Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146722.roa
File: AS146722.roa (raw, json)
Hash identifier: v6lRIvdYJm2VEbrl6lV5VwseWuS45WtlghC5qomh+P8=
Subject key identifier: 12:E8:5E:29:F2:8A:1A:7D:A9:E5:C8:34:D2:B7:75:8C:DE:20:93:22
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B6AF8FA2DEE37B9B907D67662F9F5450D5899F2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146722.roa
Signing time: Fri 22 May 2026 07:09:04 +0000
ROA not before: Fri 22 May 2026 07:04:04 +0000
ROA not after: Fri 21 May 2027 07:09:04 +0000
asID: 146722
IP address blocks: 240a:afe8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:6a:f8:fa:2d:ee:37:b9:b9:07:d6:76:62:f9:f5:45:0d:58:99:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:04 2026 GMT
Not After : May 21 07:09:04 2027 GMT
Subject: CN=12E85E29F28A1A7DA9E5C834D2B7758CDE209322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:bd:c4:35:e8:19:ad:c3:39:a3:22:7f:94:
ce:87:50:3d:fb:50:8c:ab:72:79:a0:42:48:be:00:
4c:93:ca:0b:ea:7d:0f:71:d1:b7:34:ab:87:ee:d7:
40:7f:76:51:19:db:d2:8f:79:e4:77:12:57:fe:28:
39:1d:a0:2f:f4:4d:92:d3:63:70:67:56:9b:c8:65:
22:06:e5:ad:0c:de:e4:a9:fd:6c:41:42:2c:46:d7:
c9:6e:89:c3:60:2a:29:93:1d:39:de:ba:01:85:ec:
f6:65:1f:b1:cf:cc:b9:77:5e:fb:b8:a8:7c:2d:38:
aa:f1:ed:a3:9b:eb:f4:81:e9:66:b8:88:9c:76:88:
b5:94:09:19:25:7e:7d:f6:23:01:09:a4:d4:ec:f7:
4f:12:8c:2c:6d:9c:74:f2:74:ac:57:c8:6c:59:18:
03:53:13:99:74:ae:94:22:25:fc:bc:7c:be:01:50:
58:ae:cc:00:ba:31:b7:41:1e:45:d9:17:08:aa:b5:
93:af:c8:3a:ec:73:39:50:3e:48:5d:7d:c8:89:f2:
f5:e7:cd:e4:b0:c9:8e:87:13:81:3f:1c:9b:b3:52:
b6:0f:56:49:6f:20:2f:9d:18:5b:08:7f:7d:2b:01:
dd:29:61:d7:d2:48:48:4b:b6:cd:d3:36:b0:b0:75:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:5E:29:F2:8A:1A:7D:A9:E5:C8:34:D2:B7:75:8C:DE:20:93:22
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146722.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afe8::/32
Signature Algorithm: sha256WithRSAEncryption
01:2a:b4:94:d2:de:40:24:a3:98:98:4a:4e:ae:bc:ec:e7:07:
d9:95:ca:38:fa:ea:aa:5c:d0:88:3d:b7:da:e6:3a:96:b1:f6:
1f:d8:25:d5:15:6e:47:89:14:87:cc:36:4d:14:2c:7a:64:47:
92:68:57:8b:a7:1b:29:82:d4:29:b0:16:8d:97:17:76:8a:f3:
8f:5a:31:f1:aa:e2:7d:8e:f4:4f:ad:58:ff:af:15:e1:81:37:
20:4b:9f:d6:72:35:04:c8:ac:f2:cb:41:1f:17:5b:72:bc:40:
0f:2a:58:75:7e:9e:1f:66:96:19:8b:e4:c8:9e:c4:8f:8f:b9:
e2:71:13:fd:4b:d7:66:c3:af:73:1b:17:65:fc:31:20:0a:f4:
24:31:4d:61:f5:9e:82:56:0f:13:c0:43:45:e1:2d:70:2c:6d:
35:80:2c:44:03:b4:9f:40:5b:f8:cb:8b:9e:fc:b8:0f:01:4f:
ed:e9:9e:eb:0c:89:41:18:cb:a9:49:46:6b:21:2a:45:b8:1c:
31:12:f9:1b:c2:70:af:38:c1:18:16:c6:19:6a:81:b1:76:fa:
62:73:24:48:7e:3e:92:52:af:0c:3c:aa:f5:1b:86:ca:8a:12:
76:1b:0a:25:08:39:b7:a7:0d:b4:63:1f:c8:74:55:7c:34:09:
54:2c:1f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:42 2026 by rpki-client