Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146171.roa
File: AS146171.roa (raw, json)
Hash identifier: b/SgWYQZi4i/AAH8t2MVehxfDX1oEKNHpQ1yyGEPssw=
Subject key identifier: A0:97:FB:31:F8:4B:FC:E5:74:0B:2B:B8:8F:21:4C:E7:6C:36:67:F1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4307B20F7D8636119D8089BE8BAC56C1C87ABEC9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146171.roa
Signing time: Fri 22 May 2026 06:46:26 +0000
ROA not before: Fri 22 May 2026 06:41:26 +0000
ROA not after: Fri 21 May 2027 06:46:26 +0000
asID: 146171
IP address blocks: 240a:adc1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:07:b2:0f:7d:86:36:11:9d:80:89:be:8b:ac:56:c1:c8:7a:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:26 2026 GMT
Not After : May 21 06:46:26 2027 GMT
Subject: CN=A097FB31F84BFCE5740B2BB88F214CE76C3667F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:f5:6b:50:ae:ea:8d:ed:5e:2b:e0:48:88:
81:bb:6d:38:87:6b:ad:95:ca:c0:71:c7:79:c8:1e:
ea:c0:b5:89:ae:dd:06:1f:a7:ff:66:95:8f:2c:03:
d3:a7:dd:85:3e:93:b1:c5:9a:c3:66:54:43:58:25:
96:7c:17:29:49:7c:b7:f6:87:cb:e6:34:72:28:24:
59:4d:2c:17:32:d3:d6:0e:d8:f3:f7:e1:d9:17:89:
04:cd:c5:5e:30:28:d2:fc:6b:74:bb:38:b1:d9:58:
79:97:cc:19:4d:55:ae:da:ca:ce:c3:90:62:a3:b1:
48:c9:54:5b:da:b0:b6:37:3d:ac:e9:19:05:5f:29:
b5:c4:81:a2:2f:3d:25:99:94:2d:34:7b:97:7b:48:
7f:d5:39:a8:37:c8:95:5d:3a:ae:3d:48:c4:01:2d:
2d:dd:40:03:f5:48:7e:96:99:f4:5f:f4:c9:b5:50:
2b:a6:73:cb:5b:d5:57:b5:e1:be:dc:b8:0e:24:d8:
c7:3d:7c:3f:60:5f:d5:9c:2a:89:7d:56:d7:be:53:
a0:10:a2:eb:9d:7f:e3:ae:b2:7e:f2:64:e9:a4:fb:
61:cf:6c:f5:45:ab:f5:9d:70:4e:19:4a:46:9c:8d:
99:5e:70:65:55:33:14:ec:83:d3:f1:c7:9d:37:e2:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:FB:31:F8:4B:FC:E5:74:0B:2B:B8:8F:21:4C:E7:6C:36:67:F1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146171.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adc1::/32
Signature Algorithm: sha256WithRSAEncryption
7a:82:c2:5e:0f:2f:83:7c:b3:f2:d6:99:c9:39:e1:d1:0f:ed:
43:45:f6:d5:74:a8:4d:23:b0:92:17:25:6b:c0:c5:83:00:6d:
09:54:73:0e:32:48:5d:7b:b2:dc:91:1a:0f:3b:76:02:ce:30:
e6:9c:b8:f5:ce:43:be:ff:7b:64:7d:19:bc:32:52:ef:79:77:
66:a6:4a:66:6e:b0:66:6a:e4:90:6a:ad:e2:14:06:29:47:b1:
a2:f2:fc:3a:7f:6f:ee:57:9c:5d:04:a0:31:41:d0:46:d8:34:
4e:47:2d:eb:39:c8:97:fd:b4:4c:62:52:d6:41:58:09:85:3c:
2e:35:5c:10:07:e0:ae:c9:cc:e8:e2:dc:a5:b7:65:19:fc:87:
2e:60:68:6d:6b:a8:8e:9b:12:01:cb:17:1c:c9:8f:2b:00:6c:
b8:86:cb:3d:35:68:a6:ac:14:20:9a:d9:ca:5a:0c:a8:89:53:
af:1b:22:d4:c7:f7:77:07:25:c8:d5:74:4b:6d:8f:7c:e1:6c:
59:b3:73:73:2c:8a:c7:0f:86:e9:33:66:cb:bd:0e:8d:70:55:
f8:c6:b9:99:1a:21:40:ee:43:96:5a:78:28:f1:8c:43:01:35:
04:d2:98:a2:10:1b:75:78:79:26:28:69:58:23:7f:47:78:87:
a5:2b:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:00 2026 by rpki-client