Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146727.roa
File: AS146727.roa (raw, json)
Hash identifier: MyIALejgptHX8WHnRbzpOl5s59lf00zJeXMy2xU8hzI=
Subject key identifier: AB:06:93:E3:F8:75:FC:88:2F:68:7E:6E:DA:D7:AC:B8:BE:68:69:93
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 35B5DC337FCE273AF72C271C9336260112095933
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146727.roa
Signing time: Fri 22 May 2026 04:26:48 +0000
ROA not before: Fri 22 May 2026 04:21:48 +0000
ROA not after: Fri 21 May 2027 04:26:48 +0000
asID: 146727
IP address blocks: 240a:afed::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b5:dc:33:7f:ce:27:3a:f7:2c:27:1c:93:36:26:01:12:09:59:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:48 2026 GMT
Not After : May 21 04:26:48 2027 GMT
Subject: CN=AB0693E3F875FC882F687E6EDAD7ACB8BE686993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:45:59:ff:3e:50:ce:b0:82:ab:bd:be:35:
fd:68:ac:2b:b5:ab:d5:e6:16:2e:3a:a2:50:01:c3:
9d:6c:4e:bb:c7:4d:af:67:b2:01:e1:94:85:3f:02:
d5:83:73:ff:e2:d8:80:20:07:b8:47:92:64:8c:a6:
33:b8:a5:a4:ac:bb:00:11:6d:56:84:f1:51:8d:ba:
1a:e7:95:0b:1a:68:00:01:b2:ab:fa:f3:01:62:f6:
6d:c5:4d:30:c8:07:b2:bd:b6:40:44:e0:37:c5:b7:
19:56:eb:d5:7e:07:87:49:df:e4:34:aa:cd:b3:34:
4e:a0:0e:0e:2a:b8:2d:64:26:c9:3d:17:bf:74:75:
21:44:ea:6a:1b:a0:fc:ef:73:7f:76:f4:fc:40:52:
9c:c9:bf:a4:40:b3:e9:9d:2b:e7:f4:07:00:6d:17:
b2:2a:a1:29:e4:cf:eb:aa:32:54:19:f2:0e:b4:22:
a0:28:2f:a4:d6:95:14:8f:d7:94:72:02:02:26:54:
e2:6f:54:e9:92:d3:c1:44:b8:7d:f5:0d:f0:5c:c3:
7c:e0:f9:3d:86:80:53:48:81:e6:36:2c:14:1f:0b:
ca:b5:87:7b:a5:0d:6b:b9:77:10:16:28:fa:9b:ee:
15:08:1e:a5:c1:30:31:78:6e:8f:11:86:6e:26:ca:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:06:93:E3:F8:75:FC:88:2F:68:7E:6E:DA:D7:AC:B8:BE:68:69:93
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afed::/32
Signature Algorithm: sha256WithRSAEncryption
50:f3:c2:23:f1:d1:a8:17:15:a0:83:15:da:45:3b:38:33:ea:
48:e2:6e:e4:b7:d3:45:a4:e1:af:43:a3:7c:7e:dd:36:1d:bc:
da:73:11:fc:fb:5a:28:d0:d8:b2:e3:1a:9a:0c:d6:2b:0b:07:
58:dd:48:73:47:92:e8:d8:1d:af:9e:1a:aa:08:b7:a0:3c:08:
07:cc:1a:ef:32:5e:90:b8:80:8c:8c:1d:ed:74:55:d5:a3:47:
33:11:ee:fc:e8:47:71:23:ed:db:b8:5d:38:d5:f5:0c:7c:2c:
9c:a6:78:82:3b:5f:a1:1b:2f:80:a7:43:c8:02:25:a3:ee:bc:
b4:ac:8e:ae:ed:39:6f:69:35:de:75:84:69:f1:aa:7a:82:57:
59:e5:06:1c:a5:5a:8f:cd:f4:10:8f:8f:ce:7d:14:21:7a:af:
9c:a3:59:a2:5d:f1:17:af:14:53:39:82:59:a9:b8:d8:48:26:
96:d2:d6:06:a5:30:ca:32:52:55:42:27:a3:1a:aa:1b:d7:05:
c3:58:a4:88:2d:de:7a:16:8b:1b:9c:34:f3:5f:c7:2f:f5:88:
42:b1:28:b0:5f:ed:df:cd:8a:d0:98:fd:6c:3e:ce:8f:5f:4e:
75:0d:97:42:e4:54:6f:21:60:6e:a7:f8:e9:81:d8:8c:2e:ae:
1d:e1:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:37 2026 by rpki-client