Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146147.roa
File: AS146147.roa (raw, json)
Hash identifier: cJrDdspnrw/ryom8ckm29vO7HkY1riZYVJGYimsrBuI=
Subject key identifier: 27:EC:52:A3:1D:EA:41:5B:B6:6B:8B:A2:3F:0D:D6:32:A9:33:F6:B3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A47E6325DE5B58EC05629DDAF8ACCBF8C7AFCCB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146147.roa
Signing time: Tue 26 May 2026 01:13:05 +0000
ROA not before: Tue 26 May 2026 01:08:05 +0000
ROA not after: Tue 25 May 2027 01:13:05 +0000
asID: 146147
IP address blocks: 240a:ada9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:47:e6:32:5d:e5:b5:8e:c0:56:29:dd:af:8a:cc:bf:8c:7a:fc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:05 2026 GMT
Not After : May 25 01:13:05 2027 GMT
Subject: CN=27EC52A31DEA415BB66B8BA23F0DD632A933F6B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:57:fa:b7:04:1d:a2:ae:cb:60:e0:75:24:
b3:f7:e4:13:1b:3f:46:51:19:73:db:55:2b:0c:0d:
d9:d4:d3:6b:49:6a:69:a7:1a:ce:1b:f7:76:be:10:
f7:79:49:eb:56:72:be:5d:78:ef:d3:2d:aa:48:c4:
7d:13:c0:6a:43:5e:da:f8:0c:89:d9:32:f5:cf:ec:
d8:c5:d3:74:5b:f3:3c:98:a4:88:e3:03:e0:09:22:
2e:72:53:f1:40:9d:60:62:68:8d:4c:1c:c5:f1:fc:
02:63:00:27:ea:89:b4:87:10:d0:da:3c:1d:c9:59:
cb:7a:d9:f8:f7:36:af:c5:c8:2a:b4:c8:ac:3d:8e:
dd:b2:98:64:84:21:b4:03:c7:97:83:3a:e4:80:8e:
fa:c4:bf:a3:3d:fc:75:63:92:2b:19:fa:b0:53:76:
7b:1f:31:1f:0e:38:a5:04:30:9d:5c:64:0d:cd:5f:
a5:3b:26:a4:2a:fa:10:a4:51:9a:36:47:e9:94:0d:
ab:4f:bf:f4:5c:b5:aa:a4:d3:d5:67:af:20:ad:87:
83:5d:3e:52:2c:40:f2:2a:81:3a:e3:85:df:89:da:
1c:df:4b:8f:82:c1:6b:45:4b:d5:73:9c:6f:e9:c4:
63:a2:41:2f:b2:71:55:37:fa:a9:9a:fd:5a:08:65:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EC:52:A3:1D:EA:41:5B:B6:6B:8B:A2:3F:0D:D6:32:A9:33:F6:B3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146147.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ada9::/32
Signature Algorithm: sha256WithRSAEncryption
63:0d:4f:93:03:8b:ef:84:50:ad:40:ad:2d:a1:fe:4f:6a:ec:
4c:6a:53:db:05:4a:a1:10:27:eb:d2:e7:a9:6c:5f:72:4d:a2:
b9:07:74:dc:ad:58:4f:f2:1a:c4:b3:ca:e1:8e:b5:6c:e2:2d:
60:77:0c:99:f4:2f:43:bc:70:68:03:de:fa:2a:f8:31:71:4b:
71:15:ff:37:a2:f2:5a:9b:4e:58:69:2b:9c:6e:12:55:05:28:
ec:1f:40:cc:9e:ea:32:c3:ee:5a:db:7d:82:2f:14:4f:26:2d:
e2:96:e9:a2:03:c2:9a:9b:68:48:28:10:f8:12:d9:a1:96:f5:
a6:0f:2a:ce:bf:37:c0:78:73:c2:56:de:cb:ac:ba:32:23:4b:
85:5f:d6:2c:f5:36:c1:d4:86:86:54:b6:c2:66:64:24:02:9a:
ed:ec:55:58:20:a9:df:21:46:86:41:5c:16:11:83:c7:6f:eb:
bc:72:3f:2e:c7:57:73:9b:0f:0d:9e:68:9b:98:20:6f:73:68:
34:04:cd:01:5a:ba:d2:2f:37:0e:0b:8c:03:e0:85:cd:d8:ae:
21:e4:38:34:1c:30:b4:bf:f0:4d:a7:eb:16:4e:24:05:d3:0c:
39:3c:7f:23:da:e5:d6:73:da:e1:b2:00:12:0a:bd:80:8d:e1:
19:ab:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:38 2026 by rpki-client