Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146243.roa
File: AS146243.roa (raw, json)
Hash identifier: 4r3dd4Otrt+6nOZqkks9iRghm0ZefwGOO8bUGfQYw0U=
Subject key identifier: D5:96:EA:A1:D2:B3:42:43:8A:67:78:9E:02:5F:71:6D:8C:75:02:61
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 63E3668088B69ABF868CB4595990599A73185F06
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146243.roa
Signing time: Mon 25 May 2026 02:22:42 +0000
ROA not before: Mon 25 May 2026 02:17:42 +0000
ROA not after: Mon 24 May 2027 02:22:42 +0000
asID: 146243
IP address blocks: 240a:ae09::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e3:66:80:88:b6:9a:bf:86:8c:b4:59:59:90:59:9a:73:18:5f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:42 2026 GMT
Not After : May 24 02:22:42 2027 GMT
Subject: CN=D596EAA1D2B342438A67789E025F716D8C750261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:74:06:95:e2:b2:30:e5:98:98:7a:72:f3:
cf:b3:d5:cb:89:be:6e:2c:03:c3:96:7a:34:cc:d0:
79:63:6b:4a:ab:6a:28:00:a2:79:da:43:d8:04:a2:
6d:ce:b9:b0:4a:27:06:e5:aa:4c:39:5a:e1:23:80:
27:71:72:17:6b:ea:2c:1c:99:cf:d8:c4:62:fb:06:
f7:9b:c5:5a:94:03:75:27:07:b2:6a:b1:14:30:5e:
f7:74:af:8e:5f:3a:0c:56:1d:02:18:e9:55:1e:f7:
0b:a4:f9:77:25:89:8b:66:44:c7:d2:94:61:cc:84:
07:c4:45:d8:10:79:a3:5a:50:1e:03:93:9c:dd:cd:
2f:c2:04:f0:0f:d5:6f:fc:12:ff:b7:61:cb:c5:55:
17:b7:20:c2:a3:c2:e4:87:19:fe:4b:4a:d2:86:9f:
03:6c:8c:12:05:5e:8f:23:ca:18:d8:1a:1b:7a:04:
f0:f1:78:81:a7:d4:ec:d6:22:e7:38:4c:4c:b5:f2:
f8:74:3b:45:7c:39:8b:48:1d:6f:f4:d8:f4:bb:d5:
b3:1d:4f:46:d4:28:69:d5:11:48:b8:67:f0:ef:75:
0f:08:9e:17:b7:52:b6:31:3b:e8:5a:59:74:4e:68:
f5:2b:4e:5e:51:b4:e1:a4:61:91:8b:0d:5e:2b:58:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:96:EA:A1:D2:B3:42:43:8A:67:78:9E:02:5F:71:6D:8C:75:02:61
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146243.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae09::/32
Signature Algorithm: sha256WithRSAEncryption
0d:36:f2:40:ee:f2:21:44:c2:69:88:d3:bb:5e:b5:57:a8:27:
b0:95:9d:f2:18:50:dd:ba:2b:52:f8:8d:7e:7c:5f:96:4c:df:
47:07:8c:e6:e2:f1:7b:8e:48:d7:e3:3f:83:ca:62:eb:c7:2a:
47:67:a1:ad:04:4a:0c:6a:20:7a:ac:03:dc:33:49:74:29:0b:
10:ab:6e:b1:de:ba:2f:ac:92:6d:db:94:4b:65:d7:c9:68:d1:
7c:86:35:03:0b:d3:c1:9a:5b:51:c1:05:b0:99:d7:96:ca:5c:
cb:f3:35:7a:53:e0:1d:35:dc:b4:60:be:47:3e:76:ae:7f:f7:
ce:0c:ef:ec:41:85:0f:6a:9a:15:0c:92:1c:bc:56:48:11:6c:
83:bd:0b:9b:67:88:a1:de:38:af:56:69:e4:5b:0a:e8:65:48:
21:f6:93:eb:7f:d4:f7:6d:89:83:3b:29:76:50:da:71:2d:ec:
d8:7b:d4:b4:5e:12:db:98:d1:c8:28:11:e5:12:22:6d:d6:da:
e9:f8:54:14:eb:8f:00:ce:68:5f:f0:50:87:f2:a0:17:f8:d5:
f5:a9:6e:5a:2e:0d:34:c3:d9:11:31:b7:08:0d:86:1f:40:9f:
3c:93:b2:08:af:46:0f:4f:f8:a4:35:d2:42:b6:55:a2:2a:34:
16:ad:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:29 2026 by rpki-client