Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146079.roa
File: AS146079.roa (raw, json)
Hash identifier: /zSNsOHAJmXLrSdU7jacRZt3LVmNXVaB7DkmqR5ipB8=
Subject key identifier: 3F:80:CE:CB:59:9F:C3:A9:4C:E7:8F:2C:FA:07:76:9D:39:2F:36:96
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B887A6C4F810579A53015561A6D8DD810058B66
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146079.roa
Signing time: Mon 25 May 2026 01:51:19 +0000
ROA not before: Mon 25 May 2026 01:46:19 +0000
ROA not after: Mon 24 May 2027 01:51:19 +0000
asID: 146079
IP address blocks: 240a:ad65::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:88:7a:6c:4f:81:05:79:a5:30:15:56:1a:6d:8d:d8:10:05:8b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:19 2026 GMT
Not After : May 24 01:51:19 2027 GMT
Subject: CN=3F80CECB599FC3A94CE78F2CFA07769D392F3696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:f9:7d:11:19:93:31:b2:43:d1:c7:89:17:
25:95:be:f9:b8:0b:cd:2c:8b:4f:53:71:1c:e3:e6:
8e:6d:59:21:83:9c:17:42:72:db:87:06:8b:ec:dd:
ce:39:20:4f:60:3f:30:80:9a:6f:77:b7:42:2e:28:
83:ae:5c:ae:6b:47:ad:73:fc:7e:3c:31:51:08:21:
ee:a1:35:64:80:1d:1a:de:a0:df:0a:a9:ef:32:e0:
0b:58:ad:f5:e9:ed:5c:33:87:b1:79:4d:6c:0f:e1:
d6:16:66:60:c9:86:2e:70:4a:51:af:5a:ac:d4:5e:
43:16:8e:e1:d4:65:f4:5a:f3:ca:97:4f:a7:e0:7e:
36:2d:bf:ce:41:ac:b8:26:ca:7a:53:0b:28:a2:60:
54:92:3f:74:dc:fd:be:dd:11:97:b6:b4:a6:8b:c2:
08:e5:92:f5:15:e1:80:78:b5:1a:33:a3:a4:ff:f8:
7b:f2:04:28:5d:95:37:ac:63:ff:fc:55:6a:f3:69:
49:30:82:7b:d9:3b:e8:77:55:f1:f8:37:d9:1e:d2:
cf:87:b1:62:f9:8a:be:06:3c:b4:63:88:54:fa:24:
3f:f5:57:90:a4:83:c7:02:cf:8a:f7:9d:84:b4:de:
57:93:df:b7:28:cd:3b:da:b4:8f:b1:1d:51:81:03:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:80:CE:CB:59:9F:C3:A9:4C:E7:8F:2C:FA:07:76:9D:39:2F:36:96
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad65::/32
Signature Algorithm: sha256WithRSAEncryption
58:1f:b5:db:8c:55:75:f1:e2:15:51:6c:1d:53:0d:79:50:e1:
be:c4:63:b9:ae:6a:a2:96:d7:fa:35:0e:64:30:87:ea:66:89:
79:c9:9b:9f:96:4d:38:9f:55:df:8c:c0:34:9c:10:2f:98:90:
dd:c1:d7:6d:c2:84:2f:38:9e:32:0f:98:49:ec:8f:5d:6f:96:
6e:e7:77:a5:5b:ec:4f:8b:2f:18:1c:15:fe:e3:23:30:e1:a1:
b9:9b:ad:25:00:3d:29:64:ce:e2:fd:d6:24:1c:1c:26:89:3f:
85:d6:16:5a:87:5d:96:0a:9d:ed:5a:b1:0b:2e:89:76:ab:27:
09:ae:48:ad:de:9d:28:95:18:95:36:0e:b7:75:7b:1a:36:be:
74:d4:35:f0:b4:b9:ff:34:0b:0f:de:b9:f8:87:e0:fc:0c:c6:
ea:aa:8a:2a:e1:d3:bb:69:48:c3:76:c7:25:be:e1:c1:d7:c3:
48:28:06:ca:ad:39:8c:ec:93:4b:19:ce:17:99:30:d6:66:a8:
e2:62:dd:09:19:b5:46:61:7a:fe:64:a8:ff:29:a3:e6:68:e1:
90:ed:29:3d:70:e5:b4:8a:33:2f:62:9f:ba:06:7b:ca:f9:0c:
70:9f:02:ad:75:89:b0:a9:65:1f:c2:87:75:46:31:48:9a:e5:
99:d2:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client