Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146743.roa
File: AS146743.roa (raw, json)
Hash identifier: SywGGQIfL2gmvE1AmXMrlOBud9QvrHLJc/POV/xHaUg=
Subject key identifier: 8C:7C:49:94:A7:56:28:DB:18:F1:30:22:11:99:75:19:F8:F6:78:D1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 05FB8C29C8F3DA93F7C7285BAF70077F913A21AC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146743.roa
Signing time: Fri 22 May 2026 07:08:50 +0000
ROA not before: Fri 22 May 2026 07:03:50 +0000
ROA not after: Fri 21 May 2027 07:08:50 +0000
asID: 146743
IP address blocks: 240a:affd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:fb:8c:29:c8:f3:da:93:f7:c7:28:5b:af:70:07:7f:91:3a:21:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:50 2026 GMT
Not After : May 21 07:08:50 2027 GMT
Subject: CN=8C7C4994A75628DB18F1302211997519F8F678D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:53:f1:fa:03:a1:4b:05:e3:3b:f3:be:dc:
ae:83:e5:e8:cc:92:34:bb:0d:29:8a:9b:bc:41:0b:
00:62:d7:8c:d7:92:03:e2:df:47:b6:9c:b8:a9:95:
fe:aa:87:61:d6:2e:76:28:a6:45:01:dd:55:a1:c7:
ca:5d:cb:52:fe:fd:90:fd:19:f3:12:29:6e:fa:c9:
bc:33:e7:0e:3c:7b:e9:8b:64:33:83:b5:b3:12:66:
93:5c:e8:28:ff:38:f2:e8:28:74:2d:42:10:b4:b2:
27:fb:29:23:6b:bf:f2:47:65:4b:78:f5:16:c3:72:
18:78:c5:16:86:b9:ab:f0:d4:12:4a:41:31:77:25:
e1:fe:9a:d9:04:fc:b9:4c:c8:23:dd:dc:7b:e1:a2:
dc:f3:b9:71:fb:90:29:d7:5d:5a:c1:48:1d:66:aa:
25:c6:8f:5a:57:e8:68:86:f9:3a:ef:bb:e9:89:16:
c9:80:0d:9f:f5:a0:14:2d:eb:11:87:29:fb:32:1c:
76:66:b6:37:19:03:a2:8c:0c:21:1f:a3:1c:39:56:
2d:dc:ff:5f:a1:3a:37:ce:e8:5b:8f:2c:a3:c1:ce:
90:e6:b3:0c:3d:bb:6d:3c:af:96:42:5f:42:6c:14:
6d:ad:e8:2c:90:64:e3:51:6f:4e:b4:c4:c2:0b:ed:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7C:49:94:A7:56:28:DB:18:F1:30:22:11:99:75:19:F8:F6:78:D1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146743.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:affd::/32
Signature Algorithm: sha256WithRSAEncryption
41:b4:83:71:86:66:3f:9a:92:0b:c3:02:63:05:c9:12:c1:1d:
f2:99:60:25:81:ef:7b:b1:2e:95:1a:2a:d0:b3:22:d9:ae:7f:
84:2e:87:4d:4c:eb:6f:48:83:65:4f:db:40:9c:83:aa:ba:79:
56:ad:a0:e4:d4:4b:d2:62:07:5e:17:01:ae:75:79:f3:7e:dc:
1a:27:29:41:29:41:8f:1a:37:f1:4e:63:eb:62:4d:02:2b:f5:
56:6a:b8:6f:23:19:c7:40:be:46:88:55:55:87:a0:77:f6:0f:
30:ff:38:ed:e8:a8:5c:5d:9b:d7:73:ee:5d:f0:e6:7a:09:d2:
84:38:ea:70:e6:b5:0d:6d:ac:ac:57:6d:45:29:b2:c4:ab:ba:
18:37:3f:31:97:6b:78:f3:cd:e8:4f:8f:21:3f:47:a6:72:97:
d5:6b:25:f9:8d:96:c9:09:49:db:aa:0a:fe:3a:67:d3:e2:19:
5b:6d:1f:4e:76:a3:6d:1e:13:6d:67:5d:c6:76:4a:0d:8b:1e:
3c:c2:3b:bd:76:62:0b:e1:9e:3c:77:f4:cc:6b:d5:c1:39:77:
63:83:7a:ad:2a:bf:fe:98:aa:51:f3:70:ee:d7:8e:1b:d6:ea:
f7:9c:07:1a:7a:ae:98:26:eb:4d:dd:18:45:96:64:17:6e:b2:
52:ac:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:47 2026 by rpki-client