Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146265.roa
File: AS146265.roa (raw, json)
Hash identifier: CYaZoSVJ/P37b9hsbwHCtUSycuFO4h5rGQCN1AtZsmw=
Subject key identifier: 95:0F:B7:B5:8A:5B:B4:B7:05:17:CB:73:C8:20:3C:35:E9:F3:2A:76
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 64545D5B3E5BA1AADD1082D554EA45B17F69AE6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146265.roa
Signing time: Fri 22 May 2026 07:24:48 +0000
ROA not before: Fri 22 May 2026 07:19:48 +0000
ROA not after: Fri 21 May 2027 07:24:48 +0000
asID: 146265
IP address blocks: 240a:ae1f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:54:5d:5b:3e:5b:a1:aa:dd:10:82:d5:54:ea:45:b1:7f:69:ae:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:48 2026 GMT
Not After : May 21 07:24:48 2027 GMT
Subject: CN=950FB7B58A5BB4B70517CB73C8203C35E9F32A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:d5:91:14:ef:95:ec:dd:af:91:53:fd:50:
a2:b9:97:cd:3e:9a:00:f4:67:bc:4d:5e:2e:b0:9a:
ab:50:79:b4:9e:68:31:a4:92:c4:3e:f9:7a:15:fc:
05:ff:9a:bd:8e:e8:01:25:19:da:ec:1d:dd:b7:3e:
21:17:e7:c3:8b:54:64:92:00:f7:35:dd:b8:fd:62:
38:b2:60:51:8e:1d:49:7d:4d:39:40:b4:41:10:42:
a1:66:44:0d:ff:73:44:84:44:d5:2b:3b:37:91:46:
87:40:e6:65:c5:87:3a:b0:d4:ea:74:fa:be:01:ec:
a1:b1:87:1b:2a:b9:75:81:ef:28:0c:58:39:a8:41:
40:f4:e1:8f:4c:75:2a:9d:6f:95:02:b0:af:60:ca:
3f:0b:41:c4:cd:3f:e8:f8:c2:a1:b4:8f:3e:79:69:
4f:e3:e2:6b:54:c9:20:2c:8d:eb:49:ca:0c:ff:32:
ea:9e:08:b3:88:6e:6d:37:e0:1a:94:53:9f:75:b1:
c9:a9:61:04:df:c5:9a:69:4e:ac:ad:dc:ec:79:be:
89:a5:39:0d:16:ec:7a:28:2a:e2:84:86:b5:4a:b7:
4c:6b:d2:d3:1e:d9:f9:6f:e6:7b:de:ce:1d:17:c0:
48:14:2e:7c:9c:b4:c3:7c:da:2c:2b:49:94:a1:7d:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0F:B7:B5:8A:5B:B4:B7:05:17:CB:73:C8:20:3C:35:E9:F3:2A:76
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae1f::/32
Signature Algorithm: sha256WithRSAEncryption
ad:48:42:18:2a:eb:0e:a3:08:9c:1d:7d:90:7d:06:9a:02:94:
de:ed:c9:9b:f9:12:8e:18:cd:e0:04:fe:8a:28:13:9c:4d:54:
ed:72:91:86:31:56:c0:1b:01:45:d1:e2:68:6f:aa:0a:de:ab:
f6:e4:f7:4a:8a:51:19:73:91:33:66:bd:24:2c:b9:65:52:53:
55:26:30:e8:bc:40:2b:34:59:6e:63:2a:1e:c1:06:e3:cd:36:
a8:2e:03:17:fb:44:68:bc:29:86:7e:92:cf:5a:2d:8d:1b:f8:
0d:09:ca:84:c2:fb:30:7f:8c:19:d8:05:99:9d:af:80:be:66:
d3:98:20:f3:b3:d3:ef:81:a9:ef:6d:e6:f4:ad:97:c1:1c:8e:
ef:52:be:fb:5c:54:a6:2a:73:62:f7:98:cc:6f:92:05:03:bd:
39:c3:90:5d:62:e0:96:35:82:bd:ea:de:01:78:26:1b:35:52:
c2:10:21:6e:76:0f:42:f5:86:99:92:10:d7:d4:6f:49:9a:d9:
1d:b1:02:e5:81:39:70:aa:d7:f2:9b:06:fc:c4:be:5b:2f:26:
39:9e:a0:44:f3:11:b4:f3:d4:5d:e3:9f:0f:5b:aa:10:ec:11:
4b:ff:f6:78:39:36:f2:fa:a3:64:30:8b:18:b6:48:a3:23:74:
c8:a8:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client