Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146289.roa
File: AS146289.roa (raw, json)
Hash identifier: lCRVfoxKW1p5bZEjkiuTx1x9+o4q3JI6/DJOkJjzn7U=
Subject key identifier: D0:74:8A:6A:3A:46:1E:25:AE:91:6D:10:3A:95:18:ED:82:33:55:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3ABB0AFF6873A38203EDCFEC2E759EC466B7E630
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146289.roa
Signing time: Tue 26 May 2026 06:13:00 +0000
ROA not before: Tue 26 May 2026 06:08:00 +0000
ROA not after: Tue 25 May 2027 06:13:00 +0000
asID: 146289
IP address blocks: 240a:ae37::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:bb:0a:ff:68:73:a3:82:03:ed:cf:ec:2e:75:9e:c4:66:b7:e6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:08:00 2026 GMT
Not After : May 25 06:13:00 2027 GMT
Subject: CN=D0748A6A3A461E25AE916D103A9518ED8233551C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:cf:bd:57:2e:4e:37:66:c5:23:84:ed:cf:
ac:9c:98:5d:4b:fe:b1:5b:5b:9c:b5:81:45:13:c4:
d0:d5:18:c3:b6:a4:31:99:db:d5:f6:5e:5a:a4:5a:
39:a8:b8:2e:90:99:cd:b8:ec:c6:67:60:8d:70:cc:
ab:30:e1:c3:5f:a0:1e:f2:46:b3:f5:5c:35:ce:4a:
9d:09:81:09:a1:a0:fc:5c:a5:d1:09:00:f7:74:fc:
06:ae:a8:f9:72:ea:05:99:4b:28:3f:2f:bd:12:22:
d2:28:e4:23:09:a8:61:fd:aa:ad:ba:e7:ef:cd:27:
70:84:c7:77:d8:c1:12:0f:31:23:e1:10:98:45:d3:
e5:88:5f:d4:4d:a7:d6:bb:31:f6:19:a2:df:4f:b9:
eb:3c:fc:d3:b2:af:1c:fb:78:25:f6:31:78:f0:63:
91:bc:ef:27:c3:d7:38:12:1d:2c:2f:35:68:e0:ff:
a8:6c:16:7a:f3:83:c4:64:77:b5:45:38:ac:d8:c6:
88:ed:56:08:c2:58:22:27:c5:2a:98:b8:eb:b0:bc:
32:b7:c3:41:54:a8:f0:78:8a:51:49:7b:78:a5:61:
bf:41:ee:7d:71:74:e3:0b:3c:a2:7c:2e:79:2c:4f:
96:21:50:bb:02:2f:c2:8b:bf:48:e5:9a:56:b5:78:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:74:8A:6A:3A:46:1E:25:AE:91:6D:10:3A:95:18:ED:82:33:55:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146289.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae37::/32
Signature Algorithm: sha256WithRSAEncryption
17:37:1d:38:2f:16:45:4f:81:e9:30:b0:e0:d0:3e:37:5b:fc:
28:5f:d7:36:9a:ea:6a:42:26:a7:c9:8c:b7:fb:64:90:56:6b:
80:ed:1d:4d:17:db:71:28:a5:d6:6c:3f:3e:91:64:a7:8e:85:
43:68:6a:c2:c6:86:d5:4b:7f:e9:f6:01:5a:2a:56:ac:e5:ca:
80:2f:a8:26:50:36:d1:54:a6:7b:87:13:a9:45:96:c3:5a:57:
f3:3e:f4:a8:aa:6e:70:6a:79:04:8c:9f:0d:43:54:8d:b6:6e:
72:50:dc:5e:ff:14:1e:81:61:ba:d7:8e:ba:69:77:42:11:bd:
4b:4a:71:f9:33:a2:c4:a5:6b:31:dc:58:78:f8:5f:8f:b9:e3:
7a:1c:90:42:1d:d0:01:39:75:d1:b9:b2:52:ab:4e:18:9b:56:
a7:68:c5:42:4e:05:f4:cf:e6:13:c7:ee:ce:f5:69:29:de:e3:
d3:ad:1c:06:ea:6c:ca:cb:1c:5a:97:75:90:f3:e9:c1:da:82:
e6:30:ba:90:84:b1:83:d0:59:a8:1c:56:ef:9c:97:51:f0:eb:
e3:e0:bc:25:2b:90:74:1f:9c:61:41:95:d3:87:88:46:50:ae:
aa:ff:6e:33:21:62:43:5e:37:a4:11:98:82:2b:ae:db:90:91:
9d:ee:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:17 2026 by rpki-client