Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146111.roa
File: AS146111.roa (raw, json)
Hash identifier: /pDUcXGaFXZnIRrQ1RmBSImeijqV2fOgx9a0Y6L0Uv4=
Subject key identifier: 16:FC:64:93:68:DB:75:6A:28:30:F0:8C:6B:C0:ED:9E:CE:61:36:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 66A729395C517BF02E3C0717BB48ED18AA873246
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146111.roa
Signing time: Tue 26 May 2026 02:34:50 +0000
ROA not before: Tue 26 May 2026 02:29:50 +0000
ROA not after: Tue 25 May 2027 02:34:50 +0000
asID: 146111
IP address blocks: 240a:ad85::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a7:29:39:5c:51:7b:f0:2e:3c:07:17:bb:48:ed:18:aa:87:32:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:50 2026 GMT
Not After : May 25 02:34:50 2027 GMT
Subject: CN=16FC649368DB756A2830F08C6BC0ED9ECE6136E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:94:24:0f:02:7c:4d:38:5c:d2:71:09:69:
4c:18:44:f5:38:19:85:db:c3:30:ff:fb:3e:68:74:
8b:aa:23:9b:f1:11:ad:ea:32:45:bb:0f:55:dc:c2:
49:58:c7:38:50:95:5f:7d:19:77:0f:f8:65:5f:53:
e5:56:1f:a5:aa:5f:a1:2a:ff:2c:b8:7d:c3:fd:f6:
3f:82:df:f9:b0:f7:e4:e6:65:df:d0:65:4f:eb:d6:
a5:50:e1:ae:ef:b9:ea:ec:92:62:3a:b4:b9:ff:27:
07:3c:53:7d:ef:24:ff:b7:c9:a0:3c:7d:3e:8e:ac:
0f:6c:0f:98:78:da:31:79:bd:12:2f:df:27:00:71:
4d:88:0f:05:6c:5e:89:d8:4b:58:e5:61:47:68:46:
8d:64:a4:ac:60:91:c5:f3:d7:c1:33:bc:d1:56:6e:
16:5a:16:39:bb:fd:9e:09:a7:ae:b1:56:96:e3:43:
5d:15:0d:a4:84:8a:38:2d:ca:52:06:39:68:ae:45:
21:3e:9a:16:23:40:61:50:c0:dd:9f:a5:6c:ba:22:
b9:4a:6d:c5:a5:ca:b4:14:41:1f:ae:82:33:7c:5e:
f2:d0:c4:af:58:04:63:9f:94:14:bd:5f:b1:f9:41:
b9:b6:35:7f:bf:e2:0c:b3:8b:bb:63:db:1f:f1:e4:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FC:64:93:68:DB:75:6A:28:30:F0:8C:6B:C0:ED:9E:CE:61:36:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad85::/32
Signature Algorithm: sha256WithRSAEncryption
7a:f3:65:5e:00:3c:76:c4:e4:c6:cd:15:0c:f8:3d:c3:bf:85:
ac:fb:c0:49:2a:b5:e3:94:58:7a:59:32:01:93:1b:17:96:38:
e0:3a:81:d4:5e:36:9d:37:30:7e:3f:01:8b:5f:69:91:00:1f:
13:0a:f2:80:52:55:b0:3e:db:26:aa:50:2a:51:bd:e0:7d:a4:
5a:fa:90:93:e7:b3:a1:ed:07:69:c3:12:00:e4:0d:5e:80:26:
e5:c9:a5:6c:dc:95:db:85:9e:ba:1f:02:ce:57:09:c5:69:ae:
27:8c:6d:c9:b9:4f:37:a7:b4:c3:de:0f:15:c6:d1:84:d2:50:
73:49:aa:70:78:e6:a1:e9:e1:9c:b7:34:0e:62:ac:12:2a:7c:
f4:90:d0:88:73:9f:76:52:ea:e9:4a:ef:7f:fd:ec:83:0d:12:
51:e1:b4:83:97:ab:23:16:cd:3a:4b:13:23:57:c7:90:53:cf:
6d:37:4e:d9:8d:35:73:06:01:8a:b4:3a:07:c8:7b:84:8d:75:
ff:5b:f9:a5:df:6c:89:18:4c:1e:b9:42:50:0c:bd:63:eb:d6:
ea:83:cc:c7:4f:d5:02:20:dc:84:a0:f6:14:e9:69:1f:22:a8:
31:d2:f5:93:21:33:eb:90:1d:2d:da:84:1a:60:7d:88:b7:b7:
c9:f3:cf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:27 2026 by rpki-client