Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146306.roa
File: AS146306.roa (raw, json)
Hash identifier: 805NCtSzwBRddps/x97urPcWGWiJipki/zFfOIN9N70=
Subject key identifier: 2C:17:62:D8:D0:2F:F9:F8:B2:E3:BB:45:E4:F8:5F:08:9F:D7:01:D0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5D81D288F1D31B52C42BF38E2C0E22D228D6A256
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146306.roa
Signing time: Fri 22 May 2026 07:32:17 +0000
ROA not before: Fri 22 May 2026 07:27:17 +0000
ROA not after: Fri 21 May 2027 07:32:17 +0000
asID: 146306
IP address blocks: 240a:ae48::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:81:d2:88:f1:d3:1b:52:c4:2b:f3:8e:2c:0e:22:d2:28:d6:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:17 2026 GMT
Not After : May 21 07:32:17 2027 GMT
Subject: CN=2C1762D8D02FF9F8B2E3BB45E4F85F089FD701D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:af:4a:31:0a:44:b1:7a:ba:75:c8:43:8f:
f7:64:5e:36:e1:e4:aa:e9:58:08:b7:2a:11:50:f0:
c8:3d:86:88:db:c9:7e:cb:1f:c3:b0:aa:e7:2b:b3:
98:3d:70:41:4a:b0:1a:f3:69:a9:25:01:f1:3e:83:
88:e2:41:20:c4:40:1a:8b:c4:39:ee:b0:d5:10:9f:
67:b8:af:95:92:24:bd:5a:4c:04:7a:00:5d:24:7f:
a9:f8:23:54:5b:6d:38:4f:00:a0:80:1e:59:56:47:
bf:6f:60:1f:b0:70:7e:f0:ad:77:46:dc:7b:86:d3:
36:08:f0:53:69:df:4d:d1:6f:2b:58:f0:12:b9:71:
99:52:18:86:fe:fb:25:2d:e8:e1:f7:34:f8:9e:b9:
b0:15:62:aa:0f:07:74:b3:b0:47:18:46:1c:fc:a4:
6b:c2:41:79:e1:bf:e2:c3:99:ff:5f:a6:a2:eb:b8:
5c:f9:df:b7:79:46:ef:80:ef:72:8d:95:f3:d1:fe:
b7:46:02:81:e7:8c:4e:43:03:04:19:73:51:e7:69:
ec:d9:b9:18:4c:1a:47:6a:d7:c2:c0:91:93:36:bc:
57:7d:24:7f:08:2c:a1:92:c1:47:90:5e:e7:6b:b3:
fa:70:5a:e3:65:01:a4:e3:ba:06:1c:55:39:2e:f3:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:62:D8:D0:2F:F9:F8:B2:E3:BB:45:E4:F8:5F:08:9F:D7:01:D0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae48::/32
Signature Algorithm: sha256WithRSAEncryption
28:b5:dc:52:b6:38:d5:32:76:ff:9f:79:4f:f6:f3:1c:d9:78:
f2:37:ce:8d:53:1e:25:e3:91:2e:89:38:11:29:de:6a:f2:16:
3d:0d:a2:76:c5:69:7f:b2:fc:04:0b:bf:6f:b4:4b:cc:8d:63:
43:bb:2d:02:82:3a:ab:56:d3:6c:00:2d:e9:6c:51:ce:9d:4a:
f7:94:d9:84:44:58:67:e7:26:c4:90:d7:02:2c:d2:66:ec:69:
cb:2e:8c:0d:04:3b:24:4a:8c:c0:df:23:64:b9:f2:c3:fd:1b:
5a:2b:34:8f:76:a8:91:fc:82:24:be:7c:91:e0:3d:b3:d9:e1:
88:40:3f:23:ad:42:02:35:29:45:fc:1a:20:19:cb:7f:bc:12:
25:26:0c:0d:66:ab:d8:57:6c:1a:53:6d:b0:44:69:18:57:23:
de:20:d6:e2:11:69:29:06:96:f7:6a:be:50:bf:8f:80:37:4a:
b5:0a:35:39:e1:0b:fa:73:c0:d0:3e:2a:35:72:e7:41:62:c1:
33:6e:f6:f0:71:fd:04:dd:58:5f:52:22:83:27:8c:e3:d4:06:
d6:ad:30:51:a5:2b:21:c9:1f:5a:d2:1f:b0:d3:5b:d7:04:29:
df:d2:53:e7:21:00:d9:cc:55:45:ce:69:c1:26:f2:c8:dd:3f:
2d:e9:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:05 2026 by rpki-client