Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146110.roa
File: AS146110.roa (raw, json)
Hash identifier: t0oKZN1lFFLyrRX91UQu16o2WPWtt7TR2Qa74Yt1Y3w=
Subject key identifier: 64:A1:18:4C:A1:AD:34:90:A6:F3:E4:90:66:54:34:AA:0F:98:1C:05
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5EE9A07EE30C9AF3D93A12FCFA8D3FE9253459D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146110.roa
Signing time: Tue 26 May 2026 06:12:54 +0000
ROA not before: Tue 26 May 2026 06:07:54 +0000
ROA not after: Tue 25 May 2027 06:12:54 +0000
asID: 146110
IP address blocks: 240a:ad84::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e9:a0:7e:e3:0c:9a:f3:d9:3a:12:fc:fa:8d:3f:e9:25:34:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:54 2026 GMT
Not After : May 25 06:12:54 2027 GMT
Subject: CN=64A1184CA1AD3490A6F3E490665434AA0F981C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:6f:bf:aa:00:81:ce:32:ce:0e:07:4a:77:
96:7e:50:a7:ee:ae:f5:45:de:05:e2:a4:3a:45:a1:
a2:b4:96:54:88:5f:41:54:06:26:47:55:24:fb:24:
fa:12:96:87:3c:e1:9d:e7:dc:5d:51:cd:14:f6:bc:
04:33:86:ab:96:1f:68:ad:15:df:d1:95:1f:5e:e0:
65:6b:63:a0:73:95:10:6e:d9:ba:e9:40:a6:7f:31:
7f:2c:6d:f4:1d:df:86:20:00:28:09:66:de:20:fa:
2d:1f:05:e4:53:07:92:04:b1:91:b6:5f:89:3e:81:
07:79:09:1a:89:fc:27:d6:e4:63:57:fd:6b:76:46:
4c:36:7f:7a:a0:08:77:04:d0:e6:d6:37:34:58:62:
56:ff:02:17:14:95:44:7d:a5:bb:0c:c5:11:5e:d0:
97:b4:b1:40:2a:45:bd:ec:84:c0:53:9e:e8:b2:ac:
56:b0:48:89:83:6d:53:d7:23:5d:f5:ae:b3:e6:9b:
c4:76:96:29:bb:f5:37:f9:84:48:ac:87:96:7c:de:
ee:f4:e9:92:84:33:15:c9:22:b1:c8:10:47:8f:da:
94:d6:39:fc:db:13:b7:fb:ee:b4:92:e5:5c:0b:5c:
cb:1c:95:72:7d:de:5b:16:6a:ed:34:12:da:1c:fb:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A1:18:4C:A1:AD:34:90:A6:F3:E4:90:66:54:34:AA:0F:98:1C:05
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146110.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad84::/32
Signature Algorithm: sha256WithRSAEncryption
2c:36:ae:00:0a:5e:4d:0a:72:89:c8:9f:83:ad:84:48:08:dd:
77:81:61:46:51:ab:89:dc:48:9c:02:b8:bd:5d:06:ef:17:22:
a6:84:e7:3e:39:92:93:82:f3:12:4b:d0:ba:fa:df:79:87:13:
f2:ef:cf:e0:0d:4c:82:ca:63:06:2f:d5:eb:08:6e:03:fe:ed:
f6:68:5a:f4:33:88:44:05:98:81:47:6c:5a:db:d1:1f:b1:d9:
0d:4b:21:08:b1:31:2e:ab:c8:e7:65:51:5d:67:5f:f9:27:ab:
42:ec:66:f9:99:cb:9f:45:dd:2a:86:5c:59:f3:5a:9c:02:ac:
97:52:5a:02:64:dd:ce:de:80:e2:39:56:6d:95:f2:18:4b:90:
30:01:4b:df:63:91:86:eb:c4:96:b5:7f:bd:ec:67:a9:a2:7f:
61:59:2c:f1:ee:25:2c:da:d3:2e:88:e2:9c:c9:11:75:79:2a:
e4:5d:7c:61:fd:07:20:92:24:dd:87:d7:25:3a:bb:65:21:f3:
a0:7b:b8:9d:f6:b4:49:a4:53:63:ec:ea:d4:6b:47:08:49:28:
20:e1:e2:81:31:43:31:65:ea:2d:6a:c8:0d:30:fe:65:f9:0a:
70:82:62:4f:e1:48:dc:06:e8:6f:be:84:bf:26:fa:3f:4c:19:
ba:82:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:47 2026 by rpki-client