Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146149.roa
File: AS146149.roa (raw, json)
Hash identifier: hKUOgW4UFcC9nhwQjZanT19XdLtHH0OTjMs0MussvaY=
Subject key identifier: 57:1E:60:B8:9C:F7:10:AE:A9:3D:48:A5:A6:41:6A:A7:70:7A:55:6C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 585951ECB9CAB3586C4626DADCD6123B70AAE479
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146149.roa
Signing time: Mon 25 May 2026 01:19:56 +0000
ROA not before: Mon 25 May 2026 01:14:56 +0000
ROA not after: Mon 24 May 2027 01:19:56 +0000
asID: 146149
IP address blocks: 240a:adab::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:59:51:ec:b9:ca:b3:58:6c:46:26:da:dc:d6:12:3b:70:aa:e4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:56 2026 GMT
Not After : May 24 01:19:56 2027 GMT
Subject: CN=571E60B89CF710AEA93D48A5A6416AA7707A556C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:16:15:70:02:06:67:0c:ba:39:b7:31:1a:
9d:27:6d:94:37:25:d3:1c:38:87:1c:46:ba:6c:14:
c5:72:92:dd:a6:3e:d9:65:4d:31:5a:4d:93:4c:5e:
b0:26:7b:3e:f1:19:17:07:aa:71:9a:6a:54:d6:0f:
6b:d5:4b:23:9d:9f:ff:e7:42:d2:d5:e6:9c:bf:49:
52:fa:40:16:3e:89:77:c6:90:b0:38:82:a2:56:a0:
28:5f:7a:a9:bc:f2:72:0c:d8:14:6e:08:e6:28:4c:
5b:0b:0b:eb:4d:57:4f:57:c8:d5:3c:c4:24:2e:2d:
b9:9c:5e:9a:16:93:ca:a8:00:b0:18:7e:8a:2c:a4:
97:ca:8f:d8:83:0b:79:bb:3d:c0:5b:5f:41:e1:ee:
69:45:d8:60:b9:01:52:37:6e:6e:fe:ec:36:ab:e8:
56:6f:f6:d5:34:7d:2d:65:42:3a:f9:de:c0:68:e4:
c2:da:85:8b:80:8f:73:76:8f:0f:2d:b9:99:d0:bd:
b9:18:28:ac:82:61:2a:61:ee:0e:1f:44:88:4d:3f:
d2:71:47:61:7f:c0:9d:d2:51:b6:63:ef:64:a2:e6:
ac:8f:16:cd:79:1f:16:6a:c5:f6:e9:1c:42:ea:09:
3e:cc:02:55:d6:e1:0b:7b:a6:1f:58:fc:3d:85:f1:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1E:60:B8:9C:F7:10:AE:A9:3D:48:A5:A6:41:6A:A7:70:7A:55:6C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146149.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adab::/32
Signature Algorithm: sha256WithRSAEncryption
82:26:c6:49:ef:4e:7e:52:e5:ee:6c:1b:27:b0:2f:e2:a4:85:
39:c6:07:66:8d:ff:96:01:35:92:c6:7e:5a:9e:bf:75:b7:e7:
c6:7a:63:37:19:b0:b1:03:8c:76:9d:52:c2:93:96:97:ca:c4:
af:80:8e:69:46:03:fb:ac:33:37:c9:4c:65:3d:9b:f6:e6:b2:
a1:42:fb:1b:93:eb:a8:3e:1f:b3:c6:fe:d8:92:4c:3a:22:5c:
b9:d2:e6:0a:c1:23:85:8c:d0:ae:70:79:7d:25:65:1b:09:cc:
df:c2:d8:6e:ed:4d:3d:4e:dc:61:c3:8e:07:86:a3:f0:51:91:
ab:8d:64:fd:c3:df:ba:ac:9f:23:94:9b:73:73:cb:50:4c:bf:
6e:10:27:d8:98:39:73:bb:cc:03:b6:7a:ce:64:70:b8:95:87:
cb:59:21:e0:e4:cf:f8:fb:f0:24:dd:2b:c1:47:f3:7f:9e:fd:
c2:15:7e:b0:81:a9:ef:b0:16:56:c4:0f:4f:9d:38:05:0b:8b:
39:22:57:2c:22:5d:c8:5d:db:60:08:1d:b5:54:78:1e:19:f5:
e2:c1:3d:4b:ed:65:d2:ff:f5:60:7d:e6:05:4a:15:d4:d0:fe:
5e:c0:73:c3:4a:4a:51:7b:5a:d2:f8:9e:fa:07:1b:b4:f5:c7:
62:7d:14:a1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWFlR7LnKs1hsRiba3NYSO3Cq5HkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE0NTZaFw0yNzA1MjQwMTE5NTZaMDMxMTAvBgNV
BAMTKDU3MUU2MEI4OUNGNzEwQUVBOTNENDhBNUE2NDE2QUE3NzA3QTU1NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUjRYVcAIGZwy6ObcxGp0nbZQ3
JdMcOIccRrpsFMVykt2mPtllTTFaTZNMXrAmez7xGRcHqnGaalTWD2vVSyOdn//n
QtLV5py/SVL6QBY+iXfGkLA4gqJWoChfeqm88nIM2BRuCOYoTFsLC+tNV09XyNU8
xCQuLbmcXpoWk8qoALAYfoospJfKj9iDC3m7PcBbX0Hh7mlF2GC5AVI3bm7+7Dar
6FZv9tU0fS1lQjr53sBo5MLahYuAj3N2jw8tuZnQvbkYKKyCYSph7g4fRIhNP9Jx
R2F/wJ3SUbZj72Si5qyPFs15HxZqxfbpHELqCT7MAlXW4Qt7ph9Y/D2F8d53AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUVx5guJz3EK6pPUilpkFqp3B6VWwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtqzANBgkqhkiG9w0BAQsFAAOCAQEAgibG
Se9OflLl7mwbJ7Av4qSFOcYHZo3/lgE1ksZ+Wp6/dbfnxnpjNxmwsQOMdp1SwpOW
l8rEr4COaUYD+6wzN8lMZT2b9uayoUL7G5PrqD4fs8b+2JJMOiJcudLmCsEjhYzQ
rnB5fSVlGwnM38LYbu1NPU7cYcOOB4aj8FGRq41k/cPfuqyfI5Sbc3PLUEy/bhAn
2Jg5c7vMA7Z6zmRwuJWHy1kh4OTP+PvwJN0rwUfzf579whV+sIGp77AWVsQPT504
BQuLOSJXLCJdyF3bYAgdtVR4Hhn14sE9S+1l0v/1YH3mBUoV1ND+XsBzw0pKUXta
0vie+gcbtPXHYn0UoQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:47 2026 by rpki-client