Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146085.roa
File: AS146085.roa (raw, json)
Hash identifier: eRUv0huWPF4MSV3N97m5AZMpHIAOAb4v2IV1rqQ1nCY=
Subject key identifier: DA:EB:A7:A6:3F:1A:17:4B:E3:CE:C3:33:E3:F2:44:B2:0D:99:7E:4E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1233A4A866B5D8627DA5003D8FE633FDCCA56B33
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146085.roa
Signing time: Mon 25 May 2026 06:49:13 +0000
ROA not before: Mon 25 May 2026 06:44:13 +0000
ROA not after: Mon 24 May 2027 06:49:13 +0000
asID: 146085
IP address blocks: 240a:ad6b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:33:a4:a8:66:b5:d8:62:7d:a5:00:3d:8f:e6:33:fd:cc:a5:6b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:13 2026 GMT
Not After : May 24 06:49:13 2027 GMT
Subject: CN=DAEBA7A63F1A174BE3CEC333E3F244B20D997E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:ee:a5:86:c0:e2:cd:af:ec:f2:75:41:32:
18:29:8f:15:46:a7:1b:17:15:9a:07:19:39:b0:2a:
6f:24:f8:b5:4e:3f:d7:07:5f:8f:04:1c:52:1a:c5:
b5:9d:c6:d0:79:91:dc:40:14:37:30:34:4d:6e:99:
1c:5f:1f:8b:a0:6d:b2:e7:69:fe:55:7c:5c:99:b7:
6b:3e:11:f3:95:14:6b:b1:c9:fa:5b:8d:54:52:c2:
b1:fd:1e:6e:c4:20:24:85:be:42:83:d1:2b:11:fa:
5a:4d:9c:1a:df:6a:a4:1d:74:21:fc:12:6f:aa:c5:
9c:df:d9:8a:e1:76:a0:33:e7:7e:56:eb:1f:c6:92:
f4:f7:e0:92:bb:d6:15:e5:30:75:6a:72:75:36:17:
f9:29:ae:4d:56:d4:c1:10:64:d8:7b:1a:2a:20:d4:
74:98:c5:cd:76:eb:36:1f:3d:31:85:35:49:87:0f:
e4:93:16:c8:e4:03:a4:ad:ba:e8:c0:bf:34:45:15:
e5:18:c7:29:c2:82:7d:14:93:17:f4:c7:07:e3:65:
32:93:14:a9:ca:b5:7a:10:01:4c:f8:55:1e:5e:6c:
73:f5:5f:e0:d6:23:1e:bc:84:d6:05:34:80:ed:db:
aa:61:72:cd:a1:12:a0:64:23:32:02:0a:f0:f1:ad:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EB:A7:A6:3F:1A:17:4B:E3:CE:C3:33:E3:F2:44:B2:0D:99:7E:4E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad6b::/32
Signature Algorithm: sha256WithRSAEncryption
5d:de:a8:df:a1:81:c0:2c:1d:db:9f:39:df:44:1d:b5:a0:9b:
ea:84:d3:8e:5a:11:74:d0:a2:1e:5d:1f:98:1c:f3:99:7e:55:
7f:28:99:fe:33:b4:61:b6:e6:49:17:d3:47:19:63:75:cf:e3:
29:0f:12:9a:99:1e:d4:0d:24:67:41:6f:41:35:37:5f:43:a9:
50:1d:a0:a1:98:6f:bb:ee:bc:de:c7:8e:47:02:95:ca:10:98:
eb:b1:b5:b6:66:dd:5d:91:28:11:eb:9b:0f:31:c5:54:94:eb:
9c:2e:09:20:bc:67:50:4b:8c:6a:e8:b0:d5:88:49:19:03:f8:
c8:5a:44:47:f2:48:78:c9:6e:a7:ee:ad:ce:50:c0:4e:f7:21:
9b:d6:0c:75:3e:89:71:05:e9:3c:eb:1b:67:dd:9d:e3:7e:b1:
f7:00:24:7b:20:1e:f9:08:db:34:f7:50:5d:44:18:70:94:c3:
20:2a:b9:93:18:d9:9e:1b:b8:b3:9a:8d:44:52:5a:2d:ba:5b:
b7:33:54:d6:89:64:15:67:d0:8e:3d:26:0a:50:c9:80:b0:3e:
62:f7:71:b6:22:13:af:28:0f:52:3b:4e:3a:53:71:99:08:e3:
b1:fe:ee:c9:ad:fb:0a:8b:19:db:90:d6:5c:c2:4b:71:85:9d:
cb:00:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:17 2026 by rpki-client