Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146294.roa
File: AS146294.roa (raw, json)
Hash identifier: KawB0F1MbboqdXGvgUE0Qeg3S/4ZJwdvXdtPjLOZ0HY=
Subject key identifier: 1F:71:9F:C8:0D:5E:12:D4:17:5E:73:B1:2B:E2:94:EC:DB:E0:BA:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 623795471A62FB5E245A2DED9460A2A836B08E23
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146294.roa
Signing time: Fri 22 May 2026 07:24:33 +0000
ROA not before: Fri 22 May 2026 07:19:33 +0000
ROA not after: Fri 21 May 2027 07:24:33 +0000
asID: 146294
IP address blocks: 240a:ae3c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:37:95:47:1a:62:fb:5e:24:5a:2d:ed:94:60:a2:a8:36:b0:8e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:33 2026 GMT
Not After : May 21 07:24:33 2027 GMT
Subject: CN=1F719FC80D5E12D4175E73B12BE294ECDBE0BA8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:a0:ca:85:95:df:ef:c5:38:91:27:e9:0e:
f3:32:24:79:a4:c7:95:3b:57:86:94:bb:9c:e7:9f:
a1:10:7e:25:05:9a:a7:4b:3a:87:6c:b7:4e:0b:93:
fa:2f:c1:d6:ac:5f:07:9b:34:e8:ed:fa:7e:37:ea:
d7:7a:62:42:d5:69:43:3f:12:bf:31:ec:f6:5b:7a:
a4:18:89:82:9a:80:ef:16:1f:ff:e1:58:fb:11:68:
0a:0f:49:c3:ac:9c:d9:b0:1a:43:48:8b:e4:69:0a:
dc:de:d7:9f:a5:eb:0d:5e:93:f0:11:04:c8:b2:b9:
95:2b:7a:41:3d:c9:65:66:df:c0:78:4f:78:41:92:
8c:f6:8f:00:ed:85:dd:63:4c:5c:21:2d:d3:a9:64:
11:5d:c4:67:5b:eb:3e:2c:dc:fe:44:95:e5:d2:a7:
12:dc:43:30:0e:59:a7:cc:1f:64:5f:b7:e9:d1:d7:
de:79:3b:37:0b:d2:ee:9f:17:6a:a1:ed:40:de:36:
bd:a9:d7:00:42:8b:67:05:70:e5:6a:06:9b:4a:e3:
81:6e:4e:69:2e:57:57:c6:ab:55:26:9e:63:9b:50:
d1:b5:e4:38:72:03:3e:0d:8e:7a:3e:44:52:a1:6b:
e4:95:72:6b:58:23:a6:5f:a4:c4:1a:8c:e1:81:8c:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:71:9F:C8:0D:5E:12:D4:17:5E:73:B1:2B:E2:94:EC:DB:E0:BA:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae3c::/32
Signature Algorithm: sha256WithRSAEncryption
44:05:62:ea:00:19:0a:3b:8b:64:b9:f6:30:f0:35:43:75:8f:
16:bb:32:2f:b9:96:6a:9c:37:5d:dd:b4:4c:39:24:ce:85:96:
63:31:a6:32:04:c1:f8:01:73:cb:70:8d:56:f3:48:ae:14:f0:
0c:f6:cc:5e:ed:6d:88:05:54:a8:52:0d:9a:40:c8:67:c9:ad:
52:ae:46:fa:5d:85:1a:b9:38:50:1a:0b:4a:fd:84:70:2a:7d:
0e:6d:f0:88:3d:fa:c4:37:3e:d7:e1:ad:34:8c:a6:c6:64:e8:
f5:d6:fb:6e:98:82:77:87:7f:b6:24:1a:04:b8:26:35:c3:f8:
ec:05:a3:21:78:d8:fa:c7:b1:38:ee:b1:67:fa:de:a5:0e:7b:
5d:9e:e9:12:58:33:fd:9c:db:40:59:90:aa:d2:e4:fb:d9:0c:
7e:7c:a5:07:85:06:57:73:db:e8:fe:1d:95:18:6c:3b:bd:e1:
7d:79:88:75:c5:24:32:f4:b9:1c:04:f3:00:ad:51:57:bf:e0:
3f:09:34:cb:65:59:22:72:0e:a3:aa:0d:63:6e:01:48:43:b0:
2f:c1:40:7e:88:e3:4e:ce:4d:e6:19:86:11:77:6a:9b:ca:39:
4f:b1:0b:31:a7:23:0d:a6:6a:30:fe:8f:02:1d:4c:60:ef:18:
bb:4e:70:bc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYjeVRxpi+14kWi3tlGCiqDawjiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MzNaFw0yNzA1MjEwNzI0MzNaMDMxMTAvBgNV
BAMTKDFGNzE5RkM4MEQ1RTEyRDQxNzVFNzNCMTJCRTI5NEVDREJFMEJBOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeoqDKhZXf78U4kSfpDvMyJHmk
x5U7V4aUu5znn6EQfiUFmqdLOodst04Lk/ovwdasXwebNOjt+n436td6YkLVaUM/
Er8x7PZbeqQYiYKagO8WH//hWPsRaAoPScOsnNmwGkNIi+RpCtze15+l6w1ek/AR
BMiyuZUrekE9yWVm38B4T3hBkoz2jwDthd1jTFwhLdOpZBFdxGdb6z4s3P5EleXS
pxLcQzAOWafMH2Rft+nR1955OzcL0u6fF2qh7UDeNr2p1wBCi2cFcOVqBptK44Fu
TmkuV1fGq1UmnmObUNG15DhyAz4Njno+RFKha+SVcmtYI6ZfpMQajOGBjGVNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUH3GfyA1eEtQXXnOxK+KU7Nvguo0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2Mjk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquPDANBgkqhkiG9w0BAQsFAAOCAQEARAVi
6gAZCjuLZLn2MPA1Q3WPFrsyL7mWapw3Xd20TDkkzoWWYzGmMgTB+AFzy3CNVvNI
rhTwDPbMXu1tiAVUqFINmkDIZ8mtUq5G+l2FGrk4UBoLSv2EcCp9Dm3wiD36xDc+
1+GtNIymxmTo9db7bpiCd4d/tiQaBLgmNcP47AWjIXjY+sexOO6xZ/repQ57XZ7p
Elgz/ZzbQFmQqtLk+9kMfnylB4UGV3Pb6P4dlRhsO73hfXmIdcUkMvS5HATzAK1R
V7/gPwk0y2VZInIOo6oNY24BSEOwL8FAfojjTs5N5hmGEXdqm8o5T7ELMacjDaZq
MP6PAh1MYO8Yu05wvA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:58 2026 by rpki-client