Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146043.roa
File: AS146043.roa (raw, json)
Hash identifier: 796hFqQ6mfmIyoDNE7DbBeH8bXZ4vmDvvIRENyiPVTY=
Subject key identifier: D9:19:E2:38:57:87:52:A4:7C:C2:E8:AB:51:14:88:D9:EB:D4:8A:DB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 251BAA930167639A9057066C69F99F5699506EA8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146043.roa
Signing time: Mon 25 May 2026 01:51:19 +0000
ROA not before: Mon 25 May 2026 01:46:19 +0000
ROA not after: Mon 24 May 2027 01:51:19 +0000
asID: 146043
IP address blocks: 240a:ad41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1b:aa:93:01:67:63:9a:90:57:06:6c:69:f9:9f:56:99:50:6e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:19 2026 GMT
Not After : May 24 01:51:19 2027 GMT
Subject: CN=D919E238578752A47CC2E8AB511488D9EBD48ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:e3:f5:68:db:50:4a:a9:fc:a9:a8:10:c3:
6d:7b:fd:dd:a6:07:20:1f:25:9d:c9:b8:02:0f:74:
7b:ed:a1:e6:67:1c:ff:01:ef:4d:7c:e9:16:4f:76:
0e:df:d2:a3:58:2e:73:45:a6:aa:76:5a:40:36:d9:
3c:9f:7b:e3:96:3a:dc:e2:79:25:8e:76:72:41:39:
d4:7b:5b:08:61:7f:fe:d9:2b:a2:3d:6a:a7:cc:88:
19:71:58:89:a5:0d:ee:68:05:06:d5:4c:96:55:b5:
19:cd:08:64:56:1c:04:b0:b3:c1:91:4b:81:fd:d4:
e1:1a:c5:be:49:f2:b8:1b:95:c3:0a:6e:a4:6b:59:
23:e5:cd:c3:c3:85:02:88:92:01:90:4d:76:3a:4a:
85:33:1a:2f:b6:a1:82:9e:4a:d1:24:b3:dc:6b:71:
45:3a:2c:16:e3:e3:f0:27:97:91:ac:da:7d:9c:87:
04:6f:aa:1f:98:64:88:1b:04:2d:c1:e6:39:6c:67:
8e:64:3d:28:0f:90:59:e8:06:b4:71:4a:3b:cd:da:
34:a9:2f:b2:29:e2:15:6e:df:2e:70:62:30:ef:68:
fd:48:fc:16:95:09:33:20:4e:65:cf:e5:c3:74:76:
1e:89:cf:c1:81:26:00:0b:db:99:d3:37:cd:ea:79:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:19:E2:38:57:87:52:A4:7C:C2:E8:AB:51:14:88:D9:EB:D4:8A:DB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad41::/32
Signature Algorithm: sha256WithRSAEncryption
74:9d:4f:5d:37:56:56:a6:15:c6:8c:dc:91:f6:cb:1b:c8:98:
31:c6:09:45:f8:4b:e1:4f:71:74:aa:35:4a:6b:a5:5b:84:a4:
89:57:5c:ad:67:dd:7b:ea:a5:9d:58:fd:03:2b:f5:d3:73:7d:
a1:f7:68:4e:33:3b:b8:0c:67:ca:5d:d0:26:24:b8:02:db:43:
31:cb:20:dd:dc:4c:e1:97:60:b2:b8:46:37:ca:90:4b:b5:e2:
47:8c:66:6d:ec:2e:53:29:1b:0f:a6:89:e7:d3:ea:71:d5:2f:
b0:6e:9a:2b:fe:f6:83:d4:8b:2f:86:7f:e5:56:19:57:28:6f:
7d:44:1d:7e:3a:39:66:76:a4:d1:fe:c1:37:9c:68:04:dd:ed:
74:00:5a:e0:63:77:0e:7c:bb:ff:0a:c7:11:5a:d0:b9:fa:b1:
d0:7f:05:28:57:27:ab:05:e3:ae:0c:e9:e9:c5:af:23:da:6a:
2b:46:11:66:b1:f8:c3:c7:78:b7:28:a3:da:7c:f6:70:37:c4:
fa:4e:c8:c9:a9:99:14:02:3c:ce:c4:af:7a:a8:23:9c:e7:c4:
63:62:ff:be:1c:98:5a:3f:c8:5e:0c:f9:f6:db:79:9e:08:99:
aa:c2:ca:9d:36:a1:53:39:3c:59:49:53:43:04:9a:1f:96:f1:
ce:12:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client