Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146356.roa
File: AS146356.roa (raw, json)
Hash identifier: +v7e9kpacQ898YdZobXycR0A1pbPSy1ch6ZCrlmU9Xg=
Subject key identifier: 5D:F6:82:E7:76:F0:EC:2A:8E:9B:AC:4D:89:40:0F:DA:51:53:CD:5C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5273F0A720C036D5998705B185537D46723AA052
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146356.roa
Signing time: Mon 25 May 2026 02:22:19 +0000
ROA not before: Mon 25 May 2026 02:17:19 +0000
ROA not after: Mon 24 May 2027 02:22:19 +0000
asID: 146356
IP address blocks: 240a:ae7a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:73:f0:a7:20:c0:36:d5:99:87:05:b1:85:53:7d:46:72:3a:a0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:19 2026 GMT
Not After : May 24 02:22:19 2027 GMT
Subject: CN=5DF682E776F0EC2A8E9BAC4D89400FDA5153CD5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:b9:d3:e7:6f:2d:a8:ec:64:38:a5:a3:41:
d7:1f:5f:2e:46:bd:08:93:05:b3:2b:7c:af:44:7a:
c1:d8:97:70:a5:b9:83:a9:60:38:ff:bb:fe:a4:7e:
d4:26:55:c5:a4:72:e2:ff:0c:85:19:69:d6:a1:ef:
bc:10:30:bb:6e:d3:84:47:66:07:63:bc:37:7c:1c:
05:31:32:9f:92:88:7f:c8:95:aa:5d:be:26:57:e8:
1c:27:ed:b4:8c:df:5d:1a:86:3b:fe:4e:cb:06:d4:
fa:8e:1a:a3:9d:62:95:5f:b9:35:b5:ae:3c:2f:e9:
d4:a6:d9:ac:20:71:b0:c8:16:24:85:aa:b2:4f:76:
be:e3:1a:20:76:5c:05:09:88:4d:d5:0a:a7:b8:13:
a6:5c:73:66:eb:a1:b9:04:81:94:45:aa:40:76:db:
d1:d6:65:e0:61:c5:81:e8:95:9f:ba:bf:f5:c3:95:
7e:4f:d2:ef:ef:48:b2:fc:e2:32:b8:55:47:a8:37:
b1:1b:0e:03:cf:27:e7:52:0f:61:74:1b:cf:b6:22:
45:d8:94:df:e2:d5:a4:d0:77:44:02:27:54:76:4f:
dc:5a:e9:ba:5c:b6:3d:d9:3b:85:db:e8:0b:3a:14:
96:fd:8f:fb:48:5d:1e:25:73:cc:a3:d9:d2:d9:64:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F6:82:E7:76:F0:EC:2A:8E:9B:AC:4D:89:40:0F:DA:51:53:CD:5C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae7a::/32
Signature Algorithm: sha256WithRSAEncryption
5e:c3:f0:37:76:84:b7:90:6a:16:01:c9:68:46:e5:b3:60:64:
74:01:83:d2:06:47:96:56:c7:d0:58:40:7b:6e:f6:5a:5e:5e:
28:f4:c2:d2:9c:9e:03:40:f4:df:19:d0:31:dc:72:a5:5a:0b:
db:98:d6:ad:d0:65:ae:c0:3d:29:21:4a:3d:49:9a:c4:c5:c2:
6a:4b:f8:e3:0f:d5:3d:4c:89:bc:b7:d3:28:92:bd:47:87:16:
39:18:f8:93:d3:ed:53:74:68:f5:73:3d:f8:ec:f2:40:d3:19:
ed:a6:06:8d:8f:35:55:af:fd:c4:e0:b6:0f:1f:83:c4:cf:10:
e6:be:c7:4a:21:30:18:41:6c:19:14:12:8e:79:13:c7:33:be:
1f:e4:32:5b:23:e8:37:d4:99:6a:bb:f3:fd:cf:02:5a:cd:d2:
36:00:60:2f:d2:6f:0f:d8:a4:ee:b5:00:c0:ec:64:b0:d8:ef:
6f:b4:36:b1:42:4f:f8:33:e1:4b:28:9a:0c:cf:8e:05:41:9f:
37:9f:c5:d3:76:22:3d:e5:f0:c5:8a:38:87:56:c0:d8:e4:22:
54:01:a8:c5:8d:c7:72:97:77:2e:e0:e8:9d:58:81:54:c5:bd:
0e:0f:17:f6:e1:99:06:69:64:d6:78:46:c0:36:df:c5:9a:d6:
d7:4b:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:56 2026 by rpki-client