Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146720.roa
File: AS146720.roa (raw, json)
Hash identifier: atTL620HfBCkE/E4U5RY6y+mO2zSvTnbrdLFzB0oyp8=
Subject key identifier: 4F:7E:08:36:85:A4:35:DD:85:6B:9F:85:F0:6D:83:0D:45:68:79:9D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 79DD927FBF66E32749C2EE2E4EA83A93FE1E71E9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146720.roa
Signing time: Tue 26 May 2026 03:16:36 +0000
ROA not before: Tue 26 May 2026 03:11:36 +0000
ROA not after: Tue 25 May 2027 03:16:36 +0000
asID: 146720
IP address blocks: 240a:afe6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:dd:92:7f:bf:66:e3:27:49:c2:ee:2e:4e:a8:3a:93:fe:1e:71:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:36 2026 GMT
Not After : May 25 03:16:36 2027 GMT
Subject: CN=4F7E083685A435DD856B9F85F06D830D4568799D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:f9:52:74:0d:83:91:42:9a:68:06:13:9c:
df:40:26:60:78:9f:2c:9c:21:17:07:a8:41:b4:ed:
53:84:26:62:dc:95:22:a4:df:5f:fe:4a:f7:b3:6a:
6b:cc:18:74:1d:51:5e:14:2a:e3:5b:29:be:80:53:
a5:a9:26:c5:85:d8:8a:41:f6:d9:98:d8:4d:ab:b6:
5c:e6:e0:d5:8c:19:81:95:a4:da:0a:d9:84:24:92:
e3:1d:dd:88:de:07:ea:98:0c:11:e7:c2:30:e7:2e:
72:32:7e:57:a5:28:29:c8:98:bc:4b:1b:e5:66:a4:
99:22:fa:26:d8:20:76:5a:c3:4c:9d:39:38:bd:30:
87:15:7d:2a:8c:7c:a8:63:3b:e6:64:d7:fa:19:86:
8f:ba:da:bf:d5:3d:a8:ce:7e:d6:ad:8b:81:8d:94:
71:6a:fd:6e:7f:0f:e9:bc:14:fd:24:2e:6f:41:03:
3c:97:e4:52:4d:66:ce:38:9e:27:c0:f2:07:71:46:
b4:52:80:f7:c0:ac:f6:45:89:79:12:62:ea:69:1b:
0b:cf:05:cc:8c:d5:aa:a5:9f:21:2f:18:a7:4f:3e:
77:85:30:14:14:06:bd:c8:87:e4:c2:24:9a:6c:35:
c8:90:b0:bf:e3:3b:c0:97:4d:4f:18:37:19:3e:5e:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7E:08:36:85:A4:35:DD:85:6B:9F:85:F0:6D:83:0D:45:68:79:9D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afe6::/32
Signature Algorithm: sha256WithRSAEncryption
2d:6b:be:57:db:e0:0f:5d:9b:b5:2e:a3:59:b1:11:06:20:6a:
db:f8:b7:f5:c1:b7:2c:68:e9:77:ec:c9:b3:58:18:3a:d8:ef:
e8:1e:5e:21:3b:aa:88:35:a2:a9:68:84:7e:03:d1:d6:29:43:
a2:97:11:7d:7e:ff:84:8d:0b:8d:fc:24:73:7e:17:70:f7:81:
ef:01:5c:53:63:cd:00:38:c5:c9:3e:f8:a6:ea:be:db:d4:ea:
cd:ee:31:01:59:be:98:61:67:f0:2d:d3:7b:ba:06:53:d8:67:
1e:9d:ed:48:a6:14:ea:5f:1b:63:fe:b7:a2:c4:fa:63:ff:52:
97:ab:47:8a:03:d8:40:5e:a7:f0:f5:5f:c4:94:48:dc:a1:62:
38:91:3d:f8:34:63:06:c6:e0:be:cc:6d:18:c3:a0:25:42:f9:
74:a2:17:9a:b0:78:ef:3a:11:d1:fd:dd:9e:7a:31:0f:0e:3a:
8b:88:3c:f1:37:e6:3e:aa:bc:d6:ad:79:d5:6e:e8:6a:14:8b:
4c:c7:80:13:b8:78:75:af:aa:be:6e:2a:6e:41:00:73:7c:32:
3b:c4:0d:9f:78:37:48:ad:01:fa:7d:03:d7:a7:64:ba:d6:96:
a5:48:de:e6:01:6f:e8:29:7b:6f:a4:e4:e6:94:17:c3:82:ae:
55:99:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:58 2026 by rpki-client