Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146033.roa
File: AS146033.roa (raw, json)
Hash identifier: sV/khQnvjlgBS3M6HHj4TzKUYDfin9PjmGdIr8x5yiA=
Subject key identifier: BF:71:C8:F2:11:E4:68:E8:EB:5B:04:B1:7D:73:BD:36:AF:90:87:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6C16F6AEDBB57CE3CAEFD806C15779C8B9A0B5BC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146033.roa
Signing time: Mon 25 May 2026 03:19:12 +0000
ROA not before: Mon 25 May 2026 03:14:12 +0000
ROA not after: Mon 24 May 2027 03:19:12 +0000
asID: 146033
IP address blocks: 240a:ad37::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:16:f6:ae:db:b5:7c:e3:ca:ef:d8:06:c1:57:79:c8:b9:a0:b5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:12 2026 GMT
Not After : May 24 03:19:12 2027 GMT
Subject: CN=BF71C8F211E468E8EB5B04B17D73BD36AF9087D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:a0:51:5e:86:20:e6:a4:57:3a:b5:5f:af:
6f:c5:07:6a:1d:58:99:05:41:d9:19:5d:81:6f:1c:
f1:6a:a9:dc:28:07:d3:f3:42:22:d2:b4:3a:ad:09:
28:3a:85:db:2b:ff:4b:b5:08:66:8a:36:8a:c9:bd:
61:6c:08:18:6e:19:29:d7:a0:f5:6b:be:e2:8c:9e:
e8:69:11:0f:ea:a5:89:e1:1c:29:ec:ba:d8:79:8b:
bb:fc:72:6d:6e:34:d7:a6:5d:14:17:a8:1c:4e:ce:
04:20:ac:79:f7:2e:49:37:0a:b8:81:2b:b9:e3:e9:
f1:e4:57:1e:26:9d:dd:08:4e:02:99:a3:e9:21:b0:
fe:4d:d0:f0:f9:0f:25:ec:58:fe:ff:82:26:c4:fd:
4e:3a:49:31:80:cd:cb:db:1e:bc:23:49:33:65:2c:
d6:56:0c:90:fd:f8:f3:32:31:2c:9f:45:64:42:f0:
ec:9c:b6:ca:67:f9:fe:dd:01:66:39:f9:e2:f4:f7:
09:f9:f1:cd:f0:8a:62:23:8d:f6:99:86:da:ce:b9:
42:3a:9e:18:17:2a:75:a6:f7:ba:18:8a:03:69:11:
f2:79:8c:60:05:ee:6d:bb:27:34:d0:c7:c6:ab:92:
5f:49:05:c2:ab:e2:5b:82:8a:3d:7f:b0:31:20:9d:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:C8:F2:11:E4:68:E8:EB:5B:04:B1:7D:73:BD:36:AF:90:87:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad37::/32
Signature Algorithm: sha256WithRSAEncryption
67:4b:d9:3c:43:7c:c9:bb:52:14:18:11:8c:f2:b3:b4:ef:03:
03:9f:4e:e3:34:83:4f:7a:cd:c3:3e:8d:5d:e5:c8:6f:8d:15:
07:15:2e:05:7e:b5:4a:bd:31:e3:50:25:ee:47:65:39:b9:77:
78:7c:94:4c:d2:f9:c1:65:16:9d:35:d4:9a:bf:95:ff:c9:29:
5e:9c:e3:61:4d:69:51:44:fd:a3:03:e7:20:bb:75:1d:a5:cc:
49:30:27:a0:5c:f2:5b:8a:5e:18:f9:59:2e:c3:5d:39:9d:fa:
93:95:d2:fc:ab:06:e1:06:2b:50:f5:d2:22:4f:70:87:7e:93:
62:8d:ee:99:48:d8:4f:57:7b:5b:a9:23:48:82:88:8f:a8:e4:
10:b0:71:95:58:bc:29:da:7f:18:c6:29:8d:1a:a2:9a:b0:ea:
43:90:26:0a:ed:9d:0a:73:88:d7:6d:ad:35:e3:3b:c4:4a:9d:
53:3d:0f:a5:c3:a1:ae:0f:58:bb:20:05:3b:f8:b1:20:97:2b:
59:5d:44:6d:c8:6a:1c:7e:ba:ac:bb:c6:cd:9b:7b:75:65:44:
ec:72:da:00:24:2b:b7:54:e4:0f:e0:51:27:7e:f9:a9:89:0c:
19:02:6c:9e:00:4c:d6:d8:a6:48:d4:3c:9e:38:cb:8b:f9:c5:
08:ed:e0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:47 2026 by rpki-client