Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146158.roa
File: AS146158.roa (raw, json)
Hash identifier: 2rnSj6/9r5fRXJPlllRGxO3uzrv7n3Yd13ozi1PWIhE=
Subject key identifier: CC:70:C7:41:22:12:A2:CE:B5:D4:E1:86:53:1E:CD:2C:DB:FF:2C:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38CDF04CE017DDF639F06FF09EB950BE4826DF04
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146158.roa
Signing time: Mon 25 May 2026 01:20:27 +0000
ROA not before: Mon 25 May 2026 01:15:27 +0000
ROA not after: Mon 24 May 2027 01:20:27 +0000
asID: 146158
IP address blocks: 240a:adb4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:cd:f0:4c:e0:17:dd:f6:39:f0:6f:f0:9e:b9:50:be:48:26:df:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:27 2026 GMT
Not After : May 24 01:20:27 2027 GMT
Subject: CN=CC70C7412212A2CEB5D4E186531ECD2CDBFF2C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:bc:7b:db:2a:ed:4a:41:1d:08:01:d3:03:
21:8b:f9:67:fe:08:1d:ca:83:5e:ce:ef:13:7d:27:
74:d2:2e:1d:f5:16:08:41:30:cf:c7:b7:f2:45:30:
7c:38:4d:7d:97:ff:0a:1e:95:ea:0d:17:0e:55:72:
00:f6:e8:e6:82:d4:00:78:aa:22:76:ab:09:af:e8:
95:ec:50:0c:da:c7:03:3b:80:28:df:37:04:bb:49:
5f:02:c5:25:59:a4:93:2e:fd:0f:9b:f9:95:db:2b:
79:61:a8:bd:dd:83:36:d1:83:f7:7c:56:77:0f:aa:
1c:c9:62:8f:b7:9e:dc:a5:6a:49:54:db:9e:cf:81:
4d:8b:ac:06:c2:76:41:c9:be:1f:02:37:22:67:7c:
e3:23:b9:c4:5c:55:4f:c5:4e:ed:95:a5:50:02:cf:
cf:a0:1c:c4:f9:2a:85:70:75:f3:3e:0c:39:f1:3d:
01:62:e4:7d:22:ea:0e:0c:ab:11:50:2e:23:f0:5e:
ea:ad:b2:84:00:33:c1:b1:e0:3d:04:0e:9e:83:c2:
6f:59:11:88:fa:18:77:ee:22:36:98:69:f6:9e:a3:
4f:41:e3:b1:ca:4a:c9:00:25:8b:bf:aa:e5:83:53:
44:7b:50:fb:13:33:d3:b5:89:eb:15:9a:46:26:6d:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:70:C7:41:22:12:A2:CE:B5:D4:E1:86:53:1E:CD:2C:DB:FF:2C:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adb4::/32
Signature Algorithm: sha256WithRSAEncryption
5d:9a:4a:2c:96:65:50:4b:8e:62:65:b9:2f:38:50:fc:41:1f:
57:c3:c3:27:66:17:98:fb:8c:6f:76:67:24:1e:b7:00:b0:08:
32:4a:29:d5:54:70:de:7b:54:4a:a5:1f:74:21:47:a8:a1:a6:
b4:e8:f8:b0:14:86:2a:6b:03:48:4d:73:f2:55:15:69:b7:72:
41:96:b2:43:91:9b:74:df:ba:7f:e3:56:cc:3a:a2:8b:10:93:
5a:26:58:8d:73:8f:f9:03:98:eb:b3:5c:b0:f2:0d:78:32:37:
10:f2:7b:4d:d9:b4:79:b8:f0:68:5b:ba:99:74:93:b7:97:00:
da:e4:2c:d1:25:2e:99:12:32:92:32:11:24:62:b4:2f:64:6d:
24:4c:ed:f6:cb:e1:23:e9:9c:33:df:5b:fe:f0:b5:83:1b:e3:
95:58:72:96:dc:66:36:2f:21:3c:56:cb:09:12:ae:87:46:92:
67:25:b4:78:42:f8:54:b1:e1:f1:92:97:78:2a:df:ad:d4:c3:
95:cd:b4:b9:24:c3:99:2c:dc:e4:bf:78:da:d5:47:8e:35:3b:
7a:30:eb:b5:24:8f:a0:b8:cc:09:ac:54:bd:03:38:ee:56:24:
d8:8c:7c:c1:23:73:e9:07:46:bb:9c:a8:7d:a1:f1:3b:ef:fe:
50:37:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:19 2026 by rpki-client