Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146218.roa
File: AS146218.roa (raw, json)
Hash identifier: 8t5gOr+glGr/bVGe4ln3Cy1R/Ac6HUH2JkNp3wH8zyk=
Subject key identifier: 4F:58:04:F0:66:12:78:47:07:40:03:48:C3:17:83:2E:8D:AB:EE:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4671046862C822109970659937B80431F1918987
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146218.roa
Signing time: Fri 22 May 2026 06:46:16 +0000
ROA not before: Fri 22 May 2026 06:41:16 +0000
ROA not after: Fri 21 May 2027 06:46:16 +0000
asID: 146218
IP address blocks: 240a:adf0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:71:04:68:62:c8:22:10:99:70:65:99:37:b8:04:31:f1:91:89:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:16 2026 GMT
Not After : May 21 06:46:16 2027 GMT
Subject: CN=4F5804F06612784707400348C317832E8DABEEE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:89:50:28:a2:db:70:3a:a2:39:29:93:ae:11:
7d:0c:47:89:dd:b3:cc:ee:7e:bc:3c:24:ee:c7:63:
dd:f1:9e:51:1d:aa:4e:1a:eb:ec:44:d5:ee:31:ab:
01:f3:f3:81:c5:ac:dd:38:b6:31:6a:74:e6:60:ec:
ea:22:7f:67:c2:1f:7a:a9:6e:9b:f8:a9:1f:f2:92:
2b:1c:c5:63:4b:e7:78:e1:22:31:74:10:32:0a:75:
18:c5:2e:eb:0f:17:d7:c4:70:0e:16:08:fa:24:ac:
39:39:31:0b:2d:ed:e3:9e:3b:d5:0e:97:af:6f:ee:
f3:29:8e:29:88:e1:7c:2d:a9:ca:4f:0f:ed:1f:c0:
46:62:4b:12:b3:1b:ef:57:94:93:d0:ef:ba:49:69:
eb:15:21:ec:44:23:af:c3:8d:f6:49:ef:dd:0f:d2:
0c:a1:b2:c0:b0:0b:45:bf:c8:26:cb:12:82:01:01:
e6:52:2e:71:8f:b0:06:0e:09:e0:58:1b:99:dd:81:
0f:bb:2a:ab:cc:f7:3f:ef:a4:16:c0:40:f8:fa:ee:
35:b9:f6:db:d6:ee:05:28:4b:c6:e1:20:90:89:1a:
33:ba:9b:3a:19:8f:e9:5a:10:49:c6:ac:fc:d4:d3:
65:3b:e4:9b:82:20:fd:0a:13:cc:76:80:47:2c:d9:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:04:F0:66:12:78:47:07:40:03:48:C3:17:83:2E:8D:AB:EE:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146218.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adf0::/32
Signature Algorithm: sha256WithRSAEncryption
02:3c:b2:63:13:b4:18:fc:02:c2:8a:45:5a:e9:aa:13:3d:0d:
b7:e6:c8:8c:29:ff:91:1d:d6:58:8b:9c:19:16:73:94:13:c3:
6b:47:00:be:77:bd:b5:09:ae:dd:5c:5d:4f:1c:6b:8b:5e:96:
f2:25:17:53:17:e4:03:62:df:d0:98:54:0f:50:22:09:60:b5:
a8:35:bf:85:d8:85:6c:5e:5d:8f:55:e8:98:a8:a6:f7:2f:0f:
db:5c:70:de:78:0d:f3:a8:cc:ea:3c:22:30:74:cd:67:bd:c7:
5a:5f:f2:ef:55:d5:42:89:44:5f:d9:bf:d8:2f:5e:f9:d0:25:
68:d4:e3:11:78:c3:02:7f:25:6e:6c:b5:20:46:d8:29:1a:e3:
c2:22:c6:04:2b:3e:c5:47:f6:4b:97:0c:b0:f8:1d:03:0c:b8:
7a:52:b7:64:1f:cf:cc:fc:aa:da:f9:0d:8b:f5:4b:21:01:81:
b0:4e:d5:03:5d:7c:97:24:45:89:72:ec:23:8c:23:87:88:86:
67:c1:f1:c9:29:2f:e0:af:43:2c:fc:15:bf:1e:38:d9:74:ab:
71:60:20:1b:bf:04:71:df:c0:09:3e:5d:97:35:7f:8b:50:73:
aa:b1:c1:98:a9:8f:aa:c7:68:a6:f2:83:02:6b:ac:52:5a:b4:
20:c7:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:07 2026 by rpki-client