Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146104.roa
File: AS146104.roa (raw, json)
Hash identifier: oJKK7ctYR9Xd0xfBAzvZKibXM7FWG541FOskU3v64/I=
Subject key identifier: 2E:C7:EF:1E:29:0D:5B:CD:DF:E5:C2:58:BC:1D:A0:34:1B:5F:BA:0F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 66FE733E26EDCC9E87D2E2D5F90C1AF007A8F160
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146104.roa
Signing time: Fri 22 May 2026 06:27:38 +0000
ROA not before: Fri 22 May 2026 06:22:38 +0000
ROA not after: Fri 21 May 2027 06:27:38 +0000
asID: 146104
IP address blocks: 240a:ad7e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:fe:73:3e:26:ed:cc:9e:87:d2:e2:d5:f9:0c:1a:f0:07:a8:f1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:38 2026 GMT
Not After : May 21 06:27:38 2027 GMT
Subject: CN=2EC7EF1E290D5BCDDFE5C258BC1DA0341B5FBA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:8b:6a:5e:3c:d2:40:d4:a2:6b:00:ae:a4:
c4:9c:6f:a1:c9:51:9b:5b:e9:cd:ae:b7:e3:89:0d:
e3:6d:8e:5b:48:2f:14:e0:2f:19:9f:1c:87:6f:cd:
d1:89:5a:72:c0:c0:1f:dc:e1:ec:b5:96:2e:5d:ee:
f9:c6:35:be:cf:38:77:45:db:b9:d4:7b:4e:60:2a:
28:6f:c0:34:df:fd:7e:db:c9:34:17:4d:36:74:6f:
68:f8:d8:6b:d4:25:b5:12:ba:e5:f9:dc:fb:0f:b8:
3d:ef:c9:96:fb:a7:19:5a:c9:a6:21:73:46:c1:31:
6b:d2:b8:45:c2:27:a8:da:83:87:0c:a3:b9:64:f3:
60:b8:d7:2b:ec:a4:37:a2:8f:2e:91:bb:0d:d2:00:
b3:bf:41:1b:26:8d:0f:8f:f3:85:40:14:38:40:d6:
08:ea:b1:fa:77:1a:74:4b:b4:44:6e:91:67:0f:d4:
47:ca:17:8b:9b:cc:d6:c5:e7:95:2b:57:d9:2d:21:
5c:a2:31:22:3a:ef:6e:98:c7:3c:81:be:81:42:2d:
56:66:99:12:36:13:7c:0f:34:b7:e2:33:59:ad:59:
d7:2c:8c:5d:50:c4:c8:41:9f:33:a4:f9:08:28:7a:
2f:ce:f2:2a:c9:12:b5:63:95:91:8b:ca:55:ec:c7:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C7:EF:1E:29:0D:5B:CD:DF:E5:C2:58:BC:1D:A0:34:1B:5F:BA:0F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad7e::/32
Signature Algorithm: sha256WithRSAEncryption
b0:ab:e7:08:10:e3:2b:02:3a:6f:1d:b3:f6:cf:49:39:4e:04:
fb:13:41:97:22:cd:2b:c0:46:f8:78:0c:bd:26:14:4f:f7:ed:
41:3c:70:f0:3a:e0:76:ef:da:17:27:8d:ff:75:35:27:0d:72:
42:1d:32:1d:21:c2:38:9e:34:cd:dd:f5:2d:c4:18:55:47:48:
c1:8f:73:f0:10:10:81:b4:8c:b8:01:0c:fc:ec:22:b4:ea:62:
a5:26:b6:57:9e:e2:57:fd:dd:85:10:cf:ac:76:fe:f0:c1:3b:
95:53:44:6a:22:94:27:a0:70:8e:84:0c:da:be:8e:a6:a0:ca:
b3:72:25:37:54:1c:08:90:e3:0c:35:e2:eb:6b:fe:8f:82:21:
f4:69:03:e4:df:92:b1:53:fa:a9:10:ae:2e:45:19:9b:b1:4d:
5c:a1:52:2d:e8:c4:8d:e3:7e:55:71:89:22:f6:0b:25:33:1b:
cb:fe:1a:38:fd:dd:70:f2:21:2a:0e:93:13:b3:74:72:2d:3e:
bb:7b:85:f0:13:9a:0d:e8:9b:75:0a:a2:3e:b6:c3:6e:b0:ed:
c8:93:70:4b:1a:c5:50:ec:e6:fe:67:ea:ce:6d:ff:38:03:d5:
08:f2:6b:f6:4f:ae:18:5c:54:ef:3e:7e:5a:b9:16:5f:56:c0:
74:7b:2b:05
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZv5zPibtzJ6H0uLV+Qwa8Aeo8WAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyMzhaFw0yNzA1MjEwNjI3MzhaMDMxMTAvBgNV
BAMTKDJFQzdFRjFFMjkwRDVCQ0RERkU1QzI1OEJDMURBMDM0MUI1RkJBMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcYtqXjzSQNSiawCupMScb6HJ
UZtb6c2ut+OJDeNtjltILxTgLxmfHIdvzdGJWnLAwB/c4ey1li5d7vnGNb7POHdF
27nUe05gKihvwDTf/X7byTQXTTZ0b2j42GvUJbUSuuX53PsPuD3vyZb7pxlayaYh
c0bBMWvSuEXCJ6jag4cMo7lk82C41yvspDeijy6Ruw3SALO/QRsmjQ+P84VAFDhA
1gjqsfp3GnRLtERukWcP1EfKF4ubzNbF55UrV9ktIVyiMSI6726YxzyBvoFCLVZm
mRI2E3wPNLfiM1mtWdcsjF1QxMhBnzOk+Qgoei/O8irJErVjlZGLylXsxyZ9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULsfvHikNW83f5cJYvB2gNBtfug8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtfjANBgkqhkiG9w0BAQsFAAOCAQEAsKvn
CBDjKwI6bx2z9s9JOU4E+xNBlyLNK8BG+HgMvSYUT/ftQTxw8Drgdu/aFyeN/3U1
Jw1yQh0yHSHCOJ40zd31LcQYVUdIwY9z8BAQgbSMuAEM/OwitOpipSa2V57iV/3d
hRDPrHb+8ME7lVNEaiKUJ6BwjoQM2r6OpqDKs3IlN1QcCJDjDDXi62v+j4Ih9GkD
5N+SsVP6qRCuLkUZm7FNXKFSLejEjeN+VXGJIvYLJTMby/4aOP3dcPIhKg6TE7N0
ci0+u3uF8BOaDeibdQqiPrbDbrDtyJNwSxrFUOzm/mfqzm3/OAPVCPJr9k+uGFxU
7z5+WrkWX1bAdHsrBQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:59 2026 by rpki-client