Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146064.roa
File: AS146064.roa (raw, json)
Hash identifier: 1PHT7ebPz+EqLKItg/s926YDHzLWhoQuYzv78u8Ov84=
Subject key identifier: 9E:4C:90:A9:00:97:8C:04:90:DE:47:82:2E:98:15:E5:77:44:DD:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5BD01EAC671C648ADF896C3340A4402E52B2A08F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146064.roa
Signing time: Fri 22 May 2026 07:32:30 +0000
ROA not before: Fri 22 May 2026 07:27:30 +0000
ROA not after: Fri 21 May 2027 07:32:30 +0000
asID: 146064
IP address blocks: 240a:ad56::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d0:1e:ac:67:1c:64:8a:df:89:6c:33:40:a4:40:2e:52:b2:a0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:30 2026 GMT
Not After : May 21 07:32:30 2027 GMT
Subject: CN=9E4C90A900978C0490DE47822E9815E57744DD95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:44:da:37:df:6a:07:66:5f:d5:9b:f0:50:
5f:f7:51:d9:be:d1:de:76:17:c9:ae:63:cc:da:3e:
33:ed:6b:b0:04:15:75:56:32:a1:1b:15:48:82:16:
8c:80:2e:09:cd:c6:0f:3c:cb:67:1f:9e:58:06:6e:
21:d1:4f:21:ba:52:76:05:fd:24:84:b3:ee:af:de:
d5:5a:2e:01:78:99:44:70:fa:99:a4:f0:ed:fc:03:
8e:63:a2:45:4b:5d:40:a3:c0:3e:57:7b:7a:98:74:
4b:1b:77:bd:40:b6:99:d7:40:79:aa:d0:15:e3:fd:
79:d1:04:54:20:15:b0:8e:4b:c4:24:75:ba:73:76:
80:aa:92:fe:aa:74:39:16:cd:34:36:d4:2a:10:fc:
d4:a7:0a:99:46:52:3d:f9:9d:0b:59:aa:8b:0e:3a:
cc:11:31:43:84:9c:8a:d9:ec:f9:cd:f0:9e:9a:33:
ae:7c:ad:2f:22:f1:9f:30:06:33:25:b0:e4:a2:ad:
e4:29:c2:a4:e8:a6:f3:ec:c8:23:ea:53:11:ca:c9:
03:1c:b7:5c:be:54:ca:b5:6c:3c:4e:55:5d:c8:98:
66:34:a8:51:7f:2c:df:9f:35:9a:63:c8:5f:16:9e:
3a:1f:77:d3:48:8d:f0:dc:7c:e0:31:5f:86:79:76:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:90:A9:00:97:8C:04:90:DE:47:82:2E:98:15:E5:77:44:DD:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146064.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad56::/32
Signature Algorithm: sha256WithRSAEncryption
27:ec:e0:f2:2a:49:80:6d:6b:25:e4:34:d6:43:44:d9:b1:92:
e1:40:97:e1:92:ba:e3:40:b2:bb:ee:81:dd:53:30:79:a4:bc:
3b:0d:4d:c2:05:73:d8:35:d2:55:13:e9:3d:33:bb:61:87:96:
fc:14:0a:7d:00:98:e6:57:04:26:d2:a8:34:79:e8:0b:9c:9e:
2e:ed:93:79:a4:0d:66:ea:f5:12:28:aa:ab:af:0c:4c:9d:2a:
e1:e2:05:3c:17:ff:2a:db:08:c7:1a:97:3f:d1:50:57:17:9d:
2d:5f:d6:d0:6d:4d:24:af:8a:31:8a:0f:5d:e3:0d:eb:12:25:
ec:eb:12:d9:9b:69:f0:cd:7f:9f:bc:31:62:cc:ff:2c:e9:2c:
d2:a2:85:63:85:4b:ac:6b:92:93:b6:c3:ef:7b:98:6c:39:e3:
e5:3b:49:8e:aa:24:fe:dc:be:c9:61:96:3d:4b:63:a8:70:91:
69:a1:8d:ec:f6:c0:2c:db:0c:a0:73:8e:41:25:38:cb:c9:3c:
a9:91:21:9d:0b:72:9d:d2:91:4a:ed:4b:0b:5f:b0:30:cd:20:
a1:c7:73:ee:86:8d:a1:cd:bc:45:a1:c5:f0:eb:15:d5:69:18:
8f:b9:e9:96:c7:12:b9:bf:4e:77:26:d3:73:2e:93:0c:d2:7d:
56:06:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:22 2026 by rpki-client