Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146744.roa
File: AS146744.roa (raw, json)
Hash identifier: 8Iy/vLxwXBSZdOVOdeTC2EGzBw77SxMG2vgD6jsEg5I=
Subject key identifier: 6C:38:34:CF:0F:EE:AF:4B:74:50:13:C7:D4:AC:84:E6:E2:25:40:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C61E2E4733ED6BB71C85BE453989C333F69D932
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146744.roa
Signing time: Tue 26 May 2026 06:30:49 +0000
ROA not before: Tue 26 May 2026 06:25:49 +0000
ROA not after: Tue 25 May 2027 06:30:49 +0000
asID: 146744
IP address blocks: 240a:affe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:61:e2:e4:73:3e:d6:bb:71:c8:5b:e4:53:98:9c:33:3f:69:d9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:49 2026 GMT
Not After : May 25 06:30:49 2027 GMT
Subject: CN=6C3834CF0FEEAF4B745013C7D4AC84E6E225402A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:40:26:fa:b7:91:fd:13:a0:fb:18:27:b0:
35:58:ca:2d:02:f2:5e:d4:b8:54:2d:11:2e:56:b4:
12:9f:bd:4c:e0:78:2a:6e:28:d2:2a:05:75:b2:04:
9b:dd:2c:ec:22:6e:65:77:4c:36:69:84:e2:c7:50:
5c:a2:5f:56:76:39:26:e6:62:74:b6:04:83:dc:0e:
db:1a:1a:bf:88:a5:04:d0:1f:d0:50:05:81:27:2f:
82:65:dc:44:1f:a3:0e:63:7a:e0:46:d6:39:85:13:
0e:5f:e6:b0:43:51:2c:e3:31:ca:7a:05:0e:38:3a:
d6:dc:62:37:68:ca:08:f6:a1:34:df:3e:1a:1f:e8:
a4:31:58:60:cc:c8:45:b6:6a:1e:b8:02:e0:ed:1c:
51:81:f5:dd:ce:93:5c:41:74:b1:a8:74:87:64:24:
e8:8f:eb:e3:25:c4:78:87:92:2e:53:05:3a:33:c7:
3a:d1:b0:50:15:ba:86:0a:08:41:dc:74:fd:9d:21:
c4:c0:66:13:7e:8d:b9:25:4f:ce:2c:ac:e5:e7:36:
ba:96:dc:25:a4:4b:5e:1c:61:02:6b:22:bd:10:36:
35:a6:25:dc:b8:8e:01:62:32:78:c8:aa:e2:17:ae:
bd:3c:35:f9:21:15:05:83:ac:af:31:30:0c:74:ca:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:34:CF:0F:EE:AF:4B:74:50:13:C7:D4:AC:84:E6:E2:25:40:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146744.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:affe::/32
Signature Algorithm: sha256WithRSAEncryption
8a:ed:02:9b:dd:6a:75:29:91:f0:a8:19:e4:9f:c9:ec:df:39:
06:ac:63:27:dd:b9:bc:dd:0f:e7:21:e9:7c:75:68:53:d0:e8:
bf:bf:54:d4:cd:5d:30:be:e4:16:c9:47:ee:c2:6f:d7:66:37:
81:c6:5c:3e:7c:7b:58:ae:c5:de:08:64:d0:4f:66:37:fd:b2:
6f:8c:bf:64:be:21:0a:bd:f3:9c:ae:4c:8b:0b:e4:ae:b1:bf:
a7:6e:85:9c:46:53:ff:e2:44:8b:12:73:a9:d4:78:5b:7d:0c:
5b:74:6a:67:69:d0:97:24:f2:8b:b5:4b:52:54:b8:02:1c:47:
8e:fb:48:69:7a:73:b7:49:97:f6:ae:b7:4e:1b:ba:b8:f7:df:
09:77:d4:1b:d8:85:80:83:19:4e:02:9a:8b:e4:ef:f1:25:a7:
d5:be:c0:3f:9b:38:50:fa:76:21:d6:c4:d7:ac:e6:2f:a0:73:
43:f2:17:a6:75:41:9a:ca:ba:72:ef:4c:57:d0:6e:e2:88:71:
fa:a6:f0:e0:9e:1f:17:ef:76:6c:4f:1e:a7:30:5c:f8:ee:51:
17:8a:01:6d:47:a4:40:82:ae:d0:ca:4f:21:f6:ea:fb:dc:67:
ca:ac:58:8a:ac:7e:55:b4:22:ff:be:77:ea:f4:e6:21:42:d0:
15:4e:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:56 2026 by rpki-client