Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146094.roa
File: AS146094.roa (raw, json)
Hash identifier: 1JNgs58tfPrJa2Dpj5i7iit06KdmT9rNK6MQHg1wahk=
Subject key identifier: 3A:AC:99:C8:CE:F7:BF:33:5B:3D:34:A4:D3:C7:FE:38:0F:4F:3D:8A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47E6DEFB20CEF9112D2D349BBE09597BF12CF30D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146094.roa
Signing time: Mon 25 May 2026 01:19:54 +0000
ROA not before: Mon 25 May 2026 01:14:54 +0000
ROA not after: Mon 24 May 2027 01:19:54 +0000
asID: 146094
IP address blocks: 240a:ad74::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e6:de:fb:20:ce:f9:11:2d:2d:34:9b:be:09:59:7b:f1:2c:f3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:54 2026 GMT
Not After : May 24 01:19:54 2027 GMT
Subject: CN=3AAC99C8CEF7BF335B3D34A4D3C7FE380F4F3D8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:23:1b:ba:7e:ba:36:ad:91:4a:59:f4:2f:
a3:20:2b:f0:ea:ca:b0:e4:79:26:fc:42:bf:00:55:
e6:1e:04:5d:aa:73:10:95:2c:7f:50:f3:36:6a:9d:
c7:c5:82:e9:15:6b:3a:a6:2f:2b:44:76:7d:77:ff:
89:73:a9:33:0f:44:e7:28:99:df:c1:36:3e:f6:cf:
e5:5c:eb:5c:c6:12:81:5e:df:42:f2:c4:08:46:79:
ff:0f:51:3d:6e:f6:cc:d0:03:98:0d:59:3a:1b:05:
61:b8:91:44:e5:20:4e:12:48:0f:af:c4:51:42:70:
c5:1f:57:8a:ec:78:2e:f5:72:54:1c:da:9e:27:80:
8a:47:57:3d:19:89:93:18:53:2f:60:16:2c:e6:15:
1d:2c:77:2c:46:5f:d6:18:ec:fb:a3:3c:08:74:3a:
fc:f2:ea:90:cd:25:1b:37:9b:eb:22:03:bc:9f:6d:
21:fb:d8:27:5b:42:a3:ce:7c:93:39:56:7b:b4:0c:
8e:5c:c7:c9:05:38:53:1e:fa:0c:65:70:54:42:9c:
38:13:99:35:83:0f:8d:e0:1f:68:04:22:19:0c:42:
ed:83:ac:5e:8f:e3:83:e7:0b:b2:7f:0f:94:46:d6:
18:83:99:ea:ee:3e:0c:0e:2b:58:24:00:dd:57:a7:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AC:99:C8:CE:F7:BF:33:5B:3D:34:A4:D3:C7:FE:38:0F:4F:3D:8A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146094.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad74::/32
Signature Algorithm: sha256WithRSAEncryption
91:1a:52:6d:86:04:6a:79:d4:78:03:87:2a:a0:97:0b:ac:4b:
7d:df:b0:5e:35:b9:2a:af:38:ef:25:80:99:f0:d4:c9:a1:85:
eb:db:2e:16:84:e6:cc:dc:bf:7c:f7:f3:5a:d0:c5:ec:57:54:
6f:7e:4e:77:7f:9f:2b:82:89:77:48:af:5a:a3:11:97:fc:b1:
b9:b0:c7:d5:4b:3e:84:93:92:46:9d:f9:6b:2d:33:51:a9:0c:
5b:e0:b2:f5:54:c7:75:2a:5d:53:9c:5e:7b:ab:72:e3:14:cf:
61:8d:28:01:50:a7:62:73:01:5f:35:47:9c:1c:fd:1a:2e:c7:
4b:5d:15:1b:c0:9a:a8:9b:70:05:eb:a0:e2:5d:16:4a:56:8d:
89:cc:bb:78:a3:e5:f9:4b:89:8d:74:9e:b7:87:a5:f1:c3:70:
de:5b:91:7e:2b:fb:25:ea:f7:91:e7:ff:c2:6d:2b:99:cb:88:
c3:cd:8c:fe:c3:7a:02:69:8a:ea:2a:b2:8b:83:18:c0:c0:a5:
92:db:f6:03:65:e5:b6:e6:bd:30:b8:ab:73:5f:14:b5:8b:fd:
50:bb:a1:4c:17:6c:89:4d:31:09:2e:50:0d:05:d1:df:ce:81:
bf:d0:3e:8e:65:d9:4d:55:69:ff:79:f6:f6:e7:97:04:a9:71:
ad:b1:d0:56
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUR+be+yDO+REtLTSbvglZe/Es8w0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE0NTRaFw0yNzA1MjQwMTE5NTRaMDMxMTAvBgNV
BAMTKDNBQUM5OUM4Q0VGN0JGMzM1QjNEMzRBNEQzQzdGRTM4MEY0RjNEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDedCMbun66Nq2RSln0L6MgK/Dq
yrDkeSb8Qr8AVeYeBF2qcxCVLH9Q8zZqncfFgukVazqmLytEdn13/4lzqTMPROco
md/BNj72z+Vc61zGEoFe30LyxAhGef8PUT1u9szQA5gNWTobBWG4kUTlIE4SSA+v
xFFCcMUfV4rseC71clQc2p4ngIpHVz0ZiZMYUy9gFizmFR0sdyxGX9YY7PujPAh0
Ovzy6pDNJRs3m+siA7yfbSH72CdbQqPOfJM5Vnu0DI5cx8kFOFMe+gxlcFRCnDgT
mTWDD43gH2gEIhkMQu2DrF6P44PnC7J/D5RG1hiDmeruPgwOK1gkAN1XpzeNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOqyZyM73vzNbPTSk08f+OA9PPYowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtdDANBgkqhkiG9w0BAQsFAAOCAQEAkRpS
bYYEannUeAOHKqCXC6xLfd+wXjW5Kq847yWAmfDUyaGF69suFoTmzNy/fPfzWtDF
7FdUb35Od3+fK4KJd0ivWqMRl/yxubDH1Us+hJOSRp35ay0zUakMW+Cy9VTHdSpd
U5xee6ty4xTPYY0oAVCnYnMBXzVHnBz9Gi7HS10VG8CaqJtwBeug4l0WSlaNicy7
eKPl+UuJjXSet4el8cNw3luRfiv7Jer3kef/wm0rmcuIw82M/sN6AmmK6iqyi4MY
wMClktv2A2Xltua9MLirc18UtYv9ULuhTBdsiU0xCS5QDQXR386Bv9A+jmXZTVVp
/3n29ueXBKlxrbHQVg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:04 2026 by rpki-client