Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146361.roa
File: AS146361.roa (raw, json)
Hash identifier: W23g9yUXaANYzfKjCDyWnNHNz6+4TY7TwXceNhSGTeM=
Subject key identifier: 7F:7E:A5:96:E4:53:36:F5:BC:DB:6E:24:9A:42:D3:BF:96:A6:08:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D14F487CEBFFF7A2F026E15D3FC5CB9AF27D667
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146361.roa
Signing time: Mon 25 May 2026 01:20:19 +0000
ROA not before: Mon 25 May 2026 01:15:19 +0000
ROA not after: Mon 24 May 2027 01:20:19 +0000
asID: 146361
IP address blocks: 240a:ae7f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:14:f4:87:ce:bf:ff:7a:2f:02:6e:15:d3:fc:5c:b9:af:27:d6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:19 2026 GMT
Not After : May 24 01:20:19 2027 GMT
Subject: CN=7F7EA596E45336F5BCDB6E249A42D3BF96A608BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:c3:f0:1e:51:80:ac:22:36:5e:37:62:61:
40:0d:d7:53:b9:3e:d2:99:b7:0d:77:1c:11:41:ee:
e5:45:ee:3a:bb:20:52:80:88:55:a3:5d:15:9c:cd:
dd:99:2c:66:d4:8b:e8:53:d5:48:0a:b9:07:56:bd:
c3:58:2e:02:25:9e:38:60:e3:0f:67:19:49:1b:5a:
e6:7f:03:ec:ee:e2:fe:a1:84:3e:3e:92:6f:f0:81:
a5:48:ba:ed:4c:fc:75:70:d8:76:aa:ba:99:10:05:
c1:73:9a:07:ca:f2:6e:9b:2f:56:bc:e1:fb:22:02:
b3:2d:cd:77:80:aa:4a:83:b5:61:07:31:8e:d9:06:
ca:3c:0c:72:b5:ef:35:4e:71:9e:76:03:6c:97:25:
c1:5d:58:2a:a7:14:11:57:99:5d:7a:92:51:f5:25:
1f:13:5e:47:d0:d4:92:76:15:49:97:c5:83:39:8d:
f0:02:c7:bb:54:af:21:d5:a4:bb:f7:3a:70:17:26:
5a:2a:0b:28:20:48:e8:a0:8f:ac:23:fe:74:4e:d0:
44:35:ad:e3:f2:ee:8c:b0:ca:e4:48:ba:16:1d:2b:
bb:da:d7:16:6b:9f:2a:c9:e5:3e:9a:ba:e4:02:58:
9b:4b:ea:cd:8f:25:ce:8c:1d:5e:42:99:ad:20:b5:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7E:A5:96:E4:53:36:F5:BC:DB:6E:24:9A:42:D3:BF:96:A6:08:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146361.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae7f::/32
Signature Algorithm: sha256WithRSAEncryption
58:f4:12:c6:32:5c:f6:04:9e:5e:76:8c:ae:07:ac:b4:d0:bb:
dd:36:93:4f:5a:37:01:50:3a:12:85:5e:bd:8a:e4:6b:7b:43:
11:e4:42:23:f3:23:55:12:d6:e0:ab:6f:5a:0f:e1:e8:c0:36:
75:41:cf:31:84:b7:8b:8d:9c:40:df:c2:cc:6a:ad:84:99:eb:
a9:9a:a7:ff:6e:68:dd:89:af:b4:48:2b:1c:f5:79:5e:35:8e:
97:9f:4c:d8:f3:c3:fa:a4:18:07:54:18:41:bf:09:fc:00:7f:
d4:4e:ee:3d:11:27:cd:17:30:fd:85:41:97:3d:1a:e4:65:96:
f4:0d:66:5b:91:51:93:54:00:7a:40:63:67:9b:63:33:89:2c:
25:da:40:03:08:00:1e:a3:3e:a5:a4:8a:de:03:91:b0:aa:5b:
ec:bb:96:d5:b9:b3:1f:25:51:6d:d0:e1:b1:a3:0d:33:70:28:
b4:e2:98:eb:50:ab:9b:a1:b7:57:a8:90:a5:55:80:94:cf:6a:
3e:7d:0d:1a:d5:2a:fd:3a:87:ad:18:3f:2a:39:7f:33:8d:c5:
31:2f:c4:a7:0c:11:b1:61:ec:95:15:b3:46:a5:5f:14:1c:a9:
78:db:cf:38:2b:b9:36:70:8d:41:c1:ae:35:30:f6:c1:44:68:
4d:f9:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:25 2026 by rpki-client