Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146007.roa
File: AS146007.roa (raw, json)
Hash identifier: 2ma/vr4RqrL6Mman4t38xOerW+tNFySWWgJxt3vRdAo=
Subject key identifier: C2:00:21:3D:60:DE:D3:0B:EF:03:D3:19:72:76:4B:01:0E:93:36:56
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29300CF283C88874D998733D27988ACBDC9493D3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146007.roa
Signing time: Fri 22 May 2026 06:05:31 +0000
ROA not before: Fri 22 May 2026 06:00:31 +0000
ROA not after: Fri 21 May 2027 06:05:31 +0000
asID: 146007
IP address blocks: 240a:ad1d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:30:0c:f2:83:c8:88:74:d9:98:73:3d:27:98:8a:cb:dc:94:93:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:31 2026 GMT
Not After : May 21 06:05:31 2027 GMT
Subject: CN=C200213D60DED30BEF03D31972764B010E933656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:96:c3:2e:4e:aa:18:84:4f:6a:62:e8:04:
84:7f:1e:e7:ed:32:74:ea:ad:f5:b7:ac:6a:82:a2:
bc:4e:48:65:d8:e3:3b:04:79:46:15:4e:2c:44:cc:
a3:ca:74:2f:4e:8e:4d:d4:fe:4f:f9:11:66:fb:5d:
b0:7e:49:6f:19:1d:b1:87:a4:79:5b:77:85:b7:3d:
92:6e:1c:eb:8d:95:c7:cf:2f:db:3e:70:c8:bb:83:
83:48:64:a0:dc:83:8a:f6:ff:dd:4c:bd:5f:66:25:
6a:d8:38:a4:47:3b:8f:86:70:9b:21:2d:40:f1:67:
60:60:98:56:50:85:69:48:6b:f9:06:45:bd:13:17:
5a:24:1f:6e:45:87:9f:12:7c:a4:a4:1d:d7:cf:6c:
b5:64:95:12:f6:00:76:26:27:21:5c:44:67:66:96:
a7:10:3a:2e:dd:2d:9d:62:c2:a0:a7:39:4e:e0:98:
5c:4c:31:57:54:36:98:27:a3:53:ec:9f:71:8c:9e:
7e:2f:3e:93:84:45:36:5e:54:78:26:73:a5:55:34:
60:f6:34:e9:3a:fc:e6:88:fb:17:36:d8:e9:5f:5e:
8a:48:91:6d:db:61:ee:ce:a3:27:c9:1f:06:fc:8e:
39:81:c0:68:77:23:5a:9f:ec:fb:f8:41:80:9a:45:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:00:21:3D:60:DE:D3:0B:EF:03:D3:19:72:76:4B:01:0E:93:36:56
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146007.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad1d::/32
Signature Algorithm: sha256WithRSAEncryption
4d:1e:a7:2b:59:60:18:b7:52:dd:63:ee:fc:31:b7:aa:74:6d:
bb:85:90:a1:ac:1a:42:9c:00:ef:6e:de:8c:79:fc:e1:ea:a5:
a7:ea:e8:0f:49:3f:6f:76:04:5b:db:16:11:d1:74:10:07:b1:
df:42:da:12:a6:b1:f0:33:ec:ad:77:87:8c:19:8c:d4:7a:36:
20:88:98:41:8f:a1:f3:1e:e1:47:00:0c:7d:58:8f:01:97:3e:
64:20:a7:0a:cb:c5:9b:c4:88:0b:6e:b7:f6:67:c5:5c:b9:f5:
b2:d9:21:11:9b:8e:94:5f:01:dd:cd:3f:db:41:ea:80:e5:eb:
0e:4d:e4:23:25:22:1b:d1:8d:95:e5:78:70:65:02:21:c1:4c:
e2:8c:dd:4f:60:bf:8f:48:be:a1:19:57:04:ea:22:7b:15:de:
07:03:e8:e4:58:9d:e0:50:01:ef:a4:cb:7d:37:1e:1b:cc:c8:
8a:ca:64:28:78:2d:a0:6d:a2:25:c7:de:f4:16:1c:48:fd:16:
f6:8b:d5:c1:1d:28:3c:9d:cc:55:9f:8a:da:75:19:d0:2c:84:
b9:8f:b2:bb:13:09:06:6b:0e:23:99:e0:4d:7b:65:8e:da:d5:
4a:a8:41:cd:4e:6d:b8:4c:92:62:23:0f:48:71:83:70:25:dd:
5c:f0:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:42 2026 by rpki-client