Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146340.roa
File: AS146340.roa (raw, json)
Hash identifier: QADlsvzoKDWihz43vFLD+AnRDyrsOz7gfv3Gk2Ur5NM=
Subject key identifier: 17:F4:F9:B0:BF:3E:3B:71:18:2C:15:A7:40:3D:5D:FE:0A:9A:A8:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 14FD48F38B895CAD42B88CA70C5589FA7B21BD3E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146340.roa
Signing time: Fri 22 May 2026 04:08:14 +0000
ROA not before: Fri 22 May 2026 04:03:14 +0000
ROA not after: Fri 21 May 2027 04:08:14 +0000
asID: 146340
IP address blocks: 240a:ae6a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fd:48:f3:8b:89:5c:ad:42:b8:8c:a7:0c:55:89:fa:7b:21:bd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:14 2026 GMT
Not After : May 21 04:08:14 2027 GMT
Subject: CN=17F4F9B0BF3E3B71182C15A7403D5DFE0A9AA836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:99:96:3f:d8:32:f4:f0:92:d3:27:12:28:
13:79:11:8c:fa:cc:da:c2:91:04:02:3f:e7:34:c3:
65:fd:9d:b7:29:ab:a8:e9:f3:da:b8:f3:1f:8d:c2:
4c:57:f3:3a:b0:bd:eb:bd:74:84:67:2c:04:40:cb:
58:46:af:10:7d:ae:96:dc:da:ef:66:c2:00:21:d6:
20:8e:be:58:9d:1e:c1:4b:04:06:eb:18:56:70:04:
c6:46:fc:a9:0c:96:bd:60:db:64:b8:a1:21:54:75:
e8:0a:a4:10:aa:8d:0f:66:35:17:91:c3:4c:09:b1:
a6:a8:98:ca:af:2a:78:c9:95:49:17:0a:a9:c3:3e:
49:d2:b1:fb:52:ce:22:1c:c3:3c:45:4f:eb:e9:71:
ed:cd:ea:30:69:a4:b2:77:dc:49:99:a9:f7:88:24:
39:c3:89:b0:fb:cd:f9:bf:b2:0c:fa:52:43:05:6f:
4a:c0:36:81:0d:5c:8e:60:0b:8b:c7:40:53:b4:82:
ec:63:35:47:ad:89:9d:67:e4:2b:a5:92:ba:27:98:
e9:0b:8d:cc:b4:b0:9b:c3:57:5c:09:4c:9d:24:bb:
fb:71:58:6a:c3:99:fa:a9:43:6e:69:fa:28:06:9c:
58:4c:30:6e:24:c0:a0:7a:2f:ef:44:0f:e5:b8:b8:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:F9:B0:BF:3E:3B:71:18:2C:15:A7:40:3D:5D:FE:0A:9A:A8:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae6a::/32
Signature Algorithm: sha256WithRSAEncryption
14:e7:11:45:e0:44:80:ae:63:1f:ae:42:5a:7d:6b:b6:75:80:
e1:54:92:84:ad:64:24:99:48:38:42:a2:e5:9a:8e:42:9b:39:
b7:f1:92:12:b3:27:2f:7a:b9:50:56:03:43:c1:6b:af:99:82:
cc:37:21:1d:04:99:7f:5d:04:77:97:c3:5f:c4:9b:d2:f2:58:
7d:34:fb:1c:d2:7b:e7:a2:68:33:43:a0:7b:35:32:2d:79:86:
a2:89:b8:13:17:e9:8e:aa:82:14:77:63:24:28:5d:d9:1d:4c:
5a:70:86:08:5e:89:88:04:d9:c1:28:08:5b:0e:72:bf:75:38:
34:5f:07:90:d2:a0:42:a9:4d:3f:f5:cf:e1:fd:6f:7e:91:90:
98:08:9a:cb:8c:84:64:de:dd:e3:6d:2d:27:75:89:02:8d:c4:
f4:80:26:61:7e:7c:9c:cf:89:43:18:d0:cf:54:99:26:d9:54:
0f:d5:c8:14:ae:c5:e9:08:de:71:bc:a5:48:93:92:63:88:33:
b4:13:aa:2d:51:d4:56:74:28:c1:f0:6a:6c:a6:c4:70:a8:b1:
06:5e:01:de:80:f4:2e:8f:a1:2a:82:fb:c0:a4:22:f3:cb:e3:
3d:c0:03:af:1e:cf:49:dd:b3:13:5c:ab:07:37:7c:6a:2d:10:
70:a2:44:67
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFP1I84uJXK1CuIynDFWJ+nshvT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMTRaFw0yNzA1MjEwNDA4MTRaMDMxMTAvBgNV
BAMTKDE3RjRGOUIwQkYzRTNCNzExODJDMTVBNzQwM0Q1REZFMEE5QUE4MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3JmWP9gy9PCS0ycSKBN5EYz6
zNrCkQQCP+c0w2X9nbcpq6jp89q48x+NwkxX8zqwveu9dIRnLARAy1hGrxB9rpbc
2u9mwgAh1iCOvlidHsFLBAbrGFZwBMZG/KkMlr1g22S4oSFUdegKpBCqjQ9mNReR
w0wJsaaomMqvKnjJlUkXCqnDPknSsftSziIcwzxFT+vpce3N6jBppLJ33EmZqfeI
JDnDibD7zfm/sgz6UkMFb0rANoENXI5gC4vHQFO0guxjNUetiZ1n5CulkronmOkL
jcy0sJvDV1wJTJ0ku/txWGrDmfqpQ25p+igGnFhMMG4kwKB6L+9ED+W4uDljAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUF/T5sL8+O3EYLBWnQD1d/gqaqDYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquajANBgkqhkiG9w0BAQsFAAOCAQEAFOcR
ReBEgK5jH65CWn1rtnWA4VSShK1kJJlIOEKi5ZqOQps5t/GSErMnL3q5UFYDQ8Fr
r5mCzDchHQSZf10Ed5fDX8Sb0vJYfTT7HNJ756JoM0OgezUyLXmGoom4ExfpjqqC
FHdjJChd2R1MWnCGCF6JiATZwSgIWw5yv3U4NF8HkNKgQqlNP/XP4f1vfpGQmAia
y4yEZN7d420tJ3WJAo3E9IAmYX58nM+JQxjQz1SZJtlUD9XIFK7F6QjecbylSJOS
Y4gztBOqLVHUVnQowfBqbKbEcKixBl4B3oD0Lo+hKoL7wKQi88vjPcADrx7PSd2z
E1yrBzd8ai0QcKJEZw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:55 2026 by rpki-client