Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146196.roa
File: AS146196.roa (raw, json)
Hash identifier: 3Y8czku8hsxnEXf6cuzYmOpnbZifTTe83mxuQj8ExQQ=
Subject key identifier: F2:08:CB:62:68:6E:D5:70:BE:A7:32:58:62:0D:DD:80:02:AA:97:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C0C4BDB8258B3B480C6DB6BC9C8F88D61687FB5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146196.roa
Signing time: Mon 25 May 2026 02:22:37 +0000
ROA not before: Mon 25 May 2026 02:17:37 +0000
ROA not after: Mon 24 May 2027 02:22:37 +0000
asID: 146196
IP address blocks: 240a:adda::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:0c:4b:db:82:58:b3:b4:80:c6:db:6b:c9:c8:f8:8d:61:68:7f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:37 2026 GMT
Not After : May 24 02:22:37 2027 GMT
Subject: CN=F208CB62686ED570BEA73258620DDD8002AA97CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:cb:ad:7a:95:fd:31:46:ab:60:a3:00:fb:
14:16:cc:f2:fc:06:0c:dc:9c:a9:0d:ec:c2:c0:74:
8f:cd:67:51:3c:af:c8:31:24:b1:83:e2:6d:0a:ea:
59:9c:33:2d:d4:f5:f4:b3:b8:42:fe:86:3c:3b:b9:
a4:60:4e:20:46:9b:1c:7d:6c:15:97:7b:96:d0:47:
d4:dd:c9:2d:d4:f0:79:90:82:61:a2:cb:dd:e4:77:
71:64:98:45:e4:90:1c:35:e6:0d:80:97:b1:ad:1f:
6d:34:c2:1c:93:58:ed:b8:32:5b:4b:d5:8e:ff:1c:
9e:15:9d:65:27:9e:89:24:9f:ee:41:08:0b:77:43:
18:3a:de:f6:cb:45:70:e9:69:aa:e1:4b:2d:2c:ce:
67:e1:7c:ad:d9:e8:13:6c:23:e8:e8:11:68:a7:a6:
5d:05:a2:d4:50:0e:2b:0b:47:4d:35:bf:b0:c4:e4:
53:b5:81:7b:da:2d:c1:41:bd:8b:7d:7e:67:b6:c1:
72:be:b9:76:c2:82:a7:02:d0:1d:96:41:15:5b:f6:
18:08:09:ca:d7:df:82:4a:a2:50:e4:b4:1e:1f:7c:
45:43:fd:28:57:83:43:27:f1:96:a6:0c:4c:c7:2b:
d2:a8:71:f4:1a:5f:62:18:56:7b:65:f3:f1:bb:1e:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:CB:62:68:6E:D5:70:BE:A7:32:58:62:0D:DD:80:02:AA:97:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146196.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adda::/32
Signature Algorithm: sha256WithRSAEncryption
a5:20:03:d4:46:ac:e0:6c:4e:de:8f:21:36:53:7d:cb:23:97:
f2:fc:5d:49:8a:88:ec:2f:f8:e7:77:e4:bf:c0:49:b3:19:f9:
3a:cc:1d:13:f1:b5:dd:cd:11:e4:87:96:aa:8e:7c:55:b1:9e:
69:ea:65:43:cf:fb:64:cd:f5:87:f6:1a:6f:12:22:a5:80:f0:
44:f3:86:09:aa:f2:6c:a6:fd:8b:8b:25:df:c5:d1:63:fe:e2:
d7:36:3e:72:a3:b3:eb:7d:ef:82:3b:d1:1b:27:b9:72:08:93:
92:8e:de:70:97:30:a1:3a:91:34:b1:fb:2a:7c:91:27:fb:d1:
b2:22:7c:64:14:b5:b7:76:a7:c1:65:18:4f:38:8e:27:02:a9:
05:0a:54:43:56:a5:c5:24:41:96:f1:18:86:6c:f3:3c:b1:14:
85:a3:cd:96:d5:b4:ff:94:6a:f9:04:dd:1c:08:81:65:96:e8:
c7:61:42:0f:7d:5f:72:b3:b9:85:d9:aa:5a:ce:34:62:cc:d6:
0e:0b:65:3b:a3:f1:f7:69:99:b4:d5:bf:e1:56:32:cb:7b:f5:
29:2f:26:64:65:de:b0:86:5a:98:6d:3c:b6:01:0f:47:e7:33:
23:1e:53:a0:80:b4:d4:cc:0d:87:ca:fd:f7:70:46:b1:ef:67:
e0:10:b2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:32 2026 by rpki-client