Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146328.roa
File: AS146328.roa (raw, json)
Hash identifier: /QS2F8bckZrjyA5hCSOa64QqI6fpGOkCOeg4gYR9Qao=
Subject key identifier: 3F:9C:E7:92:87:F2:5E:DE:C1:8A:69:8B:1E:2A:70:9C:DC:99:D0:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6405B3AE503DBE557967AFE93FADF5046A71AD6E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146328.roa
Signing time: Mon 25 May 2026 06:48:57 +0000
ROA not before: Mon 25 May 2026 06:43:57 +0000
ROA not after: Mon 24 May 2027 06:48:57 +0000
asID: 146328
IP address blocks: 240a:ae5e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:05:b3:ae:50:3d:be:55:79:67:af:e9:3f:ad:f5:04:6a:71:ad:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:57 2026 GMT
Not After : May 24 06:48:57 2027 GMT
Subject: CN=3F9CE79287F25EDEC18A698B1E2A709CDC99D057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:b5:85:4e:65:2a:97:c5:ec:04:4b:b4:90:
98:97:e7:fe:ae:45:c9:d5:42:ef:2e:ef:f2:cd:08:
eb:0f:03:5e:f2:cf:7c:24:67:63:98:5a:90:30:7c:
ef:25:fc:ef:16:9b:1e:85:ae:17:a0:9a:23:4d:ca:
57:e4:b9:e7:ee:1a:fc:6b:4b:72:e3:34:eb:db:fe:
de:61:01:2f:31:66:85:c2:29:e0:01:0e:23:d4:9a:
28:24:b8:2e:51:ed:d6:f0:98:75:95:8a:ca:e8:12:
05:6a:76:3d:4e:c1:e5:2b:43:2f:41:b2:fb:90:ef:
6d:e1:d2:a5:1d:13:09:77:7c:08:bf:08:06:cd:cc:
7e:16:19:2b:a9:4e:2e:98:d4:6f:03:c2:69:74:60:
14:94:9c:52:5d:54:23:96:b3:f9:3a:c5:dc:aa:4c:
54:15:59:fe:d8:96:7c:d6:aa:3f:9f:f6:8e:0d:6e:
4f:1e:3d:5c:de:5a:b8:3c:89:e2:df:b2:00:ce:46:
31:63:01:6c:31:c1:c3:8d:72:94:f3:0d:83:50:1c:
15:ba:f0:f3:b8:af:ff:de:8f:fb:52:1d:4f:91:68:
3b:fa:01:79:71:c7:33:e1:25:40:b8:82:eb:45:0c:
27:9e:0c:a6:38:52:63:6a:ed:0c:49:4f:c1:e3:44:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9C:E7:92:87:F2:5E:DE:C1:8A:69:8B:1E:2A:70:9C:DC:99:D0:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae5e::/32
Signature Algorithm: sha256WithRSAEncryption
92:b4:0e:fe:c9:93:e4:51:a5:95:69:13:c7:0d:02:a0:2f:28:
01:f8:3b:f9:f9:42:28:43:ce:61:ed:31:34:fe:c0:0c:0b:57:
eb:44:18:de:59:7e:02:c0:51:e8:d8:0c:44:51:e9:b1:1d:3a:
0b:c5:f4:5d:f5:8b:2a:6f:0b:0e:0c:0b:7a:40:49:f9:53:65:
99:11:f7:e7:8d:86:56:5f:6d:d4:3f:bf:17:59:8c:cc:14:73:
99:e5:b6:c3:ef:f7:20:ec:02:72:f7:f3:8f:74:da:a2:9d:d8:
0b:d6:ee:3d:97:ae:bb:14:ca:6f:6c:b7:b6:c2:7c:c6:fe:f9:
77:52:3f:5e:7c:fb:5d:bf:8b:3b:21:fd:47:0c:65:84:78:52:
4c:f0:1a:fa:7f:d3:6d:b0:82:ce:bd:cc:6b:56:a0:b2:bc:92:
3f:ea:54:fd:b0:ce:fb:23:d9:7d:d8:43:57:e3:f1:90:73:91:
81:24:c8:d5:4a:06:31:33:a8:30:4b:b6:50:6f:01:34:59:9d:
69:bc:5e:aa:ba:2e:5b:9e:81:5b:aa:53:c7:e5:e3:99:08:86:
46:cf:6e:90:4a:48:38:0b:40:df:06:3e:7f:ed:8e:b8:21:05:
c4:a4:b1:a4:ce:a9:b1:49:fd:9b:1c:70:fb:f0:43:84:c3:4c:
5d:3d:f6:15
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZAWzrlA9vlV5Z6/pP631BGpxrW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNTdaFw0yNzA1MjQwNjQ4NTdaMDMxMTAvBgNV
BAMTKDNGOUNFNzkyODdGMjVFREVDMThBNjk4QjFFMkE3MDlDREM5OUQwNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+bWFTmUql8XsBEu0kJiX5/6u
RcnVQu8u7/LNCOsPA17yz3wkZ2OYWpAwfO8l/O8Wmx6FrhegmiNNylfkuefuGvxr
S3LjNOvb/t5hAS8xZoXCKeABDiPUmigkuC5R7dbwmHWVisroEgVqdj1OweUrQy9B
svuQ723h0qUdEwl3fAi/CAbNzH4WGSupTi6Y1G8Dwml0YBSUnFJdVCOWs/k6xdyq
TFQVWf7YlnzWqj+f9o4Nbk8ePVzeWrg8ieLfsgDORjFjAWwxwcONcpTzDYNQHBW6
8PO4r//ej/tSHU+RaDv6AXlxxzPhJUC4gutFDCeeDKY4UmNq7QxJT8HjRIm1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUP5znkofyXt7BimmLHipwnNyZ0FcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquXjANBgkqhkiG9w0BAQsFAAOCAQEAkrQO
/smT5FGllWkTxw0CoC8oAfg7+flCKEPOYe0xNP7ADAtX60QY3ll+AsBR6NgMRFHp
sR06C8X0XfWLKm8LDgwLekBJ+VNlmRH3542GVl9t1D+/F1mMzBRzmeW2w+/3IOwC
cvfzj3Taop3YC9buPZeuuxTKb2y3tsJ8xv75d1I/Xnz7Xb+LOyH9RwxlhHhSTPAa
+n/TbbCCzr3Ma1agsrySP+pU/bDO+yPZfdhDV+PxkHORgSTI1UoGMTOoMEu2UG8B
NFmdabxeqrouW56BW6pTx+XjmQiGRs9ukEpIOAtA3wY+f+2OuCEFxKSxpM6psUn9
mxxw+/BDhMNMXT32FQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:25 2026 by rpki-client