Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146118.roa
File: AS146118.roa (raw, json)
Hash identifier: nTGgrxmdH6AkiyvAE3FTuM9fMuNyzB7CQzFIXI5Z96Y=
Subject key identifier: 59:13:8D:3A:DF:0E:6E:DF:F5:EC:A9:9A:54:41:13:28:89:2D:CC:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0E48AFA71C3A7BCD6EE29ED7A2DA0FDD9A390662
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146118.roa
Signing time: Fri 22 May 2026 06:46:06 +0000
ROA not before: Fri 22 May 2026 06:41:06 +0000
ROA not after: Fri 21 May 2027 06:46:06 +0000
asID: 146118
IP address blocks: 240a:ad8c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:48:af:a7:1c:3a:7b:cd:6e:e2:9e:d7:a2:da:0f:dd:9a:39:06:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:06 2026 GMT
Not After : May 21 06:46:06 2027 GMT
Subject: CN=59138D3ADF0E6EDFF5ECA99A54411328892DCC25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:8f:34:3e:29:38:80:2e:e9:24:21:88:dc:
55:98:b1:09:7c:47:11:1c:9a:55:3d:99:40:fc:28:
b0:bd:29:13:c6:32:77:28:2d:ac:13:77:c1:7d:ca:
d3:7e:de:27:6e:cd:dc:33:cd:8c:83:67:2a:10:7c:
d0:b0:05:41:d2:7c:08:53:52:79:a0:5e:cb:5c:fe:
86:45:bb:02:5f:18:8d:2b:38:84:93:55:13:29:03:
d7:ae:13:5a:6f:94:97:6c:e3:0a:17:0f:fa:ef:ba:
aa:72:f6:eb:4a:a9:91:ea:0f:23:ac:87:ec:9f:39:
36:6e:85:43:e0:84:a5:d1:8b:0f:33:c6:0e:14:24:
70:dc:e8:6b:e3:4e:06:d7:1e:13:66:28:fc:21:2c:
1c:fb:69:11:13:5b:aa:d8:13:2b:8c:71:f9:6e:ff:
04:e6:d9:8f:85:9d:d4:3a:30:90:53:60:bb:05:60:
30:4a:6b:2a:d0:36:e0:71:d1:f0:57:21:90:33:5a:
5d:ec:db:40:9c:99:c7:3f:c5:de:ab:34:41:e9:2b:
ff:46:8f:79:c0:77:81:d2:38:07:92:1d:9f:2c:1a:
03:c6:37:96:1c:86:b1:d5:8a:49:39:31:0c:25:0d:
89:03:33:9a:64:bc:18:7e:ed:07:e7:bc:b8:f9:1e:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:8D:3A:DF:0E:6E:DF:F5:EC:A9:9A:54:41:13:28:89:2D:CC:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146118.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad8c::/32
Signature Algorithm: sha256WithRSAEncryption
2f:59:ff:b6:29:10:d1:02:b3:39:87:61:7c:eb:60:5e:8f:ee:
6e:08:11:f4:ed:20:2f:49:05:3a:57:da:c5:a2:52:18:68:ec:
fd:ba:37:87:6a:dd:d1:86:cc:27:65:21:6d:63:1a:74:49:3b:
dd:4f:73:b2:1b:12:3a:1b:80:0f:b9:29:2a:a7:4b:52:23:eb:
6e:40:c9:be:18:e0:e0:dc:c2:23:0f:55:a4:ee:d3:b5:ca:75:
75:33:4e:a9:3c:68:a7:d5:43:4a:4b:24:9a:37:d4:ac:7a:e2:
59:f1:c8:99:c9:5d:1a:15:3d:eb:9a:e5:e8:8f:1c:8a:ab:6e:
3f:a5:ea:96:48:3b:a4:e9:8b:4c:86:46:e1:2c:65:e7:c8:be:
ff:c7:03:32:3e:27:74:db:a6:8d:34:e3:43:ec:4b:00:99:23:
2d:ee:92:4b:92:b7:bf:2d:f1:c7:4a:4e:b8:9d:16:9e:bc:a9:
be:a2:ff:b8:0a:0a:02:3c:3b:ad:4b:e9:80:20:42:5c:94:ce:
e3:5f:9d:13:fd:2e:c6:d8:f5:6c:bd:0f:62:b2:5a:81:c9:d9:
8a:36:94:d6:dc:96:eb:17:3b:70:59:26:d6:f1:d9:6f:b2:41:
84:9c:91:7c:dd:8d:1c:70:b7:4b:0d:13:52:b1:8d:22:1e:a2:
a7:73:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:37 2026 by rpki-client