Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146253.roa
File: AS146253.roa (raw, json)
Hash identifier: IU4OcOVQ1x7YkwiuQXrtzIIKHi05fjrxRWvV7luxrbk=
Subject key identifier: 3B:C2:CA:E7:E6:69:BD:65:A2:36:A3:20:1F:52:A2:73:10:21:CC:E8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B85D9132CD181519DF65D50D5E68FCDE654E135
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146253.roa
Signing time: Fri 22 May 2026 06:46:04 +0000
ROA not before: Fri 22 May 2026 06:41:04 +0000
ROA not after: Fri 21 May 2027 06:46:04 +0000
asID: 146253
IP address blocks: 240a:ae13::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:85:d9:13:2c:d1:81:51:9d:f6:5d:50:d5:e6:8f:cd:e6:54:e1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:04 2026 GMT
Not After : May 21 06:46:04 2027 GMT
Subject: CN=3BC2CAE7E669BD65A236A3201F52A2731021CCE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:25:08:63:b6:63:82:16:72:e3:35:15:0e:
85:7a:fb:a0:4a:5e:48:8a:fc:3d:a0:02:83:87:95:
11:6a:6a:e6:26:93:7f:2f:af:6e:52:78:91:bc:67:
e4:b6:62:b8:8d:02:a6:6a:62:92:6c:62:f8:22:c1:
c5:58:5e:f6:c0:ba:76:e6:78:0e:22:ca:4d:11:bc:
80:9a:03:b7:9c:4c:be:e1:69:de:cd:df:32:3a:f3:
5b:36:73:d4:5d:9b:c4:a5:bf:53:ae:cf:d8:d4:c1:
57:93:c4:e7:c9:28:d4:88:91:1e:24:de:b8:a8:da:
70:eb:68:73:24:fa:ae:4b:60:c5:ec:a2:0a:c8:53:
cb:2f:1b:a9:b3:ba:75:71:f0:94:2f:8a:19:00:e3:
a9:6d:57:21:87:c3:e0:df:27:05:a6:ab:a0:62:75:
ed:4e:fa:0f:53:1b:11:0b:16:c2:a9:63:d6:8f:0e:
19:53:a2:4a:1f:a9:c4:99:96:9a:cd:67:8a:38:7e:
91:30:a3:9b:3e:c4:d2:69:eb:5e:81:08:f1:76:52:
60:5c:43:0d:43:e9:95:17:83:fc:73:76:5b:b0:0f:
5b:18:a3:67:3f:66:0f:4f:24:8c:bb:98:c9:81:fb:
35:85:2c:5b:4f:13:65:ae:a1:5f:23:b0:ac:2e:10:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C2:CA:E7:E6:69:BD:65:A2:36:A3:20:1F:52:A2:73:10:21:CC:E8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146253.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae13::/32
Signature Algorithm: sha256WithRSAEncryption
1d:de:a1:8b:96:6a:20:54:68:f2:eb:b1:70:70:8c:ad:04:b2:
48:87:cb:24:cb:fb:fe:84:f5:89:fd:51:84:a2:c9:c0:47:a4:
74:a3:ea:04:09:87:96:0f:c9:2e:f8:cf:44:ef:56:44:db:bb:
ac:85:f5:18:78:ec:f4:79:2b:55:ab:08:99:35:b5:61:80:b4:
4f:20:2e:73:f8:fe:29:ca:57:31:db:7e:23:a5:27:52:71:95:
08:94:01:1c:6b:1d:fc:08:e1:be:13:a1:d0:50:7c:cb:18:8e:
ce:ad:a2:66:62:49:a0:b8:4a:c5:92:80:4d:70:94:9b:bf:1f:
aa:e0:bd:61:c7:ce:07:fb:23:5c:33:a6:12:1d:6c:62:02:50:
16:75:c0:63:78:85:2e:55:92:6f:89:66:83:2d:58:c5:fd:5e:
f1:bf:a4:98:06:e2:23:98:4c:be:55:96:c6:9b:a7:d0:18:86:
60:1d:76:23:c9:5d:a1:82:9f:9f:38:2c:1a:b9:df:e4:a2:f1:
d5:13:25:2f:01:57:15:63:d0:89:6f:ff:52:28:0d:fd:65:a1:
29:6d:73:93:fb:31:af:7a:3d:cd:79:4f:72:03:4a:d5:fb:de:
51:02:18:4c:a3:a5:52:1b:4d:9a:b6:0d:49:45:0c:0c:d6:e6:
c0:40:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client