Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146733.roa
File: AS146733.roa (raw, json)
Hash identifier: yQtxAHKt3ACpt14+28Kzybni8Gty3PIjuOIINgZ5bVE=
Subject key identifier: C9:A2:28:DA:AE:15:6F:7C:87:BA:6B:48:C6:2E:B5:B5:D2:06:D7:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7CB67E4C1846CF01726A1326DC41025E70D77AD9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146733.roa
Signing time: Fri 22 May 2026 06:46:00 +0000
ROA not before: Fri 22 May 2026 06:41:00 +0000
ROA not after: Fri 21 May 2027 06:46:00 +0000
asID: 146733
IP address blocks: 240a:aff3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b6:7e:4c:18:46:cf:01:72:6a:13:26:dc:41:02:5e:70:d7:7a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:00 2026 GMT
Not After : May 21 06:46:00 2027 GMT
Subject: CN=C9A228DAAE156F7C87BA6B48C62EB5B5D206D795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d0:5e:b1:db:00:b6:6a:48:c5:d3:8f:d0:df:
dd:a9:59:de:1d:11:71:ed:8b:6c:21:0f:85:f8:ee:
61:a1:64:23:c8:6e:8e:d6:87:1a:b1:49:41:65:59:
24:52:fa:6c:dd:a4:b2:db:c7:51:95:0d:2a:94:ba:
8b:ef:7f:c6:09:c9:e3:a9:83:73:31:43:10:11:09:
f5:1e:e9:23:ca:17:5a:6a:d7:56:38:68:98:a4:32:
4d:59:35:eb:04:e3:f4:7c:63:43:d2:b8:2a:8a:03:
a7:28:0d:a0:4b:5a:35:04:f8:df:6b:bb:24:3f:d1:
41:10:5c:fa:9a:38:e0:cc:96:1d:23:12:ed:c1:85:
ef:be:f8:c7:54:1e:f4:a9:e7:a3:d0:fd:14:78:a9:
bd:6b:d5:15:1f:90:7b:bf:32:4e:c0:95:8b:7d:d4:
ec:04:43:02:bb:52:4b:14:65:65:c9:fe:d0:4c:4d:
df:79:5e:36:7d:9b:3e:2e:8b:74:ad:9d:76:52:15:
7d:e1:ab:5b:56:09:c6:1a:23:bb:b0:45:26:06:69:
89:8d:ac:3b:af:6e:3c:1a:11:4d:91:f5:ed:59:df:
8b:2c:92:ed:b9:84:85:21:b2:8e:0b:d5:54:0f:85:
a8:55:89:00:4a:b9:2e:77:ae:e0:2a:44:24:58:b2:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A2:28:DA:AE:15:6F:7C:87:BA:6B:48:C6:2E:B5:B5:D2:06:D7:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aff3::/32
Signature Algorithm: sha256WithRSAEncryption
73:3e:c8:82:83:c6:1e:d4:af:fc:d4:2b:ba:2f:02:44:2e:96:
f8:93:e8:7c:16:c1:8a:96:5a:a5:62:28:20:04:54:81:de:75:
eb:92:4b:65:b8:0a:05:ec:82:ab:d4:72:a2:9d:e1:12:6d:49:
30:f1:3e:ea:d2:69:85:3a:78:8a:16:33:e8:ad:43:b7:19:2e:
ab:02:bb:2d:de:47:d4:06:b8:b7:46:5a:14:45:a2:9b:db:a4:
ed:00:22:5a:a9:eb:74:06:ed:94:d7:73:07:89:68:ec:f1:62:
bb:1b:86:f7:24:a7:c2:5d:c6:17:63:9e:ca:96:8d:57:b9:d6:
b7:e0:b4:1f:37:72:ca:03:2a:46:8c:18:e3:07:fd:aa:f3:08:
9e:a7:8c:31:06:8c:c7:d4:6d:a2:40:7f:3b:17:96:a0:a1:69:
1d:4d:6a:b0:fe:00:80:38:07:3c:5a:58:09:cd:e3:a2:a3:0f:
a0:30:39:15:d9:3e:22:5c:70:6e:70:b0:f7:75:74:23:43:df:
3e:e2:a7:8e:60:ec:12:7f:49:69:33:b6:75:8f:af:96:0a:6c:
15:81:61:dc:37:f2:08:b7:76:32:c7:8e:d5:9d:1f:73:a9:dc:
7c:47:d4:c5:2e:c8:eb:e3:6c:60:bd:fb:3b:a6:91:74:04:96:
10:f8:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client