Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146728.roa
File: AS146728.roa (raw, json)
Hash identifier: wizvEJPoO1XY85BSkrzTXuCPbS90Zl3zFZumsXnviGA=
Subject key identifier: CD:49:58:2C:79:4E:E7:01:29:AA:2A:F4:65:44:67:02:61:71:C4:F3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A79F5FEB42D4F0348A7651031FE8CFFECC9C207
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146728.roa
Signing time: Mon 25 May 2026 02:22:16 +0000
ROA not before: Mon 25 May 2026 02:17:16 +0000
ROA not after: Mon 24 May 2027 02:22:16 +0000
asID: 146728
IP address blocks: 240a:afee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:79:f5:fe:b4:2d:4f:03:48:a7:65:10:31:fe:8c:ff:ec:c9:c2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:16 2026 GMT
Not After : May 24 02:22:16 2027 GMT
Subject: CN=CD49582C794EE70129AA2AF4654467026171C4F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:34:cc:5b:a8:e8:e4:a5:ac:dc:d7:f7:96:
82:94:6b:c7:a1:23:80:22:63:59:15:7a:21:4d:99:
86:4a:b7:32:e7:07:86:bd:a1:c3:d9:29:d6:49:e3:
a8:87:d2:6b:fa:20:13:6b:70:14:9e:f6:9b:ea:80:
54:c4:9b:21:f4:2b:93:df:e4:fe:e6:5b:b8:83:7c:
03:25:d1:db:59:78:ec:b2:82:94:1e:16:86:38:3e:
96:06:fa:cc:dc:e5:f7:80:50:ee:eb:7f:fb:c4:9e:
fa:dc:d0:e3:e8:0d:0a:e7:15:9c:25:6e:d7:b9:32:
92:ba:2a:9b:04:aa:e9:eb:f8:d7:7b:cd:5e:c1:22:
dc:6e:07:65:67:e6:ad:51:6b:97:c2:43:b8:44:5a:
02:9e:c8:01:56:ab:78:f5:96:b9:a3:7f:0a:9f:95:
40:61:a4:7a:c1:aa:ef:94:87:db:7d:1a:2b:37:ff:
96:18:55:55:9a:52:7d:52:4a:63:10:80:cd:cb:3a:
1a:12:6a:d3:3b:d2:59:08:e7:ff:e3:66:72:05:45:
b8:89:b4:df:bd:04:71:7a:d1:a4:1d:56:90:6b:35:
f6:81:78:d8:93:df:ab:01:5c:1b:78:be:60:d5:39:
52:71:45:44:a3:9e:03:69:d5:d5:bf:12:94:c8:2b:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:58:2C:79:4E:E7:01:29:AA:2A:F4:65:44:67:02:61:71:C4:F3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afee::/32
Signature Algorithm: sha256WithRSAEncryption
1d:0e:40:7e:f3:c9:03:fe:c1:9a:21:5d:eb:2d:59:fd:f2:21:
32:1d:e9:98:15:f2:67:cb:b6:02:34:5c:ec:e8:52:e5:4f:97:
73:4b:e0:4f:22:34:a2:a5:82:0a:d8:05:72:ab:a1:fb:85:14:
1f:bb:cd:30:0c:78:37:ed:85:2d:24:28:46:96:26:52:5c:86:
a6:3c:4b:c2:5a:fc:fc:24:52:96:31:69:56:f1:26:b7:ee:2e:
ee:12:c3:e3:bd:1a:63:fe:30:e2:0a:5a:7d:6f:b8:f1:6c:0e:
0d:61:71:f8:4b:6a:6c:33:c5:1f:35:8d:a1:ba:6a:db:76:e8:
aa:8c:3a:55:ab:e7:a4:c8:6b:0a:ed:44:05:c5:2b:04:1c:a1:
cf:04:0e:c5:3a:b4:43:2a:50:94:80:8c:97:d8:d9:9d:ec:86:
84:aa:07:d7:c3:26:b8:5b:f0:9c:8d:61:7d:1a:e3:04:21:08:
a0:14:85:8d:d6:3a:08:f7:d1:7a:2e:fd:6b:a0:21:47:d3:2a:
21:48:f5:59:b1:f5:fd:18:cd:0e:42:6e:e6:77:fd:2d:a8:5b:
07:45:e7:27:ed:72:f8:32:6d:fa:e4:54:1c:1a:ef:1a:8a:99:
de:ed:75:05:55:11:06:b7:9f:d7:63:0f:2e:12:03:db:11:6a:
ff:7f:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:49 2026 by rpki-client