Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146061.roa
File: AS146061.roa (raw, json)
Hash identifier: UvqrozNOJ+l+suRamnYoqrBJrqPhVMB/5qvfF6XF4Fg=
Subject key identifier: 22:4D:D0:5D:AD:10:F2:CB:95:B9:8E:F7:BF:A2:1D:B3:49:F6:1B:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52312B40AD398FA46B1B581C9F79E9A2777EE6B2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146061.roa
Signing time: Fri 22 May 2026 07:24:29 +0000
ROA not before: Fri 22 May 2026 07:19:29 +0000
ROA not after: Fri 21 May 2027 07:24:29 +0000
asID: 146061
IP address blocks: 240a:ad53::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:31:2b:40:ad:39:8f:a4:6b:1b:58:1c:9f:79:e9:a2:77:7e:e6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:29 2026 GMT
Not After : May 21 07:24:29 2027 GMT
Subject: CN=224DD05DAD10F2CB95B98EF7BFA21DB349F61BB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:e0:01:b0:49:40:4c:77:52:52:00:8b:03:
15:ea:91:cb:7f:0b:8d:3d:3f:f0:9d:d8:7d:6c:f5:
8a:c3:88:c3:14:14:76:23:6f:1e:db:4a:1f:b7:9d:
40:b1:f4:9d:c7:6f:7d:1f:bb:0e:f5:20:a4:08:85:
8c:b7:5f:2f:f6:b6:a9:19:c7:83:1e:45:de:6d:18:
0a:9e:31:5c:18:03:d7:dc:88:0e:b3:80:78:c1:22:
50:11:22:a3:6b:70:0d:73:c0:90:94:79:d3:8d:61:
7b:f4:71:4f:55:19:d2:16:bf:b1:96:ce:b7:96:2a:
49:6e:7a:e8:2f:0f:e9:cd:12:44:3d:24:e1:bf:d0:
d3:99:dd:ce:9d:5b:84:87:b5:31:e9:d0:6a:59:13:
b2:e6:60:80:93:a0:14:11:c6:7c:7b:6d:c2:e9:31:
e1:5b:e5:03:a6:89:3a:45:21:cf:e8:14:21:91:80:
d8:3e:0b:b1:98:c6:f1:51:74:c8:d5:ff:4f:64:8a:
7f:25:1e:b4:fb:ba:80:c8:9c:19:39:5d:51:d9:ab:
5e:01:82:63:ec:aa:00:66:a0:00:70:c5:f1:d8:ef:
bb:9d:1b:db:65:9b:ce:41:0e:08:a5:df:20:1c:f2:
6c:89:41:6f:02:f4:19:e4:36:38:39:e7:b2:1e:af:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4D:D0:5D:AD:10:F2:CB:95:B9:8E:F7:BF:A2:1D:B3:49:F6:1B:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad53::/32
Signature Algorithm: sha256WithRSAEncryption
77:99:a0:73:45:1a:df:4b:bd:4a:ad:cc:62:9f:38:c7:e8:23:
9c:42:97:a1:88:7a:5d:7b:fd:ac:ca:95:4a:9a:6b:13:29:21:
f8:e4:b8:40:9b:8c:52:17:ff:70:ad:57:86:97:db:6b:9b:1d:
eb:dd:8a:d5:29:84:eb:a9:db:31:fc:27:1b:dd:16:54:db:b4:
55:43:56:49:35:31:84:ed:ee:0d:98:7b:2e:7b:22:f3:6d:9d:
e6:5a:09:63:c6:dd:c7:0e:08:93:14:3e:e5:75:3b:ec:85:8a:
26:c5:78:64:a9:b4:4d:38:d9:23:af:99:51:02:c1:2a:e3:e0:
d3:be:a0:43:72:bb:af:a9:45:3f:fb:65:d6:20:c8:30:0a:af:
12:e0:6e:17:75:0d:8a:59:de:f2:8c:ac:c8:37:52:b4:45:14:
a9:c4:7f:67:61:b2:ef:f2:f0:0c:32:e0:e6:8b:35:bd:9c:0d:
f2:b6:6a:8e:ce:76:d4:25:8d:8f:fe:b1:58:da:41:6b:49:9d:
a0:d3:c5:27:6c:23:6a:6a:2e:f5:83:36:c0:e3:f6:6f:2b:6e:
7d:1e:62:bd:a9:20:c9:49:65:df:c2:5c:43:2c:d1:a4:52:eb:
44:66:99:b3:59:59:b7:52:40:04:44:81:a1:b3:06:2c:ab:16:
7d:36:5e:62
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUjErQK05j6RrG1gcn3npond+5rIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MjlaFw0yNzA1MjEwNzI0MjlaMDMxMTAvBgNV
BAMTKDIyNEREMDVEQUQxMEYyQ0I5NUI5OEVGN0JGQTIxREIzNDlGNjFCQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXMOABsElATHdSUgCLAxXqkct/
C409P/Cd2H1s9YrDiMMUFHYjbx7bSh+3nUCx9J3Hb30fuw71IKQIhYy3Xy/2tqkZ
x4MeRd5tGAqeMVwYA9fciA6zgHjBIlARIqNrcA1zwJCUedONYXv0cU9VGdIWv7GW
zreWKklueugvD+nNEkQ9JOG/0NOZ3c6dW4SHtTHp0GpZE7LmYICToBQRxnx7bcLp
MeFb5QOmiTpFIc/oFCGRgNg+C7GYxvFRdMjV/09kin8lHrT7uoDInBk5XVHZq14B
gmPsqgBmoABwxfHY77udG9tlm85BDgil3yAc8myJQW8C9BnkNjg557Ier1PpAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUIk3QXa0Q8suVuY73v6Ids0n2G7UwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtUzANBgkqhkiG9w0BAQsFAAOCAQEAd5mg
c0Ua30u9Sq3MYp84x+gjnEKXoYh6XXv9rMqVSpprEykh+OS4QJuMUhf/cK1Xhpfb
a5sd692K1SmE66nbMfwnG90WVNu0VUNWSTUxhO3uDZh7Lnsi822d5loJY8bdxw4I
kxQ+5XU77IWKJsV4ZKm0TTjZI6+ZUQLBKuPg076gQ3K7r6lFP/tl1iDIMAqvEuBu
F3UNilne8oysyDdStEUUqcR/Z2Gy7/LwDDLg5os1vZwN8rZqjs521CWNj/6xWNpB
a0mdoNPFJ2wjamou9YM2wOP2bytufR5ivakgyUll38JcQyzRpFLrRGaZs1lZt1JA
BESBobMGLKsWfTZeYg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:20 2026 by rpki-client