Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146205.roa
File: AS146205.roa (raw, json)
Hash identifier: YAL2XkWczdLzmTYdTeB/CtOPszoqXru6yeT4hRZOsz8=
Subject key identifier: BE:6D:DD:FE:4D:51:30:5B:FA:42:A3:D4:1E:BB:6A:80:58:31:31:6C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 59D252EBE9C6ECA164F67B32EDFBB0C9369E1326
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146205.roa
Signing time: Fri 22 May 2026 04:08:23 +0000
ROA not before: Fri 22 May 2026 04:03:23 +0000
ROA not after: Fri 21 May 2027 04:08:23 +0000
asID: 146205
IP address blocks: 240a:ade3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d2:52:eb:e9:c6:ec:a1:64:f6:7b:32:ed:fb:b0:c9:36:9e:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:23 2026 GMT
Not After : May 21 04:08:23 2027 GMT
Subject: CN=BE6DDDFE4D51305BFA42A3D41EBB6A805831316C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:a2:21:fc:81:34:76:a2:78:7f:5b:86:7c:
43:48:48:3e:75:64:70:9a:7c:8b:26:99:41:60:b7:
81:ce:6e:29:88:f2:ce:1f:74:35:8c:65:09:d1:5f:
78:36:a4:3a:45:51:ce:85:22:28:21:03:fe:dd:4b:
10:1e:5c:99:79:0d:af:04:3e:84:2f:a3:13:e1:62:
6b:fe:8b:ae:6f:77:86:a7:9f:98:50:dc:48:10:16:
20:be:04:b4:5d:70:8f:15:d3:b0:6f:aa:6c:d5:6f:
25:2a:be:ca:32:a1:52:66:ea:5c:2c:81:ff:f3:ea:
d9:46:d5:8e:93:73:7b:25:12:4d:e8:63:7b:13:db:
ee:c3:64:83:38:54:ac:74:cc:08:82:85:4b:e3:6e:
b6:a0:26:a9:28:50:8d:98:e7:61:e8:7f:53:9b:9e:
d9:54:fb:ae:01:5d:b3:5c:7a:fa:aa:7e:1a:6c:27:
f0:c6:99:46:db:22:85:df:f9:13:ff:5b:64:64:78:
55:9b:85:72:b3:81:3c:9f:c6:24:29:54:7b:1d:6b:
3c:49:54:dd:d3:aa:c7:8e:82:3c:5d:8d:b1:0b:e5:
00:f5:a3:87:ed:69:7b:e9:4e:41:d6:2b:90:69:f4:
e2:74:67:2e:44:05:0a:2b:b8:e4:86:e0:88:3a:a1:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:DD:FE:4D:51:30:5B:FA:42:A3:D4:1E:BB:6A:80:58:31:31:6C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146205.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ade3::/32
Signature Algorithm: sha256WithRSAEncryption
72:e8:7e:42:b0:87:17:8a:c0:f7:b9:a6:e4:2a:f9:66:40:f8:
0f:51:aa:c2:9d:46:38:6b:56:54:7e:23:b6:43:22:ee:f6:84:
76:2b:b4:66:e3:65:42:aa:f8:c0:1a:85:f7:31:81:4b:df:3b:
b8:34:c2:28:62:e8:70:33:48:2c:eb:3b:f9:67:73:2e:31:8d:
dd:32:77:41:c9:f9:3f:a7:68:d5:50:5e:41:01:93:e2:96:a4:
14:25:ce:f8:7d:75:26:12:ed:02:26:c2:af:d1:b4:95:bd:48:
83:1d:c4:53:58:9c:05:27:a2:9a:de:94:3b:49:30:bf:b6:e8:
99:a8:8a:88:b5:1c:96:50:ee:9a:7a:dc:99:5a:ed:10:0c:40:
71:88:e6:8f:20:bc:0a:22:81:9a:3d:f7:24:5b:e7:97:89:dd:
ea:d1:83:68:27:1a:29:6f:29:d8:39:c1:ff:a0:c5:d6:c8:be:
bf:77:4a:68:5a:a9:72:f3:af:da:63:db:7e:c4:8e:85:b0:22:
a0:d8:ed:44:ee:53:76:8b:ed:c5:10:b7:67:f0:26:0f:95:e7:
5f:6e:13:b0:d6:04:92:4c:63:54:2a:dc:63:92:77:18:c3:59:
64:15:f1:19:ea:48:87:6d:ae:ab:72:df:9d:bb:d4:f6:ed:ac:
1d:96:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client