Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146723.roa
File: AS146723.roa (raw, json)
Hash identifier: SnrKU3IWbbMrV5AotsukAKBfny2k6+WeV5EdfW9wcWY=
Subject key identifier: 5A:BD:DE:EC:ED:67:ED:17:18:73:29:4E:53:B8:EB:AF:E3:67:8A:09
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0850EBC941659BF56C422F8D363B389ADB90D23B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146723.roa
Signing time: Fri 22 May 2026 06:58:36 +0000
ROA not before: Fri 22 May 2026 06:53:36 +0000
ROA not after: Fri 21 May 2027 06:58:36 +0000
asID: 146723
IP address blocks: 240a:afe9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:50:eb:c9:41:65:9b:f5:6c:42:2f:8d:36:3b:38:9a:db:90:d2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:36 2026 GMT
Not After : May 21 06:58:36 2027 GMT
Subject: CN=5ABDDEECED67ED171873294E53B8EBAFE3678A09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:1c:a4:7f:00:d8:8b:5a:a3:3d:4d:05:83:
e0:33:02:d3:d5:da:50:73:89:c9:df:3a:e5:c5:1f:
5a:27:76:67:de:8b:64:14:46:cf:ec:68:ae:d8:30:
75:fe:a1:10:ea:e2:33:72:c5:1d:3b:2a:7b:a0:59:
3d:74:96:83:1d:d7:9f:98:fd:71:fe:59:77:62:c0:
d6:0c:24:e2:3f:97:f7:17:26:bf:db:a9:32:eb:9b:
9b:3d:db:ae:92:ed:34:fb:85:a5:1c:53:84:34:50:
99:e1:8f:72:66:19:ac:8d:65:69:af:bc:b1:13:b9:
a3:41:c4:70:31:6f:91:82:95:67:2b:2d:85:46:4c:
86:c7:31:a5:cd:7c:83:16:e2:ec:af:c6:07:0f:46:
28:71:1f:84:db:26:c4:c8:70:21:d7:a4:12:d4:7d:
84:b2:23:c3:8b:1b:36:02:9a:e0:10:93:58:bc:2e:
9f:a6:dc:21:fa:bf:52:cc:39:98:fb:97:9f:75:ad:
9b:b5:30:a6:fa:51:8f:a2:65:63:f7:1b:5d:c1:9e:
fe:15:55:cf:a0:4b:b6:15:7f:ed:bd:54:e8:f2:d4:
c6:b4:69:92:dc:50:0a:2e:2b:81:8c:5e:c2:11:37:
4d:df:0f:2d:b9:a9:63:df:b8:1f:e8:a1:12:7b:d2:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BD:DE:EC:ED:67:ED:17:18:73:29:4E:53:B8:EB:AF:E3:67:8A:09
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146723.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afe9::/32
Signature Algorithm: sha256WithRSAEncryption
02:b4:04:73:ae:1f:0b:ca:81:35:59:eb:3c:d3:3f:17:50:35:
6c:9d:53:8f:ed:01:e6:21:03:31:16:21:c7:1a:38:c2:33:c4:
be:3b:7b:b4:00:93:b2:14:ab:3f:19:df:32:98:ea:d7:c8:4d:
00:a1:ba:8a:56:f7:8f:e9:a3:ba:30:e1:b6:f5:cc:51:29:d8:
db:e0:ec:f8:53:9d:01:b4:0b:06:3c:8a:5f:bf:54:17:80:0c:
54:f8:39:65:9f:bf:e1:ae:ae:dc:c7:54:9b:4b:e0:42:ef:3c:
94:d5:1f:a7:b2:6e:1f:51:bd:2b:2a:bf:2d:8c:a7:f0:48:02:
58:12:70:62:9a:dc:d6:ce:84:5c:d3:2f:72:1c:a7:1a:51:7b:
94:ca:2b:48:5f:ad:7c:2b:f4:aa:ec:79:fa:ae:1d:57:39:98:
2c:a5:95:fe:94:d0:bd:4b:1b:86:83:c8:14:02:f6:6a:4d:12:
2f:b5:53:8d:ef:46:c0:e3:c9:69:e1:1d:21:61:32:09:b6:dd:
31:81:8a:d9:df:4c:13:3b:df:ff:7b:0b:b4:09:13:e1:cf:71:
e8:bc:0f:a7:2e:b5:e4:91:1b:20:0e:9e:a9:e2:3c:cc:e5:d7:
15:8e:1c:7a:bb:82:ef:23:de:cb:2a:a6:ac:e9:e3:f6:d8:fb:
95:ec:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:50 2026 by rpki-client