Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146023.roa
File: AS146023.roa (raw, json)
Hash identifier: dqqSrmYVLaj4EXe3DNNYmsREUx2aL1HYB3KPF0YWKXk=
Subject key identifier: 0F:C7:D7:2B:42:6B:8E:0B:72:3D:DD:D9:66:6D:BA:AF:1B:1C:CB:1D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 20726CB7710DF02F2EEA9B48FD04463C5E2DA4AB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146023.roa
Signing time: Tue 26 May 2026 01:13:30 +0000
ROA not before: Tue 26 May 2026 01:08:30 +0000
ROA not after: Tue 25 May 2027 01:13:30 +0000
asID: 146023
IP address blocks: 240a:ad2d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:72:6c:b7:71:0d:f0:2f:2e:ea:9b:48:fd:04:46:3c:5e:2d:a4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:30 2026 GMT
Not After : May 25 01:13:30 2027 GMT
Subject: CN=0FC7D72B426B8E0B723DDDD9666DBAAF1B1CCB1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:5a:97:18:4c:d9:72:17:89:f5:52:69:62:
18:3a:9b:b7:7e:67:9d:5c:75:b3:a2:ab:25:9f:dd:
2e:05:d1:5a:69:62:c8:ad:fc:fa:1f:39:13:8c:0a:
19:61:14:a7:9e:05:e9:62:a5:49:be:2f:9a:a9:b9:
b0:93:fa:e9:52:ad:e7:8c:79:5b:e7:33:29:15:c8:
30:af:18:6c:e4:e5:27:d4:84:65:c2:4e:36:9e:17:
1e:98:64:2b:68:e1:c0:b7:dc:5e:18:fb:5b:45:8d:
a5:89:cf:14:0a:a3:ca:36:2c:ab:a0:6d:ed:9b:86:
d4:32:66:eb:3c:6b:0a:ff:36:a2:9e:70:32:dd:8a:
d9:86:ec:b0:8c:d9:42:e9:80:d0:50:f4:b4:44:e5:
f0:ec:88:92:db:f0:bb:e1:5d:8a:42:98:60:93:d9:
aa:f1:16:e1:5f:0d:2f:f1:c2:91:28:ed:4c:70:31:
b9:5a:e5:81:17:56:3f:ca:6d:4e:6b:d4:8f:6b:c4:
aa:c5:ed:e0:d5:e7:d7:fb:d1:1f:41:e5:f7:95:6b:
b7:92:2d:e7:94:ab:ad:33:5f:e9:99:d6:3d:8f:40:
24:ac:70:5d:7a:2a:59:78:5b:45:68:0d:13:1d:66:
f6:ef:86:5e:96:0f:3f:8d:8d:57:ca:20:1a:f6:82:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C7:D7:2B:42:6B:8E:0B:72:3D:DD:D9:66:6D:BA:AF:1B:1C:CB:1D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad2d::/32
Signature Algorithm: sha256WithRSAEncryption
0c:08:9d:5d:39:64:1a:b4:54:a9:13:05:d4:19:45:c8:51:67:
2c:59:4b:b6:ef:a9:04:17:9e:8a:e9:b5:ca:c7:12:de:6f:34:
a5:6b:be:5c:68:07:3f:b8:be:fa:f7:91:78:f2:73:4c:c7:0f:
12:60:f1:7e:d4:3c:5c:64:62:29:4a:9f:c0:16:c8:97:93:55:
0f:bd:2d:b5:77:3a:63:82:e9:06:71:ce:52:ab:7e:4b:90:31:
52:8c:ab:04:7e:e3:e0:b2:1c:66:12:6c:5e:13:ae:10:71:b0:
12:74:1d:96:2f:6b:d0:38:68:e5:1a:3a:7c:8b:d1:cd:5f:11:
5a:a6:63:41:87:9b:44:c2:ad:9a:25:49:a1:e7:6a:42:19:83:
a5:30:68:d6:4c:9e:69:39:5c:ad:31:4a:8a:40:89:70:8c:5c:
15:eb:d4:88:3e:68:2a:b3:ae:c6:9c:3b:84:b6:a8:77:6c:42:
e3:13:c6:a6:dc:30:32:74:b3:55:73:5c:d5:0c:16:8b:7a:71:
f7:d9:97:8a:75:6f:34:0a:3b:6f:f3:a1:8b:f2:f3:85:4d:83:
dd:c0:2d:dc:e5:2f:af:23:0c:cc:74:f0:7b:09:a6:ff:a2:76:
b2:3b:8e:f4:46:0b:bc:3f:d6:5a:25:ce:fa:a9:a4:86:9d:fa:
6a:cc:0b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:39 2026 by rpki-client