eb:70:9d:ab:b8:38:16:b4:c4:b1:34:cf:
84:7d:b2:41:01:10:a6:bc:b1:17:c7:76:71:01:4f:
bf:aa:a8:7a:2e:da:49:99:cb:0e:86:27:7c:5e:fd:
b1:d4:ae:46:fb:18:25:ec:13:b7:72:30:db:1e:0a:
f9:7c:c0:36:12:9a:6c:ec:97:e2:6c:33:24:2e:bb:
11:4c:ca:51:4f:ae:9f:dd:5c:3b:1f:b0:7a:8d:f3:
cd:52:c1:4c:ee:31:31:62:14:7c:56:ba:22:dd:ba:
5f:e8:69:63:b8:15:82:7c:75:c2:69:35:1d:2e:2a:
8b:42:a0:56:ac:77:0b:1d:d0:d5:de:34:25:4c:e9:
bb:e1:39:c7:63:9a:b3:e5:d4:48:61:c1:67:3d:af:
1a:a1:66:d5:be:d4:b8:5f:91:da:fd:e1:cc:b6:4e:
ce:4b:88:2c:27:34:9f:38:47:85:d2:36:ec:7d:c0:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:90:8F:71:A3:4F:65:C3:46:29:75:75:52:D9:FE:76:1B:59:18
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146716.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afe2::/32
Signature Algorithm: sha256WithRSAEncryption
8c:da:b0:03:8b:88:90:00:b9:29:5e:be:dc:e7:cc:05:16:26:
ab:7e:fc:73:73:21:c4:42:cb:2a:a8:53:c6:b6:c8:90:27:a0:
41:9f:d5:ed:bd:17:f7:3d:4b:3c:7d:84:ee:f9:ae:a8:c8:46:
ba:c9:a6:7c:a6:f1:5a:20:50:1b:1b:6a:e3:10:e2:91:10:4c:
b0:e0:20:d7:ea:6a:3e:17:16:fd:94:25:2d:d2:d2:9d:7d:58:
8b:56:e7:2d:17:6f:be:65:03:bc:35:2c:50:96:35:ba:44:c9:
39:5d:e5:83:e6:e3:7d:f6:e4:20:e5:26:41:24:30:4e:d2:cd:
37:31:9e:53:01:82:be:d0:38:17:d2:af:99:83:2d:f6:19:95:
c3:ee:da:12:63:65:d8:9d:9a:eb:95:b5:9a:ba:e0:b4:ea:31:
2b:43:9b:52:a6:12:da:f1:c4:ab:2b:db:78:6c:d3:9b:9e:48:
72:39:13:9f:56:dd:07:df:15:0f:73:37:17:7a:9e:f1:92:c6:
48:26:3d:a9:28:fa:8a:87:97:fb:e6:4e:52:e3:78:e3:7f:37:
ae:0f:61:a2:82:2c:78:fe:d6:54:29:0f:f9:4c:d6:36:0d:5e:
31:aa:ee:78:4a:c4:75:61:b3:91:78:c8:f0:36:73:6b:da:cc:
0c:01:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:58 2026 by rpki-client