Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146333.roa
File: AS146333.roa (raw, json)
Hash identifier: LjaRZpulHx2RqHMTYgFbxafIYO+BgritXHE3n4vij+o=
Subject key identifier: 60:CE:2C:79:51:EC:07:8B:DF:19:31:09:52:FC:90:97:3C:C8:89:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F40BDE586E9013608753E83F958DB488047BD21
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146333.roa
Signing time: Mon 25 May 2026 03:19:27 +0000
ROA not before: Mon 25 May 2026 03:14:27 +0000
ROA not after: Mon 24 May 2027 03:19:27 +0000
asID: 146333
IP address blocks: 240a:ae63::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:40:bd:e5:86:e9:01:36:08:75:3e:83:f9:58:db:48:80:47:bd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:27 2026 GMT
Not After : May 24 03:19:27 2027 GMT
Subject: CN=60CE2C7951EC078BDF19310952FC90973CC88936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:49:4e:b7:c4:85:d5:07:ed:17:7d:40:60:
16:69:aa:94:af:ae:2d:72:12:a3:9a:aa:4e:93:66:
5b:c4:8c:be:1c:3e:11:02:ac:ca:3b:40:11:4d:f8:
f1:f8:4e:30:ed:5e:9c:fa:8b:15:b3:78:ba:b6:38:
d8:11:e5:4a:fe:0a:a8:3c:9f:bf:ca:a7:2f:36:47:
d9:0b:8f:39:2b:b8:8e:e0:89:4f:de:03:41:56:82:
8e:2f:43:93:cb:1f:af:17:91:ba:f2:22:2a:61:fb:
05:f3:27:8e:25:01:63:48:3d:24:27:68:90:3d:7b:
98:43:57:bb:a5:68:80:e2:c8:ae:9c:51:4f:f5:d8:
73:52:f0:b5:6e:5f:65:68:f7:80:71:d1:e7:4c:35:
4e:dd:23:62:9c:8c:26:a9:dc:48:f0:64:92:3f:64:
57:37:8a:60:79:72:6b:03:de:42:2c:9a:ad:de:66:
cf:e0:b5:be:03:a8:1f:b9:a0:9c:84:e0:eb:5d:6b:
6f:81:13:40:fe:28:16:07:7d:9a:6d:bd:08:86:de:
e8:41:8b:3e:85:b9:6e:6f:59:df:73:80:72:bd:85:
6e:b8:56:78:50:01:21:3f:13:79:9e:25:ef:56:7f:
38:7d:9a:f9:1e:6c:a4:99:74:74:f0:37:8c:9c:23:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CE:2C:79:51:EC:07:8B:DF:19:31:09:52:FC:90:97:3C:C8:89:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae63::/32
Signature Algorithm: sha256WithRSAEncryption
28:f3:7f:40:df:3d:be:f4:c5:72:f8:67:c4:09:31:06:7b:a7:
c8:96:09:d7:e9:31:11:d5:ff:22:70:da:c0:fb:7b:18:a2:09:
f6:39:0d:f5:a5:05:ab:ee:02:d0:ee:b2:ff:11:fd:1e:04:5d:
c1:ee:ab:83:df:2a:97:2b:e3:d6:69:80:df:ea:d1:f9:8b:5d:
7a:d2:b3:e4:9f:64:97:24:39:24:d0:39:6d:32:7c:90:4f:09:
2f:2b:ea:2d:8f:55:d8:67:87:79:e2:1f:7b:6d:dc:21:1b:7a:
17:76:da:bc:60:ec:1d:e3:79:02:63:0f:2a:b5:29:12:dd:62:
bc:6b:e1:ca:5a:8b:52:87:02:0e:66:8d:00:8e:73:18:fd:d9:
07:0d:92:0e:31:90:51:e8:16:83:96:9d:4f:db:93:94:01:3e:
d1:1d:9e:15:c5:e1:b3:69:f8:55:1c:ba:c5:48:61:2a:55:83:
14:3e:86:a1:6e:c6:73:bf:1f:43:60:c1:11:ad:38:08:e7:96:
e2:21:c9:bc:99:42:56:ba:54:43:8d:c6:43:15:db:85:e9:38:
43:e6:75:a9:52:56:1c:72:aa:8d:f1:c5:35:94:5c:e8:e2:fe:
97:27:83:ae:b7:8b:57:e8:2e:b7:b5:d6:96:0a:8b:1c:bd:7c:
b1:a0:10:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:12 2026 by rpki-client