Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146045.roa
File: AS146045.roa (raw, json)
Hash identifier: nNL34VqtCxzJyw0bivb/P/74Dor+hS9iy5fkvwdYkPg=
Subject key identifier: A9:57:DA:71:63:C8:58:CC:85:68:49:1A:A2:EA:19:42:09:A2:02:99
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 416DA0BE05CADDAA426CD95FABD0FC00387E49AB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146045.roa
Signing time: Tue 26 May 2026 08:52:57 +0000
ROA not before: Tue 26 May 2026 08:47:57 +0000
ROA not after: Tue 25 May 2027 08:52:57 +0000
asID: 146045
IP address blocks: 240a:ad43::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6d:a0:be:05:ca:dd:aa:42:6c:d9:5f:ab:d0:fc:00:38:7e:49:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:57 2026 GMT
Not After : May 25 08:52:57 2027 GMT
Subject: CN=A957DA7163C858CC8568491AA2EA194209A20299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:a5:5d:40:43:01:fc:ba:92:72:ef:14:ba:
8b:eb:0a:8b:97:18:1a:b3:a8:d3:af:c1:7d:20:e7:
87:ea:b6:c2:aa:39:6e:0d:c2:84:52:11:cf:06:b3:
62:e2:9a:54:c0:fe:cf:5c:8d:18:ce:ef:12:42:93:
0f:d6:9e:aa:10:25:1c:60:3e:a2:d1:d1:43:99:60:
c4:67:05:25:7c:33:79:16:7a:91:c6:79:a2:77:78:
bf:1c:a0:7c:28:0d:c0:6e:af:8b:75:e7:78:13:d0:
3d:d6:13:88:49:69:b7:ad:db:77:50:eb:c0:71:a5:
11:ee:1c:12:7c:0b:75:08:6a:5b:fb:67:31:70:3c:
45:65:a2:e2:38:aa:cf:0b:d7:40:ee:0e:60:24:ec:
e9:3c:3a:a8:9e:37:bc:a6:88:8a:42:e0:01:ab:e4:
3a:47:c2:f1:a5:3d:1b:9a:6e:fa:65:bd:48:d2:ef:
ab:4f:8b:bb:75:bd:ed:b0:11:33:e6:e2:18:db:dd:
8c:18:a7:a3:97:12:4c:2b:ef:78:5b:04:09:b6:5c:
c1:a9:3d:72:92:13:23:fe:70:19:46:77:96:45:98:
e6:66:45:21:52:53:de:6a:f5:ab:5d:de:e9:02:8e:
51:b8:ec:b4:40:c8:6d:a7:08:83:0a:60:71:e9:8a:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:57:DA:71:63:C8:58:CC:85:68:49:1A:A2:EA:19:42:09:A2:02:99
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146045.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad43::/32
Signature Algorithm: sha256WithRSAEncryption
3f:39:9a:bd:87:a4:47:21:fa:f2:8b:c4:a6:9c:40:6c:c1:d0:
40:d0:d5:a9:02:f6:79:80:2d:b2:73:ac:05:ec:dc:46:b4:df:
59:09:62:12:94:de:56:9d:98:f5:6b:91:19:2e:aa:32:89:81:
d3:6f:0a:85:ff:d1:fe:fa:ad:4f:58:09:1a:55:95:2c:a7:e7:
a1:3a:fa:e8:05:2e:ff:43:75:63:d5:82:71:ca:b1:2a:c9:ae:
e2:7d:f4:ad:cb:77:19:93:1a:6d:d7:c2:46:65:17:38:59:ab:
bb:03:6a:df:e4:c1:50:74:c3:8b:84:7f:dc:86:98:91:a0:62:
be:42:61:ba:38:25:67:7d:75:15:a5:56:47:4c:ee:b0:ea:33:
e9:e6:1a:40:1a:6c:bf:dd:36:3f:22:7c:12:15:22:e9:c8:47:
70:54:d8:67:9f:57:9f:2b:44:a2:ea:05:e5:dd:0a:1f:1c:70:
1b:c8:ec:37:99:a7:6e:a2:ef:88:b6:b9:06:ff:cb:c0:3a:a7:
f2:8a:09:3c:97:b7:fc:8b:20:39:95:4e:5f:c6:7b:cf:48:d5:
47:76:de:4d:02:c1:cd:ce:e8:74:2c:82:5a:01:47:5b:01:bb:
7f:ec:2f:4b:ca:b4:f4:e6:40:03:b7:e7:93:f0:8f:08:8f:1f:
12:55:89:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:10 2026 by rpki-client