Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146204.roa
File: AS146204.roa (raw, json)
Hash identifier: YJ+6CV8+Dyb0G8C9dB/LePQr5C2BnlrOA0sqwpuWtZo=
Subject key identifier: 42:D2:C3:F3:F5:5E:D6:77:38:24:1D:B9:7A:51:A2:56:04:4E:0D:7C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42EBEACCA2B00E8726DB18F27632DB6BACC1105B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146204.roa
Signing time: Tue 26 May 2026 02:35:13 +0000
ROA not before: Tue 26 May 2026 02:30:13 +0000
ROA not after: Tue 25 May 2027 02:35:13 +0000
asID: 146204
IP address blocks: 240a:ade2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:eb:ea:cc:a2:b0:0e:87:26:db:18:f2:76:32:db:6b:ac:c1:10:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:13 2026 GMT
Not After : May 25 02:35:13 2027 GMT
Subject: CN=42D2C3F3F55ED67738241DB97A51A256044E0D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:ff:ae:2a:df:1a:b3:b8:a6:f8:e5:ee:55:
2a:27:42:60:70:1e:3f:7d:56:79:e6:cd:c6:ac:5d:
71:00:a8:ac:8c:8c:16:76:f6:e7:56:87:c3:8c:c9:
26:b4:51:7b:72:41:e4:13:42:1c:fd:dc:61:9d:b3:
63:79:80:c3:79:0d:64:1b:d7:05:d5:fd:48:3c:8d:
94:a7:4f:80:03:4b:d7:e3:1f:10:90:bb:8d:b8:5c:
85:84:ca:b5:9a:19:23:23:70:2b:f6:b7:51:ae:f4:
c3:67:79:d0:06:cf:49:2d:fd:db:68:50:f9:7d:dc:
ed:76:56:ec:b2:32:fe:71:39:d3:64:48:40:76:85:
47:f2:eb:04:20:eb:2a:8c:6c:c5:91:18:98:23:6c:
5d:20:28:d3:a1:b0:15:f1:f1:de:a8:79:5a:59:53:
5e:b5:5a:9c:db:67:36:71:b1:2d:33:88:82:c1:7f:
04:ce:0d:ac:db:86:a5:e5:79:83:20:5d:00:8b:1e:
9f:56:7c:44:14:ee:1b:f5:dc:6c:9e:2b:97:a4:f3:
19:c2:80:08:b4:4b:41:7c:5c:b4:bd:23:dc:1f:a7:
e9:da:f0:1b:13:7f:ab:36:52:d3:b1:df:df:8a:1b:
27:ad:3a:cf:bb:80:24:b5:92:fc:4f:2e:b9:16:44:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D2:C3:F3:F5:5E:D6:77:38:24:1D:B9:7A:51:A2:56:04:4E:0D:7C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146204.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ade2::/32
Signature Algorithm: sha256WithRSAEncryption
87:62:28:d7:6f:dc:8b:e3:e2:86:57:21:7b:06:ca:99:3e:11:
7f:b6:91:f9:d0:13:77:ff:3f:9a:12:e3:ba:37:25:fb:86:76:
ba:b5:95:5f:c1:20:ff:24:41:bf:76:01:32:45:cb:66:ea:a1:
9c:14:43:ee:fb:0c:d6:99:ea:33:3a:68:04:6e:0f:c4:16:e6:
d8:4e:e2:6f:59:d8:29:56:aa:56:49:ad:36:cd:73:c0:d5:3e:
22:e4:c3:b7:d4:e6:59:f7:ed:6a:ed:64:a2:45:0c:44:94:fa:
df:ec:95:b4:0f:86:07:1e:25:68:7a:11:28:52:66:6c:46:84:
78:aa:f6:8c:da:f9:84:be:40:9c:6a:0d:97:6c:45:f2:2b:70:
16:1d:d2:f0:60:14:93:e2:c4:b0:01:bd:9c:64:38:e0:7f:99:
ed:d1:24:da:a9:0d:15:4c:b7:e2:a6:87:e2:cc:17:32:b9:42:
61:f4:72:2d:d3:a2:b1:04:6f:ee:dd:15:0f:76:bb:7a:5e:c1:
ce:14:a7:11:5b:41:d7:72:35:88:57:cd:32:e9:03:c4:13:42:
5c:77:45:ea:ba:17:10:a8:78:ac:60:4e:a3:3a:bf:ca:c1:68:
8f:78:ad:15:b7:df:c0:36:10:0e:31:cb:0e:94:bd:6d:73:35:
d7:f7:35:2d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQuvqzKKwDocm2xjydjLba6zBEFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMTNaFw0yNzA1MjUwMjM1MTNaMDMxMTAvBgNV
BAMTKDQyRDJDM0YzRjU1RUQ2NzczODI0MURCOTdBNTFBMjU2MDQ0RTBEN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkP+uKt8as7im+OXuVSonQmBw
Hj99VnnmzcasXXEAqKyMjBZ29udWh8OMySa0UXtyQeQTQhz93GGds2N5gMN5DWQb
1wXV/Ug8jZSnT4ADS9fjHxCQu424XIWEyrWaGSMjcCv2t1Gu9MNnedAGz0kt/dto
UPl93O12VuyyMv5xOdNkSEB2hUfy6wQg6yqMbMWRGJgjbF0gKNOhsBXx8d6oeVpZ
U161WpzbZzZxsS0ziILBfwTODazbhqXleYMgXQCLHp9WfEQU7hv13GyeK5ek8xnC
gAi0S0F8XLS9I9wfp+na8BsTf6s2UtOx39+KGyetOs+7gCS1kvxPLrkWRN/LAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUQtLD8/Ve1nc4JB25elGiVgRODXwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt4jANBgkqhkiG9w0BAQsFAAOCAQEAh2Io
12/ci+PihlchewbKmT4Rf7aR+dATd/8/mhLjujcl+4Z2urWVX8Eg/yRBv3YBMkXL
ZuqhnBRD7vsM1pnqMzpoBG4PxBbm2E7ib1nYKVaqVkmtNs1zwNU+IuTDt9TmWfft
au1kokUMRJT63+yVtA+GBx4laHoRKFJmbEaEeKr2jNr5hL5AnGoNl2xF8itwFh3S
8GAUk+LEsAG9nGQ44H+Z7dEk2qkNFUy34qaH4swXMrlCYfRyLdOisQRv7t0VD3a7
el7BzhSnEVtB13I1iFfNMukDxBNCXHdF6roXEKh4rGBOozq/ysFoj3itFbffwDYQ
DjHLDpS9bXM11/c1LQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:53 2026 by rpki-client