Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146230.roa
File: AS146230.roa (raw, json)
Hash identifier: RNeJMHAOmv9VXvJuAIXy6aTX8GZThDWVkXMR0Cf01ok=
Subject key identifier: A4:B2:CF:14:DF:0C:1E:FF:91:B4:8A:BC:A6:7D:C7:F3:22:C8:E7:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 21036ACF06172FEF3B093F152026F79EA6955961
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146230.roa
Signing time: Tue 26 May 2026 08:53:03 +0000
ROA not before: Tue 26 May 2026 08:48:03 +0000
ROA not after: Tue 25 May 2027 08:53:03 +0000
asID: 146230
IP address blocks: 240a:adfc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:03:6a:cf:06:17:2f:ef:3b:09:3f:15:20:26:f7:9e:a6:95:59:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:03 2026 GMT
Not After : May 25 08:53:03 2027 GMT
Subject: CN=A4B2CF14DF0C1EFF91B48ABCA67DC7F322C8E7CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:7f:e3:78:1b:39:bd:c5:86:a1:72:ad:2c:
de:c1:b2:ae:d2:d9:42:c8:46:56:95:03:9d:6a:c9:
60:8e:ab:11:d1:b2:11:d7:a0:d2:ea:62:f0:62:d0:
21:71:21:26:95:0a:56:cc:b0:cb:75:44:10:e3:fc:
07:08:93:70:00:d1:e8:a7:30:4d:b2:fe:38:0e:7c:
d7:9b:d0:d5:67:e8:08:c0:6d:43:9d:d4:eb:81:3d:
e7:c0:9e:c4:dc:20:0a:68:70:e6:c6:b9:3a:4b:0e:
33:1f:34:84:db:bf:09:4d:9e:aa:7c:6b:dc:41:db:
0c:e1:52:bf:c0:0f:e5:40:94:99:ec:1b:a9:78:64:
1e:2e:f9:41:01:87:44:01:ad:c7:64:e7:17:02:5c:
10:23:62:62:34:36:2f:ce:96:5e:6b:59:f8:a5:b9:
dd:45:f4:97:c8:10:6a:cd:91:74:ad:93:ea:75:de:
be:a3:3a:84:6c:30:2e:56:43:aa:dd:91:d3:ac:90:
b1:2a:0d:56:6e:a7:ae:47:5a:3f:58:81:2f:e8:8f:
93:26:93:c7:aa:0c:42:fe:de:d2:a0:2e:22:a2:10:
42:6e:a1:a3:89:4d:12:bc:e7:5b:c5:2b:0f:65:1e:
b9:33:86:20:33:cc:3b:54:2a:65:cc:3a:15:8e:02:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:CF:14:DF:0C:1E:FF:91:B4:8A:BC:A6:7D:C7:F3:22:C8:E7:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adfc::/32
Signature Algorithm: sha256WithRSAEncryption
06:66:e2:34:cf:bd:f0:7d:72:51:3b:09:65:06:5f:cb:e6:59:
f3:2f:cb:1b:8c:08:a9:fb:ed:eb:cb:d9:bb:49:65:ad:07:f7:
58:39:e0:10:63:29:c5:aa:f8:6a:03:ae:92:83:16:d7:b4:d1:
f5:8e:e2:40:2d:ca:17:0c:04:75:b2:96:96:6b:43:d0:49:df:
84:d9:84:40:12:72:bf:32:f1:63:16:2e:cf:87:00:7c:b9:8e:
5b:d6:30:97:df:be:54:7b:14:01:a4:8a:18:70:e8:fe:4a:06:
56:79:6a:75:71:1d:55:27:7c:52:f4:f3:ff:4a:da:5d:8f:29:
30:18:f3:e1:9a:e9:61:bd:ad:c1:c4:0f:79:ed:2d:a8:0f:52:
27:64:95:92:ee:0a:82:22:94:58:6e:76:12:f3:2c:83:f4:d9:
76:6d:2d:61:1d:2b:f0:41:07:e2:01:90:3f:5c:1d:44:e3:09:
ef:57:69:76:8f:d0:a6:4d:29:2a:e1:15:1c:92:7a:7a:79:b6:
d8:f5:93:84:ef:7b:8f:a2:02:37:db:cb:eb:02:a6:98:d5:86:
ca:32:b4:df:b3:e3:3d:6f:39:12:c7:3b:ed:70:2d:7f:36:44:
b9:3f:1e:5f:8e:3f:5b:b6:6c:b7:7b:13:24:22:81:ea:7c:17:
38:c1:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:56 2026 by rpki-client