Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146341.roa
File: AS146341.roa (raw, json)
Hash identifier: 81G/3e+KT4XyevqvECOY4h78lcyrQXF0tRMej4RB26g=
Subject key identifier: 24:58:DF:80:09:94:06:31:3B:56:6D:73:19:BB:8C:63:56:4B:1C:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0402925CE58E395A30F70C7E63B37B64F36E34D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146341.roa
Signing time: Fri 22 May 2026 06:46:31 +0000
ROA not before: Fri 22 May 2026 06:41:31 +0000
ROA not after: Fri 21 May 2027 06:46:31 +0000
asID: 146341
IP address blocks: 240a:ae6b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:02:92:5c:e5:8e:39:5a:30:f7:0c:7e:63:b3:7b:64:f3:6e:34:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:31 2026 GMT
Not After : May 21 06:46:31 2027 GMT
Subject: CN=2458DF80099406313B566D7319BB8C63564B1C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:78:70:d5:d3:52:7a:b0:57:8a:df:42:d8:
2d:63:e8:b0:7b:89:23:73:92:4b:6b:f5:45:1e:35:
fd:06:64:7c:cd:97:62:b1:2c:18:ed:34:00:99:a5:
98:f9:c2:c9:17:d2:70:c4:e4:c9:71:34:38:b9:68:
6c:ce:46:ae:be:9f:3c:f2:c0:00:9c:29:67:a1:f7:
07:16:22:8f:75:aa:ed:69:ad:49:85:82:bf:34:df:
4c:40:a9:e2:3b:60:21:fa:64:1d:be:ca:cc:51:91:
7f:0a:5d:7c:a8:8c:cf:10:b0:06:67:f9:d7:5b:a7:
22:87:a8:e2:b0:e2:52:f6:06:36:43:83:d6:b7:4f:
04:1c:16:0a:b6:df:19:8a:5c:d9:1a:94:69:85:a0:
ae:6c:b4:52:19:4b:4e:ee:0b:02:6c:9e:a3:ce:89:
b5:7f:9d:da:c3:07:87:66:5a:48:6e:99:2c:26:b6:
c3:da:4c:6c:4f:eb:31:f1:d1:af:17:12:15:d2:96:
d0:42:50:54:c8:7a:62:ac:c1:a2:be:8d:7f:d0:c3:
29:6c:d5:5c:23:d6:62:a9:24:68:34:7e:ae:46:ad:
02:1a:d3:da:ea:a4:26:a9:38:69:f4:bb:f6:4c:67:
e7:eb:fd:44:93:dd:80:db:f4:36:0e:b0:5e:86:a1:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:58:DF:80:09:94:06:31:3B:56:6D:73:19:BB:8C:63:56:4B:1C:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae6b::/32
Signature Algorithm: sha256WithRSAEncryption
b8:82:e4:6c:88:9e:5b:4b:7e:f1:96:00:46:ce:ec:85:88:7e:
a6:39:28:58:84:ef:f5:e1:4e:5f:38:6f:42:5c:eb:14:54:55:
b6:c8:46:5d:bc:73:b6:5d:2d:7c:9c:7a:a3:7e:53:be:73:44:
24:9a:bb:3a:7d:f9:56:40:ab:af:00:87:15:17:c7:14:96:35:
eb:56:60:46:85:ee:b3:6e:f1:b9:1e:91:6a:a4:4c:b6:bd:85:
ea:de:7b:42:63:d4:e4:52:19:bf:27:20:44:08:4b:3e:33:cc:
56:1f:99:24:eb:fd:e1:cb:04:3a:58:5c:08:b5:65:7d:87:85:
ac:8a:10:5f:0b:98:30:fb:56:98:ce:d4:e3:e9:d3:53:61:43:
21:92:fc:8c:3c:c7:db:09:95:fe:0f:ce:7e:7a:47:1d:d9:b4:
04:0a:e5:8b:39:d2:a1:28:9c:8e:1d:32:a0:fa:73:ce:08:a4:
bb:04:c3:b6:8f:e5:38:a6:8f:b9:5a:e4:83:a4:00:6b:c7:48:
45:eb:b2:b9:fd:f6:55:f7:b8:97:87:2a:ef:80:6e:d4:5f:e6:
3e:47:2f:38:d6:01:60:55:a0:9a:bc:83:3c:63:f3:fa:41:19:
5c:24:f1:be:27:94:0a:ca:5e:78:2f:3b:b2:db:5b:ec:5c:44:
9f:cc:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client