Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146089.roa
File: AS146089.roa (raw, json)
Hash identifier: S4hL3Fd4Uf9ErnZC0/3NNnwlvsVs4JhKM8lrioLf1Ik=
Subject key identifier: 85:1D:DC:CE:1A:66:C4:5C:42:2D:88:87:B0:36:F6:C1:B6:10:E6:3F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B35C23BF00C1709B68CC11665909F07ADC290E5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146089.roa
Signing time: Fri 22 May 2026 04:27:03 +0000
ROA not before: Fri 22 May 2026 04:22:03 +0000
ROA not after: Fri 21 May 2027 04:27:03 +0000
asID: 146089
IP address blocks: 240a:ad6f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:35:c2:3b:f0:0c:17:09:b6:8c:c1:16:65:90:9f:07:ad:c2:90:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:03 2026 GMT
Not After : May 21 04:27:03 2027 GMT
Subject: CN=851DDCCE1A66C45C422D8887B036F6C1B610E63F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:1b:81:7a:b7:a2:dd:c4:a6:60:92:40:f7:
e5:ef:e1:20:24:d7:61:cc:8b:59:42:bc:1f:93:1b:
c8:5f:6c:2a:d8:9a:25:5a:4f:1f:76:4e:60:cc:b8:
35:5c:72:95:d7:f2:60:ac:27:38:3a:29:89:6f:d9:
1d:ed:95:84:51:74:a3:84:c9:6c:31:c3:05:ea:98:
83:3c:5d:6a:c7:2f:60:fc:0b:56:6d:33:a9:d9:89:
e6:44:3f:91:bc:82:e6:28:1c:e6:64:84:1b:eb:5e:
8e:e8:bd:ae:14:70:a4:2a:7c:e9:b0:21:e3:b5:1a:
5f:8f:8d:3a:c7:4c:3e:f8:15:56:a6:44:69:1c:68:
1c:94:66:88:ca:84:97:9f:cc:7f:85:3a:d3:26:03:
85:50:0d:a8:0d:3d:49:45:5d:5f:e8:ff:8a:78:4c:
f6:ca:05:fe:67:27:df:10:43:5b:9f:23:e0:84:99:
22:8c:19:82:78:6c:41:95:c3:1b:32:f3:51:cc:e4:
ae:d6:9c:53:36:b3:1f:7d:ea:2e:ac:43:9d:45:47:
79:f4:77:59:83:c7:da:4e:0f:c4:b4:0e:2e:11:74:
ab:e4:f3:d3:03:45:4a:b0:a9:e5:c8:4d:7b:ad:73:
d4:54:82:53:dc:15:53:68:fd:7b:84:2a:1a:36:3c:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1D:DC:CE:1A:66:C4:5C:42:2D:88:87:B0:36:F6:C1:B6:10:E6:3F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146089.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad6f::/32
Signature Algorithm: sha256WithRSAEncryption
56:80:a5:a8:3d:04:1e:34:29:a1:dc:f2:eb:94:b9:b2:2a:1a:
1c:6b:72:11:ef:59:8a:01:3a:5d:66:f0:20:d3:3f:f7:4d:71:
b8:24:a9:4b:8b:a8:b4:1a:74:a8:fd:80:e8:90:5e:36:0d:46:
11:ca:3b:10:1f:3a:43:35:ea:f0:b1:1e:a6:01:94:f0:b7:f5:
ba:b9:5f:5f:22:81:0a:62:8a:ae:6a:25:ac:32:b7:30:7b:9b:
dc:14:2b:00:cd:a0:ba:8a:f8:5b:55:49:23:b5:f4:49:9d:43:
60:41:ab:cd:10:48:5c:16:7c:bd:e0:11:95:a3:3a:af:45:07:
90:17:a8:a9:30:c0:93:df:c7:46:27:58:87:70:e7:d3:50:dc:
c9:91:8c:0a:29:19:10:d6:44:8b:51:f1:3d:fa:a0:20:63:a1:
d3:65:db:ed:93:4f:2c:b1:2f:3d:cc:a2:2c:59:e6:1d:a4:04:
ef:01:49:d1:e5:68:21:5a:c7:02:08:a6:c4:7d:0a:da:5c:c8:
53:69:db:af:bd:03:00:0a:c7:9b:ca:40:82:ba:1d:f5:58:80:
b3:dd:2a:83:d1:13:34:73:bf:31:27:75:cf:4f:2e:b8:da:a4:
54:ff:e8:d1:ff:a3:d2:cd:35:3c:3a:1a:30:bd:13:37:a6:f6:
24:51:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:18 2026 by rpki-client