Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146288.roa
File: AS146288.roa (raw, json)
Hash identifier: Vu/QLDKNvJiowLxwZRWXzywnitL4KWpWQfWjNuC68Gs=
Subject key identifier: AA:3C:59:EC:9A:57:74:D0:AB:16:8A:DC:61:D6:4A:0F:57:96:7F:30
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33691916872354FFAEF7E68FCBB557FE5D9802A6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146288.roa
Signing time: Mon 25 May 2026 01:20:01 +0000
ROA not before: Mon 25 May 2026 01:15:01 +0000
ROA not after: Mon 24 May 2027 01:20:01 +0000
asID: 146288
IP address blocks: 240a:ae36::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:69:19:16:87:23:54:ff:ae:f7:e6:8f:cb:b5:57:fe:5d:98:02:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:01 2026 GMT
Not After : May 24 01:20:01 2027 GMT
Subject: CN=AA3C59EC9A5774D0AB168ADC61D64A0F57967F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:43:a4:9f:69:e8:2c:1e:4b:90:37:1c:71:
3c:96:d6:45:49:e6:fe:16:42:90:df:68:be:57:32:
30:48:ba:0b:13:2d:5d:c6:f6:20:e3:af:2d:e9:69:
02:0a:d6:8f:0d:7a:cb:83:c1:15:3f:bf:67:be:20:
f2:2c:23:3a:01:53:ec:7a:c0:00:55:9b:7d:d3:4e:
ab:ca:5b:e5:7a:4b:c7:6a:57:83:99:06:f3:1b:07:
1a:ed:e2:f2:b8:21:67:8e:aa:bd:c0:17:b9:94:09:
9f:da:73:b1:b5:89:d6:22:9b:fe:a7:1c:22:4c:e6:
cc:88:f0:0b:85:78:3b:dc:21:02:41:18:f0:23:c7:
9f:35:b9:e8:dc:72:71:fb:dd:c7:87:e8:ea:06:b2:
c9:11:34:38:98:47:8c:ba:aa:0a:f4:96:27:f9:d2:
44:41:f7:a5:fb:a5:f2:7b:0e:04:82:3c:9e:05:f0:
49:06:b0:20:c9:00:48:6b:3e:a3:88:ba:7e:1c:fc:
6e:4e:b6:b0:36:c0:06:52:4c:c4:09:72:5a:89:8b:
3e:df:0e:ce:0c:ff:8e:a2:57:9d:41:3c:8e:56:3c:
f4:46:01:08:3d:af:b6:69:3b:8f:77:ae:a0:5e:73:
f8:0c:75:31:5f:48:ec:8c:95:32:68:15:17:15:51:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3C:59:EC:9A:57:74:D0:AB:16:8A:DC:61:D6:4A:0F:57:96:7F:30
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae36::/32
Signature Algorithm: sha256WithRSAEncryption
0e:d6:44:3a:d5:ea:e6:e8:c3:c5:28:3e:7f:fe:47:78:1c:3a:
89:31:74:63:8f:be:cf:36:75:c2:4a:e5:40:45:57:37:a1:9b:
f7:de:b0:f3:73:4f:d8:8c:4e:59:0b:e0:6b:40:9b:87:6f:f4:
82:1e:f6:00:89:c1:01:58:1f:3c:55:f2:18:eb:b0:3f:a5:6a:
d3:2f:13:9b:1a:e4:e5:23:ce:5b:6d:13:2f:46:0a:a9:6f:69:
57:18:de:86:98:3a:ac:2f:eb:9c:25:53:d3:08:42:c8:03:6d:
52:b8:4a:55:2f:5e:d8:75:cc:1e:ee:43:73:48:3a:9a:08:87:
62:36:55:5a:49:4d:53:8d:ff:95:61:da:25:9b:ed:70:c7:d1:
d0:46:e4:05:2b:28:9b:24:16:5a:89:55:a0:ff:07:c0:05:3a:
63:21:dc:60:66:5c:e6:61:88:33:6a:0e:ae:9b:a9:15:ff:8a:
a8:8d:2b:4d:10:c4:c4:dd:b0:e4:47:d0:7f:08:4a:6f:3a:86:
7b:31:09:ab:8d:35:43:56:1e:19:21:a2:96:69:91:e8:6c:bb:
0e:a0:b8:d8:34:bb:b7:b0:ba:dc:79:e6:a3:6e:d9:49:a8:cf:
7b:56:10:12:ef:7e:e3:d2:0f:04:82:4f:5a:43:9f:ec:88:ed:
69:92:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:55 2026 by rpki-client