Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146194.roa
File: AS146194.roa (raw, json)
Hash identifier: kENa9lPt2ONzSRICx5uaiQVQ3wCTVbIM4LMRhD34W60=
Subject key identifier: 7E:37:8A:44:76:5E:53:1C:50:D5:CB:B4:21:97:C8:61:94:20:26:9C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29C75468DE33005B208BF991F5BA564171E35C08
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146194.roa
Signing time: Fri 22 May 2026 06:58:25 +0000
ROA not before: Fri 22 May 2026 06:53:25 +0000
ROA not after: Fri 21 May 2027 06:58:25 +0000
asID: 146194
IP address blocks: 240a:add8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c7:54:68:de:33:00:5b:20:8b:f9:91:f5:ba:56:41:71:e3:5c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:25 2026 GMT
Not After : May 21 06:58:25 2027 GMT
Subject: CN=7E378A44765E531C50D5CBB42197C8619420269C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5b:c5:0f:ec:92:ca:2c:45:fc:01:4b:5c:9a:
72:b6:ec:7f:54:9b:c3:04:4f:ca:1e:72:17:3d:72:
a6:60:84:05:70:67:bc:76:2a:f4:fc:53:1c:8c:e7:
5b:c9:15:83:6f:1e:7d:0f:82:e0:41:b0:ed:00:3b:
ad:5c:b1:5d:d9:39:2e:92:99:7f:a4:28:81:2b:0a:
6e:30:5e:6f:d6:ae:ed:44:f8:72:9f:8c:72:be:6d:
b5:56:ed:14:b7:f9:be:cd:30:c4:5d:5e:31:98:2e:
ab:1d:4a:fc:95:02:98:57:01:cc:24:6c:f1:2e:61:
32:eb:af:47:86:68:a5:93:1f:44:ad:7c:9f:15:f6:
79:c9:3e:01:02:81:2c:80:91:e1:bd:fc:69:93:12:
09:94:6d:ea:17:66:e8:22:56:11:d3:84:c1:68:a4:
a1:9c:c0:d3:7c:ae:a1:4e:85:9d:bf:b9:4b:43:16:
c3:9c:0a:3b:e8:3a:b0:21:7c:f9:09:fa:a0:2e:05:
4f:5d:ba:5c:22:65:f5:d7:fc:fe:c8:c4:74:77:5f:
64:af:2b:c5:15:ab:9e:72:f1:12:0f:c0:36:0c:00:
bf:0a:59:96:e2:a5:43:b8:02:0f:ed:de:78:82:d3:
d0:d9:92:d8:2a:c2:6c:3e:0f:d9:a1:eb:87:e8:99:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:37:8A:44:76:5E:53:1C:50:D5:CB:B4:21:97:C8:61:94:20:26:9C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146194.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:add8::/32
Signature Algorithm: sha256WithRSAEncryption
84:c4:e6:db:2f:ac:13:33:9d:8d:23:e0:0a:25:4b:b8:27:3c:
2e:26:2c:6c:b1:3d:4d:17:b6:af:42:c9:02:15:fd:93:51:17:
55:62:d1:da:b2:7f:6d:df:a6:b3:d4:19:95:4a:88:10:96:f4:
be:24:01:32:44:e1:1c:8d:28:5d:57:1a:16:42:1e:2f:39:1e:
cd:89:6f:67:4d:3a:31:c5:67:ce:5c:4f:74:38:8b:b0:72:14:
33:35:cc:98:dd:7e:48:60:83:22:9d:d1:51:ed:3c:44:ee:8a:
30:46:5c:7a:0b:ec:01:0a:7e:8c:e4:12:1f:4c:45:30:20:47:
3f:6f:31:5d:f3:31:6d:b7:2f:e7:3a:8c:c7:a1:7b:81:bd:f0:
b1:e4:a6:d1:cf:1e:be:81:d1:11:99:54:c4:af:0c:a8:01:75:
fc:1d:df:c0:ca:5f:5a:5f:f2:76:9c:67:90:6c:f9:ae:5f:45:
fb:2f:af:54:e4:0f:c4:39:49:8d:8f:79:c7:79:05:e6:a8:3e:
de:05:83:dd:88:0f:05:76:bd:6e:dd:0f:ad:05:2f:d4:f2:f5:
68:5f:cc:62:42:d2:9a:69:1f:09:34:1b:69:cc:19:88:ab:b1:
55:ec:f0:98:29:47:f2:2d:4c:da:9d:68:73:10:5e:3c:86:8a:
b3:92:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:08 2026 by rpki-client