Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146098.roa
File: AS146098.roa (raw, json)
Hash identifier: mvMGwGsMAV3e5/lBSez3tZKvSxyVjOVKZvIfzfThoDY=
Subject key identifier: CA:56:F0:AA:E5:C4:68:EC:C2:6F:01:5F:75:CE:BB:D9:74:96:D9:15
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4A5F409FFFEFB9A1DD4747300B940C18B0395BB2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146098.roa
Signing time: Tue 26 May 2026 08:53:04 +0000
ROA not before: Tue 26 May 2026 08:48:04 +0000
ROA not after: Tue 25 May 2027 08:53:04 +0000
asID: 146098
IP address blocks: 240a:ad78::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:5f:40:9f:ff:ef:b9:a1:dd:47:47:30:0b:94:0c:18:b0:39:5b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:04 2026 GMT
Not After : May 25 08:53:04 2027 GMT
Subject: CN=CA56F0AAE5C468ECC26F015F75CEBBD97496D915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:46:5e:18:b0:96:dc:37:40:81:ed:b6:07:
49:38:50:5c:16:0e:2b:f8:7c:83:3c:90:a8:72:68:
b4:10:3a:57:12:9d:2f:1e:5c:f8:c1:d4:85:e0:6c:
7d:db:92:6f:56:bf:32:8b:18:0d:f0:11:5e:fb:e3:
f0:83:c3:f9:e9:6e:01:4c:df:08:1f:92:81:e7:e6:
3a:b5:6f:16:86:af:65:6a:43:49:71:a3:d4:e9:ff:
33:ea:0a:3a:65:49:96:26:73:3b:87:97:5f:23:30:
35:0b:13:db:39:f9:cc:3b:dc:a2:2e:e0:9d:ef:9f:
5e:4f:24:72:1a:33:fa:6c:09:8c:5e:2f:1d:f1:92:
d7:23:c7:7f:75:df:c9:23:e2:28:45:74:3d:99:d2:
6a:d1:72:75:7c:e5:56:fc:b5:d7:52:44:68:bd:09:
ad:b0:14:3e:3c:68:6d:f4:12:ab:20:0e:b6:b6:0c:
7c:45:3c:f5:74:bf:4b:08:6c:02:7d:3d:df:ec:55:
01:89:6e:53:46:65:fa:80:56:ae:d4:52:53:8a:06:
0b:de:ab:f1:1e:54:f1:d6:32:ce:94:cc:c6:be:cd:
de:78:5a:ee:5d:b1:02:f3:db:da:13:bd:aa:e7:71:
b7:3e:d2:3f:6d:72:ab:e2:aa:b0:e2:a1:bd:2f:9e:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:F0:AA:E5:C4:68:EC:C2:6F:01:5F:75:CE:BB:D9:74:96:D9:15
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad78::/32
Signature Algorithm: sha256WithRSAEncryption
01:5b:36:47:f7:fe:78:6f:25:69:49:4c:33:1a:cc:e7:85:ab:
83:3f:d8:93:4d:51:32:d3:e1:11:5b:27:ff:b0:86:16:71:bf:
cd:80:99:6c:e7:35:f5:5b:ca:02:e1:a6:01:49:21:18:7c:ed:
0c:02:4d:9f:90:03:2f:92:5d:90:43:f4:f1:b8:1b:10:07:e1:
8c:96:a9:c8:68:ad:d9:12:b3:b3:82:e3:32:a5:61:1c:b7:23:
6e:2e:a2:9b:9a:52:a8:99:8f:1d:9d:64:01:06:8f:1c:78:80:
76:8e:43:02:c0:64:18:3a:c1:62:2f:7b:5c:4a:c6:c9:54:44:
5e:28:e9:3f:c0:1a:59:23:a5:ff:73:fa:9c:da:9c:3a:e8:88:
6f:9c:62:87:fe:59:98:13:20:e6:92:14:fb:dc:74:b1:f0:61:
de:a3:f8:8b:5e:6d:49:b0:8a:38:f5:48:82:b4:9e:86:1b:66:
93:4e:3b:66:a6:05:2e:36:55:83:21:4f:bf:c4:af:5d:fb:77:
e3:3e:48:31:1a:0b:c6:6d:d2:19:a4:51:17:5d:4b:8e:6f:91:
54:f3:b9:a5:3e:5e:58:8a:e0:00:43:2c:0d:b5:02:72:91:af:
65:6e:69:d1:84:46:66:e8:f2:80:fe:57:d8:f2:12:13:b6:16:
46:35:ee:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:57 2026 by rpki-client