Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146232.roa
File: AS146232.roa (raw, json)
Hash identifier: kdjn/XjSR9of/50nTGaBFw4ccRnIbocZg/rZlljBWdY=
Subject key identifier: 53:54:82:6B:D2:64:0B:00:3F:01:CA:D0:EE:62:D6:C3:CC:55:6C:18
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 324B62942135EA4CFCBF3C2089E1137BA9477C2B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146232.roa
Signing time: Tue 26 May 2026 06:30:27 +0000
ROA not before: Tue 26 May 2026 06:25:27 +0000
ROA not after: Tue 25 May 2027 06:30:27 +0000
asID: 146232
IP address blocks: 240a:adfe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4b:62:94:21:35:ea:4c:fc:bf:3c:20:89:e1:13:7b:a9:47:7c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:27 2026 GMT
Not After : May 25 06:30:27 2027 GMT
Subject: CN=5354826BD2640B003F01CAD0EE62D6C3CC556C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:95:88:75:94:fd:23:ad:0c:2f:3a:0d:b7:
ce:1f:3a:4f:e2:8d:9b:bc:2a:2f:40:09:16:75:9f:
1e:ba:52:e2:be:63:5e:d4:72:82:e1:a1:a8:0d:8f:
81:c8:2b:9b:e4:1d:f8:14:55:00:6d:0d:f3:b7:d6:
bc:b5:75:54:2d:59:46:5a:44:2a:3d:5f:8b:1a:85:
06:e4:42:a2:95:19:e9:44:c6:1e:ef:a5:73:dc:75:
9e:e9:4c:93:a5:55:a4:81:39:d3:21:66:ce:5b:e9:
e8:5c:27:c7:b9:f9:24:8c:44:78:fa:35:9d:86:1f:
f9:fd:db:66:2a:a0:01:6e:1c:e4:cb:d7:0b:2a:a9:
79:66:40:ea:35:79:80:ce:e4:6a:ec:2d:3f:8b:5f:
d9:dc:5f:4c:1b:a0:34:f6:d8:20:c4:e1:e4:f1:fe:
62:59:2b:ce:86:cd:1e:86:c8:11:16:ee:c4:bd:a2:
6c:db:4a:2a:39:0a:0c:eb:60:c9:e8:0c:0e:fe:e5:
35:e9:00:57:e9:f4:60:93:7f:d4:d6:71:c3:b0:1c:
c4:58:83:9a:ed:90:36:cf:7e:3b:06:5d:79:12:b8:
ce:38:af:07:50:28:3a:99:d0:cc:f6:44:81:c1:7b:
17:46:dc:09:47:40:ac:58:92:95:2c:6a:8d:e8:30:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:54:82:6B:D2:64:0B:00:3F:01:CA:D0:EE:62:D6:C3:CC:55:6C:18
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adfe::/32
Signature Algorithm: sha256WithRSAEncryption
41:37:7a:dd:8a:9c:3b:e2:6d:12:1a:16:ad:ae:cd:24:05:7e:
56:9d:1a:a9:48:47:57:b5:ab:40:a3:80:d3:bf:e1:99:30:26:
e1:41:ed:fa:9b:13:59:1e:c6:b5:00:78:22:1e:8c:47:a6:b5:
9a:0f:f2:aa:20:54:56:20:cc:74:99:11:00:24:b0:ba:b4:86:
16:a1:7f:44:26:d6:c3:c9:88:84:07:8d:51:b5:58:0a:69:c7:
0c:38:b6:b6:65:4f:f4:49:14:b3:15:64:88:d0:ed:0d:74:e8:
7a:82:3d:b4:53:7d:c5:27:8f:6e:76:4a:50:17:d9:f3:74:cd:
ed:0b:00:d9:fd:76:9a:97:0f:54:a4:f3:a3:a5:39:ab:9a:2e:
e6:8f:18:0a:08:e3:c9:de:a8:ae:de:93:39:b3:93:2c:e5:ba:
94:84:ae:89:89:44:e4:85:ee:58:78:3e:d9:21:fe:08:5b:e0:
ff:d5:d7:f4:99:f8:f0:36:94:b8:95:a9:ea:80:47:4c:f6:de:
5a:1c:f2:fe:4e:92:ec:03:ee:7c:f7:9e:d5:56:06:21:44:1d:
ab:ae:75:d7:a5:c7:1c:46:14:0d:ae:5a:95:13:6a:d4:ad:77:
24:60:9b:dd:ec:5e:53:66:35:4a:f9:9b:04:d8:1f:e0:82:0e:
0d:90:66:a6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMktilCE16kz8vzwgieETe6lHfCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1MjdaFw0yNzA1MjUwNjMwMjdaMDMxMTAvBgNV
BAMTKDUzNTQ4MjZCRDI2NDBCMDAzRjAxQ0FEMEVFNjJENkMzQ0M1NTZDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfXJWIdZT9I60MLzoNt84fOk/i
jZu8Ki9ACRZ1nx66UuK+Y17UcoLhoagNj4HIK5vkHfgUVQBtDfO31ry1dVQtWUZa
RCo9X4sahQbkQqKVGelExh7vpXPcdZ7pTJOlVaSBOdMhZs5b6ehcJ8e5+SSMRHj6
NZ2GH/n922YqoAFuHOTL1wsqqXlmQOo1eYDO5GrsLT+LX9ncX0wboDT22CDE4eTx
/mJZK86GzR6GyBEW7sS9omzbSio5CgzrYMnoDA7+5TXpAFfp9GCTf9TWccOwHMRY
g5rtkDbPfjsGXXkSuM44rwdQKDqZ0Mz2RIHBexdG3AlHQKxYkpUsao3oMP//AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUU1SCa9JkCwA/AcrQ7mLWw8xVbBgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt/jANBgkqhkiG9w0BAQsFAAOCAQEAQTd6
3YqcO+JtEhoWra7NJAV+Vp0aqUhHV7WrQKOA07/hmTAm4UHt+psTWR7GtQB4Ih6M
R6a1mg/yqiBUViDMdJkRACSwurSGFqF/RCbWw8mIhAeNUbVYCmnHDDi2tmVP9EkU
sxVkiNDtDXToeoI9tFN9xSePbnZKUBfZ83TN7QsA2f12mpcPVKTzo6U5q5ou5o8Y
Cgjjyd6ort6TObOTLOW6lISuiYlE5IXuWHg+2SH+CFvg/9XX9Jn48DaUuJWp6oBH
TPbeWhzy/k6S7APufPee1VYGIUQdq65116XHHEYUDa5alRNq1K13JGCb3exeU2Y1
SvmbBNgf4IIODZBmpg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:54 2026 by rpki-client