Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146745.roa
File: AS146745.roa (raw, json)
Hash identifier: NvVB9uS8RIFJsIHta1Fmg4wCPycSgJgyBm5wGMKdwqM=
Subject key identifier: 1A:22:30:3F:11:38:AA:D4:A8:35:7C:E2:AC:5B:D6:F6:3B:BC:8E:AD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 71AA64DE1D19D5DE79AA98E59F8A7CA7787F904F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146745.roa
Signing time: Tue 26 May 2026 06:12:39 +0000
ROA not before: Tue 26 May 2026 06:07:39 +0000
ROA not after: Tue 25 May 2027 06:12:39 +0000
asID: 146745
IP address blocks: 240a:afff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:aa:64:de:1d:19:d5:de:79:aa:98:e5:9f:8a:7c:a7:78:7f:90:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:39 2026 GMT
Not After : May 25 06:12:39 2027 GMT
Subject: CN=1A22303F1138AAD4A8357CE2AC5BD6F63BBC8EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:15:95:4c:fb:fe:1e:9d:52:2c:91:ce:06:db:
2e:a0:99:b1:d9:91:ff:72:92:0e:ab:a9:58:c7:4c:
e6:93:73:5c:2a:9f:d2:e8:59:52:50:d3:2e:0c:3f:
49:7a:69:48:8e:fd:72:a4:c6:da:50:76:e9:77:34:
66:24:a2:39:b1:96:9e:bd:9f:d0:97:fd:0a:8e:0d:
62:ca:7c:5d:58:9b:59:82:6e:61:d2:df:1d:b5:9d:
e6:64:0b:97:fe:86:9c:71:31:d0:8b:24:27:66:14:
36:43:70:a7:4d:46:92:99:5d:82:e1:b5:f8:8b:ca:
20:5e:1f:b2:46:22:68:36:3f:35:c3:61:cb:d5:48:
97:c3:18:71:32:99:5f:27:92:88:6a:23:c3:a1:83:
75:c5:76:73:16:c5:48:c8:bb:e9:f3:ce:29:5e:d7:
4d:97:7a:43:82:d3:22:94:60:f3:9f:22:47:5a:f6:
f7:5a:46:03:db:bb:58:43:62:0a:3a:a2:37:3f:ac:
4a:56:2c:0c:2b:db:46:2d:38:03:be:44:8c:64:24:
ca:80:8a:22:12:16:46:db:80:0d:cd:e7:eb:3b:97:
ba:e2:c3:1e:4e:1e:98:7b:6f:d0:f6:c4:9a:b5:4a:
45:2c:ff:77:4c:90:88:8c:ac:7b:46:a8:9e:de:b4:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:30:3F:11:38:AA:D4:A8:35:7C:E2:AC:5B:D6:F6:3B:BC:8E:AD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146745.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afff::/32
Signature Algorithm: sha256WithRSAEncryption
66:89:77:90:ff:a0:e1:a6:a9:20:0e:af:22:c0:20:6d:22:2b:
c9:e5:dd:48:99:e7:21:04:72:17:e7:75:d1:bc:51:66:a8:f6:
f5:1c:1a:60:d9:b0:eb:52:b8:83:5c:44:0e:f3:75:90:c4:2f:
87:75:be:24:63:05:aa:16:5d:a8:3e:b5:7e:d6:08:a3:e5:10:
f7:68:d6:00:ac:2b:12:07:88:b1:44:7d:d2:5b:99:8d:e1:53:
ee:c3:23:5e:8a:d1:7b:df:31:f8:0e:70:9d:31:43:72:49:3c:
b4:4c:54:44:18:a4:3f:3e:9c:3b:81:04:78:7b:bb:26:fe:01:
25:c7:0e:03:62:dc:63:8e:65:55:85:4e:07:a1:f0:92:95:91:
e9:a5:72:0f:60:75:25:38:85:d7:73:e0:30:9f:a9:71:e5:3b:
df:57:3a:91:ff:08:b4:00:96:2a:c0:b1:0f:d4:5e:9a:cd:8e:
6d:73:9a:99:4c:86:7a:37:61:dc:a2:2e:20:61:e9:02:94:29:
b5:49:c6:a1:10:a9:d9:37:01:b3:ce:4a:f0:97:6e:0c:84:83:
ee:1e:05:04:88:19:54:ae:b1:19:a2:b6:8d:1a:09:f9:cb:3f:
5d:05:d5:f7:16:77:54:85:f4:00:a6:61:c7:cd:d6:46:a2:9c:
45:8d:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:39 2026 by rpki-client