Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146330.roa
File: AS146330.roa (raw, json)
Hash identifier: gVi0XgkBRKtBiV/AV3Hrb7Rp8hDpiVIH8j3yNSNQpcw=
Subject key identifier: 74:EA:42:04:BB:27:5E:26:02:28:DA:59:D1:B3:24:AC:FA:E1:36:62
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6234796B4077AB9CDE608AE0CCFB41535A12BB79
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146330.roa
Signing time: Fri 22 May 2026 06:58:24 +0000
ROA not before: Fri 22 May 2026 06:53:24 +0000
ROA not after: Fri 21 May 2027 06:58:24 +0000
asID: 146330
IP address blocks: 240a:ae60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:34:79:6b:40:77:ab:9c:de:60:8a:e0:cc:fb:41:53:5a:12:bb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:24 2026 GMT
Not After : May 21 06:58:24 2027 GMT
Subject: CN=74EA4204BB275E260228DA59D1B324ACFAE13662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a9:dd:2e:c7:7c:53:3d:93:8c:5d:18:89:dc:
46:7a:43:d9:9d:c3:e9:90:82:c3:d1:63:1c:11:07:
d4:35:0f:cd:37:53:8f:c1:01:fa:46:76:09:b8:f4:
47:a0:96:39:02:23:fe:a1:fd:73:5c:1b:e6:b3:8b:
37:23:a1:33:a7:85:9e:88:7e:30:c9:50:22:8e:97:
56:00:2b:aa:45:77:61:63:20:d2:8f:e5:6d:ca:c6:
d9:27:a5:06:87:cd:4f:b6:96:fa:63:c0:39:80:12:
45:6a:4b:6e:f6:fa:1f:be:7e:03:dd:7c:be:86:a7:
6c:b1:5b:da:a9:80:5f:22:57:dd:67:59:4b:23:b5:
c5:ba:fb:7b:0b:19:d1:26:7c:4d:d6:8f:50:3d:cc:
c2:10:7d:f5:5d:34:33:12:80:b9:17:99:fd:40:d5:
a2:84:59:ae:cd:c7:6f:b5:5d:f3:9b:db:8f:97:61:
9d:04:a7:58:10:47:48:4f:e7:47:d7:26:a5:9a:3d:
3a:91:be:cd:0d:29:95:83:ca:72:e3:bc:19:54:2f:
0e:6b:e2:68:b7:96:30:5b:bb:b0:4b:8a:77:42:bd:
7c:eb:2a:7e:fe:f5:bf:04:a9:4a:4c:c6:10:62:75:
c9:6f:4f:96:ff:84:2c:71:7a:95:f4:09:68:f5:d7:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:42:04:BB:27:5E:26:02:28:DA:59:D1:B3:24:AC:FA:E1:36:62
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae60::/32
Signature Algorithm: sha256WithRSAEncryption
91:02:af:c6:49:5d:5a:83:0b:59:f2:78:30:be:2f:78:dd:e5:
3a:51:b0:f7:98:2c:16:62:33:a2:9f:c1:6d:9e:73:67:2e:27:
34:a9:39:6b:4f:19:b7:8e:6c:5f:78:a7:00:9f:7e:f5:37:26:
ed:61:af:52:c1:75:85:3e:05:42:90:b5:65:27:51:15:4a:ac:
66:f1:87:9e:fd:fa:66:6d:04:0e:60:b5:2a:14:8c:ab:65:64:
f0:34:0a:07:47:a7:85:46:93:80:6a:9b:90:a6:91:41:86:ec:
66:28:1b:12:54:ae:54:ad:91:3f:bc:f1:65:9d:af:61:85:c0:
bb:1b:64:25:ac:68:e6:51:ba:47:f6:b9:12:08:02:04:82:85:
2b:c6:8d:5e:c0:5a:76:b2:f7:3a:50:19:50:bf:bf:ea:44:5a:
f1:c0:0e:86:b4:91:97:0d:6f:48:2d:8c:b3:bf:9e:4d:f5:0e:
20:74:75:43:49:f7:7e:28:06:16:90:09:a2:c1:3e:2a:8e:da:
0e:61:3c:19:31:2b:48:8f:39:97:60:56:0f:fc:71:e3:42:b7:
ba:4a:07:68:e0:b9:86:8e:bc:2e:14:26:1b:3f:64:d9:fe:74:
c3:ce:b3:38:ee:1a:16:cf:04:fa:a4:10:eb:66:e5:c1:28:12:
52:f7:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:45 2026 by rpki-client