Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146066.roa
File: AS146066.roa (raw, json)
Hash identifier: vClIg/hmA75KataZjDBZQ1yyl8NcHu9leqvtdU5BghQ=
Subject key identifier: 0E:D5:FE:92:C9:CF:29:C2:13:69:54:0C:B9:1F:49:F0:21:DF:CA:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5F8F5883E541DACB290DA716D5C29CC3EDC75EA3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146066.roa
Signing time: Fri 22 May 2026 06:27:59 +0000
ROA not before: Fri 22 May 2026 06:22:59 +0000
ROA not after: Fri 21 May 2027 06:27:59 +0000
asID: 146066
IP address blocks: 240a:ad58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:8f:58:83:e5:41:da:cb:29:0d:a7:16:d5:c2:9c:c3:ed:c7:5e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:59 2026 GMT
Not After : May 21 06:27:59 2027 GMT
Subject: CN=0ED5FE92C9CF29C21369540CB91F49F021DFCABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:f3:3e:35:ab:d2:a0:8b:9d:18:ee:c7:a8:
ef:d2:7d:94:78:1d:20:5c:75:79:04:c3:50:ba:74:
7b:c0:e3:82:d2:5b:0a:2b:a3:41:60:0d:0e:45:c8:
b2:6c:a0:63:fa:99:30:0f:51:8b:2c:04:30:db:8c:
3e:e3:bc:ec:55:83:4c:40:73:d4:e4:62:9c:d7:f7:
1d:da:b2:de:ac:79:4c:37:17:e1:e5:5e:df:3a:c5:
66:30:e9:52:a2:59:ff:b2:63:e1:95:56:b8:ce:39:
53:6c:86:27:f0:e7:a9:d1:5d:81:34:76:cd:d4:8c:
ed:9e:8d:7f:4e:b5:99:8b:8e:90:cd:92:d6:87:50:
f1:e4:5a:04:00:2a:01:3a:ee:5f:3c:ca:b5:23:aa:
fc:7e:56:65:11:22:3a:81:0e:69:fc:00:ef:d9:30:
40:b3:eb:94:b1:0e:7b:43:e3:fa:d7:31:7c:b9:bf:
8a:58:7b:46:b5:19:07:8a:3e:3f:d6:31:2c:9d:ca:
6f:56:f3:41:33:42:0d:06:5e:88:ba:77:8c:9d:a2:
f2:e2:a2:de:e0:a0:4a:58:68:bf:a7:7e:96:87:4f:
7d:41:6d:59:8c:e0:52:6b:47:d5:28:f0:dc:9d:98:
d2:1a:93:2d:45:bb:96:4c:37:68:75:4a:ee:1f:6e:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D5:FE:92:C9:CF:29:C2:13:69:54:0C:B9:1F:49:F0:21:DF:CA:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146066.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad58::/32
Signature Algorithm: sha256WithRSAEncryption
8b:4a:aa:59:a3:3e:bf:24:21:bd:74:f1:17:a3:cf:2e:5c:f9:
f5:1e:66:d7:c9:3e:f6:35:45:63:cf:36:cc:1c:c0:7e:bf:3f:
40:ec:b1:30:42:c4:69:f6:1c:e1:a1:86:60:11:dd:bc:29:ad:
4a:c1:62:b3:e8:db:7f:3e:df:41:ee:34:4c:15:74:a7:dc:79:
33:4e:e4:d8:ed:36:56:fa:12:f2:84:c1:e6:88:29:0a:b0:e8:
ad:ad:89:c5:ba:c4:90:71:3a:57:30:68:a8:c4:5f:4d:e4:a3:
54:3f:be:4d:fe:6e:ff:3e:58:80:f4:9d:e7:60:4c:eb:8e:5a:
d4:fb:2b:03:95:97:ad:d3:ec:f0:a0:fd:e9:40:2a:c0:e9:74:
7b:e7:7c:d3:36:1f:11:29:a8:6e:7f:3d:84:c3:b7:fd:8f:6e:
ea:79:48:ed:93:d9:7b:52:01:f6:1c:81:4e:85:18:58:aa:6a:
ea:17:1e:47:8d:bc:81:91:5f:dc:97:42:2a:14:a4:3c:61:23:
1a:af:ad:c2:4e:ae:70:89:da:39:ca:c6:91:97:85:f7:a3:91:
d0:99:36:bd:6d:77:84:57:79:95:09:d9:1c:28:6a:84:ce:09:
46:7d:7e:a7:39:01:2b:16:3a:d8:1b:18:49:1b:df:47:e7:7f:
15:e6:2e:f8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUX49Yg+VB2sspDacW1cKcw+3HXqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNTlaFw0yNzA1MjEwNjI3NTlaMDMxMTAvBgNV
BAMTKDBFRDVGRTkyQzlDRjI5QzIxMzY5NTQwQ0I5MUY0OUYwMjFERkNBQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHPM+NavSoIudGO7HqO/SfZR4
HSBcdXkEw1C6dHvA44LSWworo0FgDQ5FyLJsoGP6mTAPUYssBDDbjD7jvOxVg0xA
c9TkYpzX9x3ast6seUw3F+HlXt86xWYw6VKiWf+yY+GVVrjOOVNshifw56nRXYE0
ds3UjO2ejX9OtZmLjpDNktaHUPHkWgQAKgE67l88yrUjqvx+VmURIjqBDmn8AO/Z
MECz65SxDntD4/rXMXy5v4pYe0a1GQeKPj/WMSydym9W80EzQg0GXoi6d4ydovLi
ot7goEpYaL+nfpaHT31BbVmM4FJrR9Uo8NydmNIaky1Fu5ZMN2h1Su4fbl7nAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUDtX+ksnPKcITaVQMuR9J8CHfyrswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtWDANBgkqhkiG9w0BAQsFAAOCAQEAi0qq
WaM+vyQhvXTxF6PPLlz59R5m18k+9jVFY882zBzAfr8/QOyxMELEafYc4aGGYBHd
vCmtSsFis+jbfz7fQe40TBV0p9x5M07k2O02VvoS8oTB5ogpCrDora2JxbrEkHE6
VzBoqMRfTeSjVD++Tf5u/z5YgPSd52BM645a1PsrA5WXrdPs8KD96UAqwOl0e+d8
0zYfESmobn89hMO3/Y9u6nlI7ZPZe1IB9hyBToUYWKpq6hceR428gZFf3JdCKhSk
PGEjGq+twk6ucInaOcrGkZeF96OR0Jk2vW13hFd5lQnZHChqhM4JRn1+pzkBKxY6
2BsYSRvfR+d/FeYu+A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:23 2026 by rpki-client