Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146724.roa
File: AS146724.roa (raw, json)
Hash identifier: WRK67rygPkEsCE8MKB4Zcn8r7D5cRV/8kn8wh0q4YAc=
Subject key identifier: 25:97:4B:95:7A:02:24:B8:27:AD:8B:F2:6A:D7:69:DC:AA:E1:2E:DC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 429DF78ED1182444398AFAE92916F747171C237F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146724.roa
Signing time: Fri 22 May 2026 06:05:34 +0000
ROA not before: Fri 22 May 2026 06:00:34 +0000
ROA not after: Fri 21 May 2027 06:05:34 +0000
asID: 146724
IP address blocks: 240a:afea::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:9d:f7:8e:d1:18:24:44:39:8a:fa:e9:29:16:f7:47:17:1c:23:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:34 2026 GMT
Not After : May 21 06:05:34 2027 GMT
Subject: CN=25974B957A0224B827AD8BF26AD769DCAAE12EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:1f:ea:71:b7:5d:ad:cc:05:cd:23:5e:60:
43:6b:91:d2:42:65:ea:04:b7:c4:c7:77:cb:e3:df:
35:30:12:ae:6d:eb:c2:8d:4a:ee:8b:8d:96:c5:76:
d0:e4:9d:25:31:d0:d1:26:87:6e:38:e6:ca:17:1b:
70:88:cf:d1:ca:cc:f8:13:d2:a8:0a:1e:55:97:f1:
93:98:d4:30:47:b0:d6:7a:63:9e:90:16:07:d4:e8:
dd:14:bf:85:68:e1:39:a2:2e:04:32:f6:f1:22:59:
df:3e:16:0d:82:3c:47:1e:a0:32:c7:01:a7:9c:23:
b5:00:35:d7:76:03:c9:5e:ca:54:21:ab:95:85:99:
ef:c9:b8:e7:1b:59:2a:c3:d7:17:24:25:65:5c:47:
b7:45:11:74:be:b5:9d:f9:c6:63:44:05:f9:b9:9a:
82:ff:79:e3:b1:a1:ef:c5:f9:7f:bb:60:d7:2d:0a:
39:f5:13:99:a3:24:16:d4:c1:17:aa:a7:d8:f0:a2:
4a:e8:75:02:6f:4a:d1:73:49:70:2d:04:ce:68:3d:
a5:61:f8:2f:b1:c7:3b:52:b1:c6:1b:61:0f:8c:bc:
98:34:39:0a:a3:e7:80:11:58:f3:d1:15:47:87:c5:
3f:67:94:21:f2:77:a6:ff:ff:b5:35:31:30:de:d4:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:97:4B:95:7A:02:24:B8:27:AD:8B:F2:6A:D7:69:DC:AA:E1:2E:DC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afea::/32
Signature Algorithm: sha256WithRSAEncryption
a2:c3:ec:12:d8:3d:cb:b5:e5:43:80:a3:d7:f0:07:c6:1a:d2:
9a:bd:05:a9:09:b0:61:4d:2f:1f:d2:60:fd:35:9c:f1:e7:cc:
75:e6:57:1b:de:f5:7c:5f:e7:13:68:ee:e7:56:aa:4e:39:aa:
08:df:b6:8e:b8:85:a5:48:1a:2a:ab:5a:6e:d4:0f:5b:c5:27:
df:f1:56:55:f9:fd:a3:1e:23:57:fb:b6:04:df:56:8a:50:3d:
5b:70:ed:95:5e:40:bd:be:f1:66:d0:c0:64:67:94:bb:ce:c9:
20:83:b0:9e:70:fd:a9:0d:a5:d7:e8:f0:7d:eb:f9:44:db:9c:
51:3a:18:95:bf:f6:25:ad:3d:d9:26:c8:3d:9f:0f:b9:48:c3:
0c:60:13:1d:21:0c:d3:6a:6a:a1:b5:23:5f:33:1c:81:56:af:
b9:ae:46:84:4f:ae:13:00:2c:cf:63:be:3c:97:75:27:8c:01:
ed:9d:7c:59:be:a4:ae:9f:53:40:91:5e:f6:06:24:f0:92:4a:
9e:d0:fd:fd:01:21:c6:ae:d2:02:6b:ef:e5:eb:28:7c:b2:32:
13:4f:f4:d4:14:af:3f:44:83:ac:b0:f8:94:12:ae:60:24:d8:
f9:6e:f6:a6:1b:87:e5:39:23:53:79:54:96:82:f1:7a:d4:af:
61:65:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:50 2026 by rpki-client