Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146134.roa
File: AS146134.roa (raw, json)
Hash identifier: jbZozXZD1/1OmIhocCGE4WSYN2gdaCoONyT0Ar76Jog=
Subject key identifier: 79:F6:1F:D8:CE:CB:0F:13:A2:17:3D:83:55:2C:97:87:F8:76:1D:BF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 333E573EE940DA853F33E56DEF95929A27D7E70A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146134.roa
Signing time: Fri 22 May 2026 06:05:33 +0000
ROA not before: Fri 22 May 2026 06:00:33 +0000
ROA not after: Fri 21 May 2027 06:05:33 +0000
asID: 146134
IP address blocks: 240a:ad9c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:3e:57:3e:e9:40:da:85:3f:33:e5:6d:ef:95:92:9a:27:d7:e7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:33 2026 GMT
Not After : May 21 06:05:33 2027 GMT
Subject: CN=79F61FD8CECB0F13A2173D83552C9787F8761DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:bd:48:fe:27:73:47:83:2c:6e:a3:9d:7d:
31:19:3b:00:a1:37:61:48:e9:63:e9:33:b7:e1:2c:
83:44:82:ec:23:cb:3f:5b:03:5c:c3:77:fd:20:4a:
ad:dc:e0:c8:aa:5b:e5:9d:af:ab:b0:2a:2b:82:e6:
78:9b:61:1c:fc:7e:b7:4f:86:e9:1a:90:21:60:b8:
aa:96:ab:f0:28:25:d3:e3:f6:14:7e:9f:2a:e3:5f:
86:5f:09:a3:ae:e9:ed:7f:c6:44:34:ad:ef:3b:a5:
a8:bb:bb:ca:bd:20:a8:b8:c2:45:5c:f1:3e:29:69:
1b:c2:ce:87:6e:a5:29:d3:15:8c:12:79:f4:e8:e0:
b8:0e:c0:72:28:f7:65:21:b7:ac:51:18:2a:1b:95:
a7:5a:77:bb:aa:06:cd:d9:39:94:87:13:d2:8c:48:
54:65:51:95:af:84:8b:9f:f0:65:5c:46:97:75:96:
e2:d0:0b:15:0a:31:68:8c:45:ce:1a:f9:3f:9b:71:
e2:98:c3:6c:5b:ee:bb:fe:47:ad:e8:ea:8f:3d:49:
40:b7:e7:dd:73:b5:af:c8:4a:3f:6a:de:94:c4:bb:
ed:07:99:8d:87:b7:aa:0c:2e:38:98:ae:c7:16:61:
7d:7b:58:1a:de:5b:39:88:ce:dd:29:76:fd:68:96:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F6:1F:D8:CE:CB:0F:13:A2:17:3D:83:55:2C:97:87:F8:76:1D:BF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad9c::/32
Signature Algorithm: sha256WithRSAEncryption
9b:73:19:58:3b:94:27:63:26:9e:af:b6:72:af:7f:a3:da:4b:
8c:fb:12:42:38:29:af:45:8b:f5:ab:14:de:98:f4:82:29:52:
e6:88:66:bf:c8:e1:25:7c:28:73:62:27:f5:47:22:5b:f7:13:
3f:2a:f7:c6:54:a1:82:fe:24:08:d0:b9:1a:f9:02:40:be:e8:
0b:f3:4d:05:bd:c0:03:78:4d:03:22:2b:e4:02:26:ab:20:e9:
50:bb:88:19:58:de:83:00:df:5b:46:b8:83:52:8c:76:7d:dc:
97:bf:29:bd:7b:26:90:07:fe:0c:1d:0b:8b:ec:7e:89:a4:60:
6f:c3:5b:7a:71:e3:84:68:6b:0f:73:25:14:82:73:82:59:4e:
51:f3:f9:d1:b7:83:2f:e5:bc:7b:a1:e5:9b:c3:b7:5d:16:1e:
e1:db:3c:42:46:06:62:a2:ab:1b:d9:69:22:a2:7c:60:51:ad:
f4:9b:99:14:29:9a:d0:fc:87:86:71:90:dd:98:ca:b2:77:7b:
8d:b7:65:a6:c8:c9:5c:cb:cd:5f:70:3a:52:28:40:35:e2:bc:
1b:26:92:2e:74:70:2e:76:28:75:5f:03:31:31:77:df:28:27:
92:e1:fe:ac:78:c9:24:ad:79:b9:cc:1b:56:2a:7f:e9:41:28:
7a:f5:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:17 2026 by rpki-client