Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146338.roa
File: AS146338.roa (raw, json)
Hash identifier: 8Sl1mz2uwAQcF007GCQfDh83jSverN5fV5yKjjeEzZ4=
Subject key identifier: CE:29:E6:C4:CC:60:B5:AA:85:D4:9E:9A:3C:A3:C6:1B:03:31:51:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56C646B46A45D0003024A062C45401C13236049F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146338.roa
Signing time: Mon 25 May 2026 02:22:10 +0000
ROA not before: Mon 25 May 2026 02:17:10 +0000
ROA not after: Mon 24 May 2027 02:22:10 +0000
asID: 146338
IP address blocks: 240a:ae68::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c6:46:b4:6a:45:d0:00:30:24:a0:62:c4:54:01:c1:32:36:04:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:10 2026 GMT
Not After : May 24 02:22:10 2027 GMT
Subject: CN=CE29E6C4CC60B5AA85D49E9A3CA3C61B033151CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:71:ae:f4:22:c9:c3:1b:93:66:48:23:4d:
bd:1b:11:0d:05:0c:7a:ac:b0:0a:42:57:9c:8e:09:
2a:86:3b:67:2a:58:28:f4:4e:f2:5a:c1:9c:12:02:
42:b9:36:04:c4:ab:46:2e:cb:a7:f9:40:bf:c9:00:
84:fa:81:b3:69:81:b6:5c:e8:33:92:b2:5a:0b:94:
a6:4c:17:78:ae:5d:6a:70:9e:09:69:cf:2c:07:49:
f9:24:e5:bd:57:64:ec:c9:95:62:74:bb:08:58:48:
66:8a:8b:10:db:31:51:41:4f:20:a4:72:6a:fe:cb:
1a:e0:78:7f:fe:e6:aa:73:e3:df:61:3e:5d:f8:b7:
7c:03:8e:b2:8a:7d:7d:fc:c3:41:5e:69:38:6f:92:
5e:b4:34:df:fd:16:ea:3c:87:3f:22:78:3e:22:ab:
0b:c6:64:8f:c5:07:6e:1b:9f:3e:e7:bf:cd:39:b5:
c9:4a:53:97:e5:75:f5:42:1c:7f:4c:2a:8f:bf:98:
a9:2c:08:25:58:94:39:b7:07:82:72:84:f6:3f:bc:
9a:a8:43:70:fb:83:a4:d8:f3:51:3a:9f:c4:af:48:
67:1c:61:cd:aa:e4:c2:c2:96:ad:c2:1a:8e:6c:45:
9b:d8:ca:c5:d9:e7:81:b8:6a:cf:c8:35:d9:46:14:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:E6:C4:CC:60:B5:AA:85:D4:9E:9A:3C:A3:C6:1B:03:31:51:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae68::/32
Signature Algorithm: sha256WithRSAEncryption
a8:a7:f5:22:63:03:87:8b:37:d8:8b:33:55:c1:51:21:34:d3:
16:61:0f:68:c7:76:a8:20:6e:b8:13:f0:f8:55:ec:af:94:a5:
cc:6f:41:93:69:1f:9b:a4:a3:83:32:16:50:62:fb:b4:a7:b9:
a2:7e:b1:cc:65:10:00:b8:dc:7c:0a:5d:0e:32:a1:c0:98:c7:
bc:25:c9:ad:13:25:2b:2b:0e:45:b5:de:2c:bf:ca:05:8e:a1:
92:3e:c3:e4:fe:7c:ad:72:b9:f2:56:18:17:d0:77:8b:9c:04:
4d:15:40:bb:56:95:14:1c:f8:7b:e3:87:f9:2c:33:81:a4:c8:
09:71:8e:1f:85:86:41:ad:db:70:96:df:d1:c8:21:8b:f1:d1:
d4:c8:52:51:5f:2c:6f:c1:83:6b:38:b2:7f:7d:45:0c:92:b6:
5b:45:03:38:02:27:d4:74:91:5a:a3:8a:31:29:33:0f:3c:5f:
d2:0a:18:ef:b9:49:1c:9a:52:0e:15:e3:96:c6:1b:e7:8e:18:
91:4b:d2:ed:53:93:5b:38:dc:90:c0:d6:df:9c:f6:b5:f9:90:
ea:22:44:ce:65:79:7e:2b:77:40:69:91:c7:dd:7a:7b:42:81:
57:bb:1f:dd:36:bf:92:b1:44:95:c7:49:ed:41:a5:da:ed:c0:
15:43:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client