Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146225.roa
File: AS146225.roa (raw, json)
Hash identifier: ooBEvEpM8lFvLCseBARCqV7MiZ+3Ng1mLqTz6tRGC/E=
Subject key identifier: 8F:F5:1C:4B:CD:05:C4:93:CE:EE:81:6F:90:D4:1F:F8:AB:A3:05:A3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B7F1B1576629DEB4445C319C6562FE2B702FA08
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146225.roa
Signing time: Tue 26 May 2026 02:35:17 +0000
ROA not before: Tue 26 May 2026 02:30:17 +0000
ROA not after: Tue 25 May 2027 02:35:17 +0000
asID: 146225
IP address blocks: 240a:adf7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7f:1b:15:76:62:9d:eb:44:45:c3:19:c6:56:2f:e2:b7:02:fa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:17 2026 GMT
Not After : May 25 02:35:17 2027 GMT
Subject: CN=8FF51C4BCD05C493CEEE816F90D41FF8ABA305A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b1:74:b1:58:0f:8b:1a:00:31:7a:d0:76:9d:
7c:4f:8a:7f:ef:c9:fd:e1:87:cf:42:2c:e9:84:f2:
88:3d:3f:6e:51:f3:74:25:80:02:27:ac:3f:b7:cf:
88:be:95:56:94:25:78:31:0b:52:b0:7d:75:54:b2:
49:04:17:10:e6:eb:02:b4:70:5d:c1:38:10:1c:91:
7f:db:de:58:94:00:0c:da:e9:eb:f8:75:e2:7f:46:
c6:5c:77:e8:45:26:b1:b3:aa:88:82:cf:1d:22:84:
10:3f:61:ca:3a:9b:35:8c:50:fe:18:7c:e2:59:2c:
15:7e:1b:51:a1:13:5b:68:47:e9:df:b3:76:0b:c5:
7e:ce:c8:4c:7a:0c:bf:52:9a:0b:e6:6d:e5:56:25:
61:87:00:73:94:a4:06:14:74:c2:da:66:fe:ec:be:
0e:e2:51:f8:29:77:ca:f1:98:2a:68:97:fe:3b:27:
9f:fb:aa:9c:aa:1c:d1:41:7d:ec:7b:8d:d2:b0:4c:
ac:21:29:35:3a:2b:ba:d0:0d:27:d9:1a:dd:ad:96:
c5:d0:fe:35:f0:69:1b:6d:f5:58:8d:8d:66:dc:e3:
93:b2:07:1e:47:b1:e0:98:1a:4f:00:19:23:44:03:
c8:3f:fe:78:07:e2:fd:a6:2f:08:4c:3f:e2:73:0a:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F5:1C:4B:CD:05:C4:93:CE:EE:81:6F:90:D4:1F:F8:AB:A3:05:A3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146225.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adf7::/32
Signature Algorithm: sha256WithRSAEncryption
96:0f:4d:62:f3:0d:dd:45:a7:96:f7:45:d1:59:46:a6:b0:7e:
6a:ad:b5:d2:18:6a:20:b6:31:b2:97:a8:16:5d:ed:53:06:a8:
c7:d7:24:84:88:61:99:e3:45:93:9b:00:1b:0d:00:a2:4a:d5:
6e:ab:3d:3a:88:3e:83:77:ca:b9:09:9a:1f:45:84:1a:27:fe:
d5:8e:f6:ab:9a:1b:6e:35:58:8e:3c:67:33:27:5a:cd:8a:f8:
15:14:b8:aa:26:d4:1d:22:09:70:f9:6c:59:ea:99:39:58:41:
66:55:c7:dc:d5:ee:02:93:72:1f:55:71:31:17:15:2e:4a:9f:
9f:89:10:94:5c:2d:7f:20:bc:0d:bc:2b:70:23:a9:9d:2d:18:
29:e7:32:84:50:e5:83:4e:8e:78:96:f5:0d:e8:d8:06:50:23:
db:b2:78:d9:82:3f:6e:42:38:0f:35:ab:6d:b4:9a:91:91:29:
c0:c9:22:b9:db:7f:93:22:30:cf:3b:1b:12:a3:75:cc:df:05:
47:b0:4c:21:fd:ac:79:1b:2b:d2:9a:48:5c:92:e4:79:6f:c0:
02:eb:ea:17:3f:1a:8a:92:16:87:9a:a5:f1:f5:1c:ca:f2:3e:
f5:94:ed:fd:4b:a1:df:b8:be:b6:ec:cc:f9:34:ae:57:ca:38:
79:84:c0:ab
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUS38bFXZinetERcMZxlYv4rcC+ggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMTdaFw0yNzA1MjUwMjM1MTdaMDMxMTAvBgNV
BAMTKDhGRjUxQzRCQ0QwNUM0OTNDRUVFODE2RjkwRDQxRkY4QUJBMzA1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNsXSxWA+LGgAxetB2nXxPin/v
yf3hh89CLOmE8og9P25R83QlgAInrD+3z4i+lVaUJXgxC1KwfXVUskkEFxDm6wK0
cF3BOBAckX/b3liUAAza6ev4deJ/RsZcd+hFJrGzqoiCzx0ihBA/Yco6mzWMUP4Y
fOJZLBV+G1GhE1toR+nfs3YLxX7OyEx6DL9SmgvmbeVWJWGHAHOUpAYUdMLaZv7s
vg7iUfgpd8rxmCpol/47J5/7qpyqHNFBfex7jdKwTKwhKTU6K7rQDSfZGt2tlsXQ
/jXwaRtt9ViNjWbc45OyBx5HseCYGk8AGSNEA8g//ngH4v2mLwhMP+JzCsHLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUj/UcS80FxJPO7oFvkNQf+KujBaMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt9zANBgkqhkiG9w0BAQsFAAOCAQEAlg9N
YvMN3UWnlvdF0VlGprB+aq210hhqILYxspeoFl3tUwaox9ckhIhhmeNFk5sAGw0A
okrVbqs9Oog+g3fKuQmaH0WEGif+1Y72q5obbjVYjjxnMydazYr4FRS4qibUHSIJ
cPlsWeqZOVhBZlXH3NXuApNyH1VxMRcVLkqfn4kQlFwtfyC8DbwrcCOpnS0YKecy
hFDlg06OeJb1DejYBlAj27J42YI/bkI4DzWrbbSakZEpwMkiudt/kyIwzzsbEqN1
zN8FR7BMIf2seRsr0ppIXJLkeW/AAuvqFz8aipIWh5ql8fUcyvI+9ZTt/Uuh37i+
tuzM+TSuV8o4eYTAqw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:41 2026 by rpki-client