Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146731.roa
File: AS146731.roa (raw, json)
Hash identifier: KB5EFEdc9+IoxfKrobA4clw5oplhogabaI6NxBX9ZlE=
Subject key identifier: D7:A1:F5:C4:4F:0E:71:8F:2E:FF:68:26:E2:FA:C1:6D:C6:01:68:F5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 553A034D161C9847D9DD5ABBB7166557E0A909CA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146731.roa
Signing time: Fri 22 May 2026 07:09:12 +0000
ROA not before: Fri 22 May 2026 07:04:12 +0000
ROA not after: Fri 21 May 2027 07:09:12 +0000
asID: 146731
IP address blocks: 240a:aff1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3a:03:4d:16:1c:98:47:d9:dd:5a:bb:b7:16:65:57:e0:a9:09:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:12 2026 GMT
Not After : May 21 07:09:12 2027 GMT
Subject: CN=D7A1F5C44F0E718F2EFF6826E2FAC16DC60168F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:0d:86:d2:ee:3d:bb:2d:c6:50:98:8e:6a:
dc:9b:67:44:87:6f:74:f6:41:23:45:d4:db:00:b8:
98:aa:37:a1:8b:5f:f1:86:e6:2b:cd:d5:f1:5c:ec:
ab:ea:20:18:77:9e:87:ab:b2:06:87:f0:c7:b7:f0:
c9:72:a6:0f:33:ae:8a:a8:d9:16:fe:59:b9:31:2c:
c3:b1:d1:1d:16:99:69:a4:0e:42:f6:61:14:d7:8f:
9f:f7:01:58:5a:bb:0f:df:91:85:eb:16:c8:66:63:
9c:d2:54:98:69:b4:85:4f:ad:25:0a:a5:93:e6:66:
83:82:62:c1:77:d8:29:d3:a1:86:92:30:70:6c:46:
d8:4d:dc:96:1e:78:33:50:39:f5:d8:15:8e:81:3b:
31:1b:38:d6:5a:cb:75:b9:07:5c:a7:fe:e5:2b:59:
0e:93:66:ee:b4:8a:4a:6e:b7:e0:c4:63:ad:61:d2:
33:6e:3e:80:c4:a9:6f:22:e1:fa:60:34:2f:6c:98:
08:87:f2:eb:b5:0c:61:17:be:30:a3:39:5e:b9:8f:
1e:cf:dc:09:d6:4f:64:82:07:ac:82:44:3a:df:fc:
42:cd:d0:32:f1:d6:97:82:10:ca:90:ff:7c:c2:eb:
51:d0:17:17:39:2c:72:73:e6:c9:9d:7e:c2:92:91:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A1:F5:C4:4F:0E:71:8F:2E:FF:68:26:E2:FA:C1:6D:C6:01:68:F5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aff1::/32
Signature Algorithm: sha256WithRSAEncryption
bc:db:23:a9:75:d1:f9:87:38:10:95:66:48:cf:d3:27:26:f1:
e9:d4:04:f4:c8:01:3d:eb:55:c2:cd:a3:47:d9:f8:e2:c9:73:
25:8a:73:4d:09:76:e6:0e:5c:d6:03:b0:3e:22:f4:41:16:b5:
7e:0c:a3:42:e8:1b:b8:af:53:f2:43:2b:19:a7:7e:f6:24:95:
9b:44:f9:44:fe:fd:59:40:93:31:8b:05:98:3d:08:ac:c9:1b:
68:4b:72:d3:f9:4f:4d:e3:b6:68:76:76:21:a5:7e:78:4d:bb:
78:fb:12:5a:d4:42:80:8d:32:ea:b0:20:5d:0e:db:3f:4d:5f:
22:9a:84:ef:8e:21:23:ee:48:a0:40:53:ae:39:a3:f5:a2:37:
c4:05:24:3f:59:13:fb:be:ae:67:59:0e:e7:8f:ed:ab:6b:e2:
1d:03:73:64:e7:d0:d6:05:61:4e:d1:b9:cc:5a:7c:4f:37:08:
37:c1:fd:f8:47:29:43:11:9b:75:d1:31:bc:b0:81:84:09:f0:
94:1b:da:50:32:83:f2:5c:4d:d6:66:4a:3f:0d:2a:b0:b9:cc:
11:26:95:3a:73:5a:bd:4a:b3:20:63:bc:15:5d:4b:3d:85:70:
d1:9a:f6:8a:be:2c:05:86:c9:3b:e6:24:b2:b1:47:d5:8e:02:
0b:af:24:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:45 2026 by rpki-client