Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146252.roa
File: AS146252.roa (raw, json)
Hash identifier: x1gXJ9Iewcl32CL2x0WWDa3qpuuMkTcT/m92F4lTrF0=
Subject key identifier: 11:DA:96:1E:92:16:A5:B6:87:BD:82:E3:37:B0:40:F2:93:1B:F4:50
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6725591123AB3AE5C1BB9DAFE968D5AB5B327152
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146252.roa
Signing time: Tue 26 May 2026 06:12:42 +0000
ROA not before: Tue 26 May 2026 06:07:42 +0000
ROA not after: Tue 25 May 2027 06:12:42 +0000
asID: 146252
IP address blocks: 240a:ae12::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:25:59:11:23:ab:3a:e5:c1:bb:9d:af:e9:68:d5:ab:5b:32:71:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:42 2026 GMT
Not After : May 25 06:12:42 2027 GMT
Subject: CN=11DA961E9216A5B687BD82E337B040F2931BF450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2d:2c:e5:36:0d:19:62:9a:56:a2:9e:67:00:
05:74:35:4c:69:54:a4:a9:b0:5a:99:09:57:7f:9a:
30:a9:dc:12:e7:9d:35:96:57:4d:35:a5:ad:6f:1e:
e8:1b:1f:de:2a:75:75:7d:58:87:f9:38:35:89:81:
4a:3c:14:24:c9:78:6f:8d:f1:c4:cc:4a:ee:78:c7:
f2:2c:ad:40:82:65:bf:5e:30:3c:13:53:77:1f:5a:
5c:ac:f7:cb:97:c4:13:3a:26:88:02:b4:c7:b0:d2:
69:cf:1c:ed:a7:b4:3e:37:b0:8f:ab:c5:7c:28:37:
93:87:98:cd:0b:51:d3:41:df:e1:0a:71:b4:89:3e:
29:ac:b1:d4:d7:d3:c2:d0:1c:b0:de:08:8a:d3:d0:
65:c8:ad:43:67:26:5c:0e:c8:39:a2:ec:65:55:2b:
a3:86:25:e2:b1:bb:af:1c:35:2f:b9:3f:1a:b0:86:
f2:9d:98:63:ca:47:3a:2c:fe:1f:dd:c4:99:4b:04:
ec:c6:42:30:f4:39:86:ce:c7:4b:05:d9:fd:b9:c1:
8b:56:c0:38:68:1b:fc:28:de:ba:88:96:d8:cb:15:
15:fe:81:64:d8:2c:f9:cd:4a:b5:da:85:8c:42:8e:
12:d0:8b:c0:db:a9:a9:77:2f:f9:5e:da:95:71:be:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:96:1E:92:16:A5:B6:87:BD:82:E3:37:B0:40:F2:93:1B:F4:50
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae12::/32
Signature Algorithm: sha256WithRSAEncryption
19:f0:44:40:15:f9:c5:bc:32:d6:fb:5e:50:19:e7:3b:1a:d5:
70:fc:96:af:ea:6f:5d:99:00:94:94:68:55:60:c0:c5:51:76:
13:92:6a:57:4e:60:7c:92:74:63:5f:40:02:44:e3:ba:0e:04:
31:19:2f:16:10:a7:58:c1:24:a9:a4:06:a8:3a:93:d3:41:93:
81:fa:d7:c8:34:7d:bb:fc:d4:81:cf:37:f9:6a:1d:99:0b:20:
3d:99:46:23:49:bd:ce:b0:8a:1b:44:81:89:5e:28:e9:d8:1c:
e3:93:e5:3c:3a:82:35:70:90:b1:95:53:ff:fe:f5:d2:d5:fa:
da:8a:b0:db:65:fc:d4:66:29:2f:98:29:80:dc:d9:dc:38:e0:
d3:66:d5:3b:d7:fe:3e:50:f7:1a:1e:8c:aa:61:91:fc:82:1f:
ce:06:2a:87:a1:8b:b0:89:43:44:61:42:35:93:15:2e:80:07:
40:cd:7c:42:4e:d9:cc:78:a2:6a:7e:04:4d:91:dc:35:f2:ba:
93:ba:ea:c9:18:34:ec:83:b7:1f:3a:5e:94:5d:97:25:f0:60:
78:ab:a8:a1:6c:bf:8c:f5:f0:97:b6:43:0d:ec:77:0e:ac:21:
21:67:b6:fe:db:19:c8:e5:59:a3:3b:4e:ed:87:95:71:ff:36:
48:56:92:41
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZyVZESOrOuXBu52v6WjVq1sycVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NDJaFw0yNzA1MjUwNjEyNDJaMDMxMTAvBgNV
BAMTKDExREE5NjFFOTIxNkE1QjY4N0JEODJFMzM3QjA0MEYyOTMxQkY0NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqLSzlNg0ZYppWop5nAAV0NUxp
VKSpsFqZCVd/mjCp3BLnnTWWV001pa1vHugbH94qdXV9WIf5ODWJgUo8FCTJeG+N
8cTMSu54x/IsrUCCZb9eMDwTU3cfWlys98uXxBM6JogCtMew0mnPHO2ntD43sI+r
xXwoN5OHmM0LUdNB3+EKcbSJPimssdTX08LQHLDeCIrT0GXIrUNnJlwOyDmi7GVV
K6OGJeKxu68cNS+5PxqwhvKdmGPKRzos/h/dxJlLBOzGQjD0OYbOx0sF2f25wYtW
wDhoG/wo3rqIltjLFRX+gWTYLPnNSrXahYxCjhLQi8Dbqal3L/le2pVxvl6JAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUEdqWHpIWpbaHvYLjN7BA8pMb9FAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquEjANBgkqhkiG9w0BAQsFAAOCAQEAGfBE
QBX5xbwy1vteUBnnOxrVcPyWr+pvXZkAlJRoVWDAxVF2E5JqV05gfJJ0Y19AAkTj
ug4EMRkvFhCnWMEkqaQGqDqT00GTgfrXyDR9u/zUgc83+WodmQsgPZlGI0m9zrCK
G0SBiV4o6dgc45PlPDqCNXCQsZVT//710tX62oqw22X81GYpL5gpgNzZ3Djg02bV
O9f+PlD3Gh6MqmGR/IIfzgYqh6GLsIlDRGFCNZMVLoAHQM18Qk7ZzHiian4ETZHc
NfK6k7rqyRg07IO3HzpelF2XJfBgeKuooWy/jPXwl7ZDDex3DqwhIWe2/tsZyOVZ
oztO7YeVcf82SFaSQQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:27 2026 by rpki-client