Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146290.roa
File: AS146290.roa (raw, json)
Hash identifier: YtzyAdwuzXuC5GuhUMzEQ1ORHGvN4fDJmDGMClg2dhw=
Subject key identifier: DD:9F:D7:E6:36:81:34:42:BD:57:36:BF:77:5F:F6:28:FF:97:53:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2DA0EF19614922AB2A17FF37473379BF74F5D46E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146290.roa
Signing time: Tue 26 May 2026 03:17:16 +0000
ROA not before: Tue 26 May 2026 03:12:16 +0000
ROA not after: Tue 25 May 2027 03:17:16 +0000
asID: 146290
IP address blocks: 240a:ae38::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a0:ef:19:61:49:22:ab:2a:17:ff:37:47:33:79:bf:74:f5:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:16 2026 GMT
Not After : May 25 03:17:16 2027 GMT
Subject: CN=DD9FD7E636813442BD5736BF775FF628FF975370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:a1:6f:e8:18:0b:81:bf:f9:cb:70:a3:bd:
b2:ae:7e:a9:56:7b:55:e1:b4:8c:df:16:9a:f4:df:
b8:0f:e8:ed:26:bb:ff:dd:18:c6:27:4c:96:bc:37:
de:f5:eb:f3:e4:0b:9e:e2:84:ab:e6:5a:fe:75:22:
af:fe:15:58:6d:2e:07:3c:c3:57:42:92:e7:0c:05:
38:56:5c:9b:2f:da:f5:73:c1:ef:7b:7c:4b:b6:65:
c1:2e:f6:4f:d3:c6:ad:4e:73:a7:dd:59:18:93:4d:
66:87:2a:be:a4:42:cc:51:8a:67:0a:6e:85:87:45:
84:c6:94:32:ff:86:9c:df:ba:e8:8a:b3:ab:26:b9:
a4:4e:5c:9d:24:c2:8b:b0:5a:3c:3c:81:38:17:df:
42:e4:99:50:c8:4a:f1:9c:2b:36:9e:c0:8f:1b:56:
84:35:4c:fd:24:6e:5a:1c:8b:1e:ef:03:89:ba:f8:
eb:6c:25:d9:be:e8:24:a1:83:8f:83:e5:a0:68:75:
7c:66:7e:59:a3:7c:86:e5:49:4d:32:ab:08:67:08:
aa:54:a0:c1:89:31:f5:ab:21:1f:c1:bc:81:2e:cf:
11:fa:37:96:5f:e2:f2:fd:2a:af:bc:ea:79:15:b2:
c8:a8:d4:2d:64:7b:fe:93:93:d7:99:e1:26:ec:1e:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9F:D7:E6:36:81:34:42:BD:57:36:BF:77:5F:F6:28:FF:97:53:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146290.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae38::/32
Signature Algorithm: sha256WithRSAEncryption
2b:b1:62:e3:2c:0b:df:fa:1d:e5:cf:18:65:89:78:98:d0:39:
bf:9c:2f:31:d4:ad:b3:c1:cc:ca:26:01:8a:2b:b9:16:42:d0:
2c:f7:03:d0:5e:1c:77:4e:f3:94:84:93:1d:f0:4f:a8:9e:f7:
0b:aa:f1:d9:de:1d:b4:ed:d1:d9:bd:1b:a2:b5:bc:82:68:79:
ae:a3:e9:52:7d:86:42:fb:d5:ce:65:6f:3f:17:16:08:39:fa:
89:fb:59:1a:bd:c7:ce:bc:15:91:9c:8c:b6:6d:1e:b8:df:2c:
ca:4b:cc:3d:ff:13:67:33:bc:1a:c5:92:1c:ef:eb:cd:3f:3a:
1d:c7:72:2f:43:d4:0c:46:ab:d2:d2:2b:7a:38:b1:9f:b3:f2:
99:f2:71:85:3e:9a:05:81:88:8d:f4:e9:b2:9a:24:af:7c:cf:
1b:f9:6b:78:d8:97:2b:11:7d:95:fc:19:ca:77:ed:c3:2a:63:
01:ad:20:61:b2:39:12:ff:20:a7:25:1a:76:25:4d:03:98:db:
bd:32:10:6f:9d:db:0c:d8:44:bf:09:60:82:66:30:c5:83:72:
86:e0:df:2d:58:1d:04:3e:b4:ca:29:50:18:1d:0c:09:83:02:
78:e1:2f:06:34:49:78:89:a9:2c:a5:e1:f1:9b:ca:31:28:5d:
18:3b:e2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:50 2026 by rpki-client