Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146102.roa
File: AS146102.roa (raw, json)
Hash identifier: 6NKA4ml0LgirMZudKThr9WyScihIjdTcj8OIjt6JMQQ=
Subject key identifier: 29:7E:47:80:54:FB:FC:3B:10:B1:47:69:F5:9A:FA:62:D2:0F:25:D8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 296823563D4268BCD6D08C5CAEE1E7148EE56197
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146102.roa
Signing time: Mon 25 May 2026 06:28:40 +0000
ROA not before: Mon 25 May 2026 06:23:40 +0000
ROA not after: Mon 24 May 2027 06:28:40 +0000
asID: 146102
IP address blocks: 240a:ad7c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:68:23:56:3d:42:68:bc:d6:d0:8c:5c:ae:e1:e7:14:8e:e5:61:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:40 2026 GMT
Not After : May 24 06:28:40 2027 GMT
Subject: CN=297E478054FBFC3B10B14769F59AFA62D20F25D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:1a:19:da:19:94:15:6d:83:75:7f:e0:fd:
e5:06:e5:ad:3a:6c:c9:89:ce:a3:66:f4:b4:97:07:
a1:2d:3c:6a:49:bf:ff:04:7f:86:2c:8d:ba:2e:05:
54:a1:1f:95:33:a6:31:8a:60:f1:d3:0b:07:36:68:
05:70:39:9d:07:46:09:1d:5f:f1:86:92:76:56:2b:
21:0b:33:8a:a1:ef:10:35:58:0a:6c:1b:ad:a4:4a:
f2:49:d8:1b:30:e0:c3:dc:19:d1:ab:d8:08:e1:a2:
3e:53:bb:9e:17:62:38:89:e8:e4:78:06:99:54:ef:
55:2a:34:38:a1:2f:37:29:95:0f:cb:2e:14:2c:93:
0d:0b:fb:22:29:07:20:f6:3a:5e:78:9e:d3:2f:43:
10:2b:a8:4e:38:0d:cd:70:fe:43:20:50:a4:6a:df:
7b:33:15:17:cb:69:64:45:b1:52:01:03:7b:4a:4e:
9e:7d:27:da:41:c8:db:45:e3:84:9b:36:0d:3a:30:
68:dd:47:b6:c4:10:7b:d9:17:3e:23:3d:d8:d4:86:
87:4a:04:b1:80:ed:32:eb:22:19:26:10:ff:07:2b:
7e:a7:c3:48:45:ee:33:e9:30:ec:87:84:28:3d:47:
f1:6a:1f:d6:1e:54:94:e5:d7:69:b3:a5:36:d7:3c:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:47:80:54:FB:FC:3B:10:B1:47:69:F5:9A:FA:62:D2:0F:25:D8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146102.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad7c::/32
Signature Algorithm: sha256WithRSAEncryption
06:61:a6:e5:12:df:02:4a:2a:6c:43:ff:13:09:28:4e:80:cb:
26:0b:5d:84:ac:e1:a0:0b:24:14:97:e9:c1:e1:ae:a3:5a:d2:
4d:1c:12:35:4b:0a:b3:70:3a:48:39:12:fe:28:e1:c9:a1:5b:
2d:51:34:34:c7:25:1f:cb:26:23:7b:39:3c:fb:d9:48:bb:6c:
13:4d:cf:9f:2d:7e:26:6c:5c:04:94:5b:07:37:2d:30:18:ca:
3c:c7:b1:2b:67:d5:36:db:1a:b8:d5:9e:e3:87:71:0e:3d:7e:
f3:fa:35:ef:e8:1e:14:df:41:3e:f8:e9:95:37:d0:aa:33:a6:
8b:ab:55:1d:c1:df:74:74:f4:45:ba:75:3b:d1:61:73:a9:69:
82:28:97:7b:39:f3:de:78:04:d9:ab:23:6a:b8:e6:ba:2b:a7:
31:8d:57:0c:f6:a5:7b:60:ba:d4:00:53:1b:bd:4f:48:09:9f:
27:06:9f:d8:de:a1:d4:45:c3:0f:82:70:99:32:10:e0:76:32:
3b:4a:97:4e:56:18:0f:83:6a:45:79:c2:0c:59:ea:dd:e8:30:
0e:bb:b4:3f:42:94:f8:4e:2e:3d:7f:ce:0f:2e:53:09:56:f9:
dd:48:4c:15:bb:af:b1:29:19:74:1a:7b:00:f7:2d:ca:7f:9d:
72:4e:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:36 2026 by rpki-client