Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146105.roa
File: AS146105.roa (raw, json)
Hash identifier: g8S6OsXdIA5fn+HesMu/2DOxXPXvhWuVzc8JudD2YXA=
Subject key identifier: 6E:86:E2:BE:2D:E1:66:47:16:D9:48:15:AF:71:15:7D:BD:B5:F7:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2BDAA87C517B7B4E08114BF4C12A9B3531ADECED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146105.roa
Signing time: Tue 26 May 2026 03:17:10 +0000
ROA not before: Tue 26 May 2026 03:12:10 +0000
ROA not after: Tue 25 May 2027 03:17:10 +0000
asID: 146105
IP address blocks: 240a:ad7f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:da:a8:7c:51:7b:7b:4e:08:11:4b:f4:c1:2a:9b:35:31:ad:ec:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:10 2026 GMT
Not After : May 25 03:17:10 2027 GMT
Subject: CN=6E86E2BE2DE1664716D94815AF71157DBDB5F795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:a0:92:5b:fb:ee:12:55:11:4c:86:1f:82:
8c:33:1d:95:4f:e0:be:f3:8f:cc:99:54:d7:d9:7c:
57:f5:cf:9a:1e:85:af:4a:c2:1b:f9:7c:7c:70:c7:
c0:32:93:07:69:ce:a5:c7:51:c2:67:a7:76:85:be:
c0:64:ba:23:16:38:72:7a:6c:a8:0c:9e:7c:8f:fc:
b0:7e:ff:f8:fc:2c:11:7b:c8:bd:d7:4c:66:b5:9d:
7b:86:7a:58:27:2d:d3:bf:5a:a0:1b:b4:3c:d3:36:
9f:ab:b8:38:2d:0c:70:3f:78:a4:ae:fe:4c:d7:76:
82:ac:0e:38:1a:3e:45:3b:48:34:7c:a8:c9:85:1e:
e1:53:7e:4f:0d:dd:58:e4:85:b2:2f:b4:08:b8:0e:
bc:c3:31:86:21:08:c3:bf:f5:5f:a2:3d:2e:29:16:
6e:d2:f6:51:b8:97:d4:1f:74:42:1b:f2:52:65:cd:
93:2c:f9:72:fa:d9:52:c8:c5:bd:3e:24:a3:fc:9d:
3a:4d:ca:26:ad:3b:77:8f:0f:68:0d:a5:61:2b:9d:
c2:70:0f:f3:cf:b8:47:c0:61:bb:70:a1:ca:f3:35:
c8:8c:9a:22:04:9d:99:e6:06:e8:36:7f:48:0d:b7:
bd:82:e7:a3:de:6f:6a:32:7d:09:88:cd:b1:b2:cf:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:E2:BE:2D:E1:66:47:16:D9:48:15:AF:71:15:7D:BD:B5:F7:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad7f::/32
Signature Algorithm: sha256WithRSAEncryption
48:ad:a7:37:5e:31:b2:74:2a:de:55:6f:25:07:c9:ef:d5:ed:
57:66:9b:bb:55:10:53:4a:23:78:25:fd:b3:eb:d0:c5:b0:98:
ee:d4:dc:aa:d5:1c:1a:e4:54:d6:26:64:8a:e8:76:30:ef:e3:
57:8c:9b:da:8c:98:ae:01:6c:76:f2:82:ae:10:5a:ff:5e:1e:
49:80:a4:dc:4b:3b:60:3e:10:22:ce:f9:e3:29:fe:21:13:e3:
b1:d5:1e:89:49:2c:24:a4:22:4b:b1:00:9c:2d:cb:df:b0:02:
c5:68:6c:8a:36:61:ea:2e:ad:19:e5:be:ac:97:7b:dc:8f:b0:
94:00:b3:73:15:ff:37:f0:ef:7a:43:54:bd:77:fb:11:3f:b8:
c8:90:94:89:6b:66:ab:de:8c:cf:1a:8b:a9:c9:55:dd:f5:fa:
15:e5:b6:f7:9f:dd:2e:5f:ce:0f:89:b3:04:84:ce:2f:be:88:
91:92:2a:11:78:61:0b:f1:e4:d0:1f:13:66:23:eb:d8:ba:b0:
03:d4:97:d4:2a:8e:94:9d:cf:b9:c0:2b:b1:7e:7f:45:8a:70:
b2:09:18:38:73:e6:9a:3c:b5:d1:01:5a:dd:78:7b:00:7a:c8:
25:85:e1:e9:c5:d6:00:8f:9e:cc:fa:85:9f:4e:75:de:4e:49:
4e:24:e5:0b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUK9qofFF7e04IEUv0wSqbNTGt7O0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMTBaFw0yNzA1MjUwMzE3MTBaMDMxMTAvBgNV
BAMTKDZFODZFMkJFMkRFMTY2NDcxNkQ5NDgxNUFGNzExNTdEQkRCNUY3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGaCSW/vuElURTIYfgowzHZVP
4L7zj8yZVNfZfFf1z5oeha9Kwhv5fHxwx8AykwdpzqXHUcJnp3aFvsBkuiMWOHJ6
bKgMnnyP/LB+//j8LBF7yL3XTGa1nXuGelgnLdO/WqAbtDzTNp+ruDgtDHA/eKSu
/kzXdoKsDjgaPkU7SDR8qMmFHuFTfk8N3VjkhbIvtAi4DrzDMYYhCMO/9V+iPS4p
Fm7S9lG4l9QfdEIb8lJlzZMs+XL62VLIxb0+JKP8nTpNyiatO3ePD2gNpWErncJw
D/PPuEfAYbtwocrzNciMmiIEnZnmBug2f0gNt72C56Peb2oyfQmIzbGyz1M1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbobivi3hZkcW2UgVr3EVfb2195UwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtfzANBgkqhkiG9w0BAQsFAAOCAQEASK2n
N14xsnQq3lVvJQfJ79XtV2abu1UQU0ojeCX9s+vQxbCY7tTcqtUcGuRU1iZkiuh2
MO/jV4yb2oyYrgFsdvKCrhBa/14eSYCk3Es7YD4QIs754yn+IRPjsdUeiUksJKQi
S7EAnC3L37ACxWhsijZh6i6tGeW+rJd73I+wlACzcxX/N/DvekNUvXf7ET+4yJCU
iWtmq96MzxqLqclV3fX6FeW295/dLl/OD4mzBITOL76IkZIqEXhhC/Hk0B8TZiPr
2LqwA9SX1CqOlJ3PucArsX5/RYpwsgkYOHPmmjy10QFa3Xh7AHrIJYXh6cXWAI+e
zPqFn0513k5JTiTlCw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:49 2026 by rpki-client