Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146019.roa
File: AS146019.roa (raw, json)
Hash identifier: BIkDZQGVb1iFRFT+7WbQRNX3nnSJHfe2hxNX8RtKXEY=
Subject key identifier: 03:94:E9:0A:87:E3:28:D0:83:D3:F1:12:FB:34:79:5D:BB:F0:5A:E3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 390BB602E21CB71B3CB7378C0BA85E0F54920309
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146019.roa
Signing time: Mon 25 May 2026 01:50:57 +0000
ROA not before: Mon 25 May 2026 01:45:57 +0000
ROA not after: Mon 24 May 2027 01:50:57 +0000
asID: 146019
IP address blocks: 240a:ad29::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0b:b6:02:e2:1c:b7:1b:3c:b7:37:8c:0b:a8:5e:0f:54:92:03:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:45:57 2026 GMT
Not After : May 24 01:50:57 2027 GMT
Subject: CN=0394E90A87E328D083D3F112FB34795DBBF05AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:de:69:01:2c:cc:89:0b:5c:b8:ba:a7:29:
a7:79:0d:82:de:32:49:26:a6:a9:fa:b7:b4:fc:70:
81:44:4a:a1:ad:67:cb:ba:f8:64:27:78:89:b9:04:
42:df:13:29:37:81:38:46:f1:b4:a7:c2:24:14:7b:
e9:e1:8a:4f:d1:ec:3b:1e:4f:25:88:07:bc:38:46:
05:6a:c8:b8:16:a9:9d:df:09:62:2b:fe:7f:89:af:
b8:86:a7:49:e9:73:59:ab:32:6a:5d:26:1d:33:6e:
2c:f4:50:ab:35:ed:0c:c5:e4:78:05:c0:2c:3c:d9:
16:4e:6f:36:b7:c7:35:f7:ce:e5:c9:8a:f0:b8:32:
13:d5:41:9c:97:89:2e:de:47:6c:dc:72:39:4e:6d:
f2:53:3e:c1:08:d5:48:86:c0:52:2e:8a:a2:76:d6:
c1:9a:56:f1:e9:7b:14:d6:50:30:0a:39:db:ec:8c:
e4:22:18:48:ab:b0:a9:b9:5d:f9:90:09:ff:c7:c9:
bb:fd:1a:c8:ed:a8:05:c8:90:ab:c9:a5:52:39:c8:
85:91:9d:50:d3:cf:e9:00:e7:13:3e:58:e1:a5:97:
bd:21:86:c8:33:84:6d:50:be:67:fe:3e:35:23:4c:
13:d3:1c:ff:7a:2d:71:fd:e3:76:e2:38:68:d6:33:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:E9:0A:87:E3:28:D0:83:D3:F1:12:FB:34:79:5D:BB:F0:5A:E3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad29::/32
Signature Algorithm: sha256WithRSAEncryption
31:f9:13:86:52:9e:b8:10:eb:fb:90:83:5d:fa:fb:82:98:38:
c9:29:8d:fd:b7:15:3f:fd:76:96:9e:a8:6e:e1:d2:f6:eb:60:
57:38:41:05:1c:d9:b6:03:7e:22:a9:00:04:2e:02:57:ba:9a:
e1:fb:ff:4b:41:d3:54:a2:5e:20:13:81:4c:88:db:7d:1b:e6:
4a:66:6a:f6:cf:cc:4d:9c:37:d1:2d:50:9d:d0:23:73:b2:0d:
b9:93:26:09:33:cc:aa:27:eb:e2:51:cb:06:ad:47:d0:a0:37:
1c:1f:58:a9:f4:fc:5d:01:c0:20:74:ca:1d:06:dc:6f:d8:69:
30:72:70:a1:ce:9a:3f:ef:9a:c0:92:99:4b:df:e6:a7:7f:57:
c3:0c:ae:88:e6:e7:c1:04:c1:1a:0e:dd:3c:ba:67:d9:f6:ff:
77:9e:b3:9c:87:16:5d:4d:80:6e:cc:3d:03:63:2d:08:d9:47:
ac:92:6c:3e:87:c4:02:b2:e1:32:1a:ee:fd:15:dd:e2:aa:39:
d8:d2:bf:eb:81:d0:7b:9a:80:b2:02:bb:12:89:eb:1c:db:d3:
d9:57:81:78:17:b0:92:0c:a2:b0:ff:70:f5:9e:2a:38:16:b5:
0c:aa:a6:d5:70:cf:a1:49:97:6b:a5:ea:48:dd:d3:8a:10:64:
e2:17:5b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:39 2026 by rpki-client