Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146286.roa
File: AS146286.roa (raw, json)
Hash identifier: i28CTpQZlyBfFGkoUxceeVHQ5BhDgomgSS9gtHvaa78=
Subject key identifier: 59:96:6E:9D:8C:AF:4A:74:AB:B2:28:AE:41:D1:2D:7A:52:3B:0B:47
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7B0A66E7F47599B8E789C25C8E12572A81CE6220
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146286.roa
Signing time: Fri 22 May 2026 07:41:00 +0000
ROA not before: Fri 22 May 2026 07:36:00 +0000
ROA not after: Fri 21 May 2027 07:41:00 +0000
asID: 146286
IP address blocks: 240a:ae34::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:0a:66:e7:f4:75:99:b8:e7:89:c2:5c:8e:12:57:2a:81:ce:62:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:00 2026 GMT
Not After : May 21 07:41:00 2027 GMT
Subject: CN=59966E9D8CAF4A74ABB228AE41D12D7A523B0B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:8f:91:bd:fe:ab:37:79:5f:22:36:5a:f8:
cf:5b:0e:ea:74:be:7e:27:11:2d:cd:af:2e:f9:35:
77:3e:4c:95:7c:32:42:b3:83:41:9c:ae:2c:ba:ab:
77:4b:83:1a:89:67:be:90:8a:bd:53:f2:94:9f:a2:
37:bc:c0:d9:b1:50:17:14:8f:60:3f:d6:bf:b8:63:
5c:50:c3:81:65:fa:c4:37:e0:39:fc:c6:1e:de:aa:
8f:84:35:fa:98:3f:ce:61:95:26:fd:50:2f:9e:28:
fb:b7:f4:a3:22:f1:1b:f7:00:4e:85:6e:a1:72:cc:
27:b2:ff:5f:03:09:47:08:d3:00:bc:ad:fa:09:52:
b1:48:8c:bb:78:ac:9d:e9:a3:9c:69:a3:64:fd:5e:
2c:48:1d:2b:e8:1f:ae:56:e7:08:3f:c2:23:49:aa:
7d:38:03:7d:08:59:ff:94:6a:c4:0e:8f:e4:44:8e:
ad:3f:ae:46:d9:59:6f:dc:35:23:c7:e8:e5:e3:8a:
57:f9:1e:2e:bb:56:75:79:57:87:d1:e8:64:d3:64:
54:09:1a:df:3c:85:93:78:6b:c3:92:ca:58:14:dc:
de:4a:b3:a6:37:48:37:ad:dd:f2:84:17:f5:f9:bf:
a7:f2:f9:d3:53:87:4f:6f:6b:fc:05:64:54:09:8a:
25:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:6E:9D:8C:AF:4A:74:AB:B2:28:AE:41:D1:2D:7A:52:3B:0B:47
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae34::/32
Signature Algorithm: sha256WithRSAEncryption
6c:57:ca:e5:5e:8a:78:49:83:19:44:9c:58:a1:e0:79:dc:8a:
0c:46:09:85:3f:55:53:d5:d9:eb:dd:10:2c:45:bf:05:d2:8b:
5c:d1:d1:98:f1:14:ae:07:94:bc:11:15:20:66:3f:3d:de:48:
29:90:4e:8f:e4:77:78:3a:64:34:46:26:0a:16:9e:ca:e9:2c:
79:ae:56:18:42:02:bc:f8:ed:51:63:b2:c7:9f:5c:e5:fa:b5:
1d:1b:8e:b9:0b:2f:1b:96:d5:11:71:3c:34:4e:e9:a3:3e:7e:
43:49:1d:59:71:06:55:07:3a:12:6c:75:18:8d:45:0f:36:1c:
a7:ec:b2:18:be:f7:8b:26:ff:6c:5d:57:4a:c5:e5:1c:53:32:
72:8b:50:39:32:c9:12:a4:d9:9f:66:cb:db:9e:2d:f8:c1:59:
73:7b:2e:c6:53:ef:c5:5e:f0:c3:78:dc:4c:f1:1e:28:7f:d7:
49:67:b1:dd:2b:b0:7f:75:91:81:31:f3:e2:e6:b1:42:4d:e7:
47:86:74:d4:53:28:43:32:99:d9:ea:57:ab:ec:93:86:30:e4:
d0:74:d4:24:ad:50:d8:38:50:66:1a:d2:3c:0a:e4:7b:cb:03:
6a:df:d8:bd:59:89:9a:fb:8d:5f:29:dd:c6:bb:7d:a1:b1:2b:
4d:f4:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:38 2026 by rpki-client