Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146311.roa
File: AS146311.roa (raw, json)
Hash identifier: uadJldORG3IWrMQml4DRXIq7OtaKxROL/lodTksF6/E=
Subject key identifier: 82:9F:26:85:93:52:20:75:AE:7F:73:1B:E8:83:79:6A:8E:52:2F:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 44D6DFCC6F23FC47C1A7379736ABDEB96F904C71
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146311.roa
Signing time: Tue 26 May 2026 06:30:51 +0000
ROA not before: Tue 26 May 2026 06:25:51 +0000
ROA not after: Tue 25 May 2027 06:30:51 +0000
asID: 146311
IP address blocks: 240a:ae4d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d6:df:cc:6f:23:fc:47:c1:a7:37:97:36:ab:de:b9:6f:90:4c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:51 2026 GMT
Not After : May 25 06:30:51 2027 GMT
Subject: CN=829F268593522075AE7F731BE883796A8E522FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:76:f9:06:35:d3:3a:cc:94:ad:1c:58:b2:
bc:b0:c6:d1:ef:a1:80:b7:ad:01:53:9b:7a:76:a3:
ab:b9:8d:b9:d5:0b:fa:70:18:eb:b5:c0:fe:35:f0:
cd:a6:06:b2:35:07:ce:e0:db:cf:97:05:83:2b:b5:
a0:55:19:b4:24:e6:7d:89:65:db:63:58:47:cf:18:
9f:8f:e0:10:0c:d3:38:7b:18:c1:91:80:a1:15:5f:
38:02:c0:e9:13:40:3e:a1:d6:90:bc:8f:86:0e:6e:
cf:0d:6b:aa:f5:14:d7:87:40:49:a8:40:f1:9c:34:
2f:79:2f:5b:bf:62:74:2f:55:25:f9:22:ca:2c:f4:
ab:9c:2b:ce:e9:a1:07:d7:2e:55:31:ef:35:1d:19:
b8:92:a5:f3:b3:5f:1f:fb:36:2f:45:85:e9:f2:7a:
c6:d5:c5:3d:74:96:6f:b9:ca:79:65:a3:58:6e:5c:
c4:a6:cb:4c:ae:1a:25:68:bf:44:f5:1f:00:79:32:
03:d7:cd:d5:48:d7:fb:12:a7:a5:fc:f6:33:84:b1:
37:3e:02:74:cf:90:f4:e9:6f:72:32:d3:3f:84:37:
49:1b:be:27:58:30:1e:2b:89:96:4c:38:5d:87:b0:
31:93:d8:72:e3:5b:ac:bd:09:7c:c3:4b:9a:d2:52:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9F:26:85:93:52:20:75:AE:7F:73:1B:E8:83:79:6A:8E:52:2F:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae4d::/32
Signature Algorithm: sha256WithRSAEncryption
85:df:6c:01:d8:36:f1:7c:b1:fc:c2:12:c9:3c:46:03:76:af:
a8:b4:69:65:e0:0d:63:b9:7f:f5:ab:07:cf:b9:0b:96:ea:e4:
fd:07:d2:88:37:c7:7a:77:f9:5e:cb:0a:7f:a1:67:21:d5:62:
6c:ca:b3:15:db:a5:1d:40:78:ed:95:5d:dc:8b:59:18:59:57:
46:ab:19:35:de:5c:09:ad:66:0e:e3:64:9a:8d:d3:df:f9:2a:
9b:de:2e:b7:0b:b9:d4:fa:cf:67:8c:81:75:85:3b:ca:d0:a7:
88:93:54:31:80:01:fc:7f:9a:29:da:6f:11:72:06:37:cf:aa:
eb:bc:a3:39:8c:05:e5:a6:b6:d8:05:49:79:69:1c:ff:13:17:
72:d5:eb:0b:53:62:2b:30:8a:66:d2:1d:e1:52:1d:ab:2d:61:
45:db:a3:75:85:04:65:23:8b:53:bb:25:48:9e:e0:f3:09:18:
a9:3c:69:ec:81:a0:d5:e5:b4:0a:a5:67:7b:cf:77:1c:2a:5d:
76:6d:37:cc:02:c5:02:25:58:68:dd:28:9d:a1:19:28:28:7d:
ab:c8:f0:2b:1f:d9:96:1a:30:be:a9:23:bc:bb:ab:21:94:e6:
01:aa:3c:aa:1f:96:54:83:fe:eb:cd:3f:a0:88:75:7d:42:0f:
33:35:cd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:24 2026 by rpki-client