Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146367.roa
File: AS146367.roa (raw, json)
Hash identifier: a9JUK6C1J3a6X10d7xixGMMxoAzl6iplGV9cyf+oadY=
Subject key identifier: 14:D0:E2:0E:9A:3E:84:49:D0:4E:8E:FB:57:66:F9:BF:35:F5:57:1F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5ACF1BEBD3B6C8966249DB6EE1C9001F86509DDB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146367.roa
Signing time: Mon 25 May 2026 03:19:32 +0000
ROA not before: Mon 25 May 2026 03:14:32 +0000
ROA not after: Mon 24 May 2027 03:19:32 +0000
asID: 146367
IP address blocks: 240a:ae85::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cf:1b:eb:d3:b6:c8:96:62:49:db:6e:e1:c9:00:1f:86:50:9d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:32 2026 GMT
Not After : May 24 03:19:32 2027 GMT
Subject: CN=14D0E20E9A3E8449D04E8EFB5766F9BF35F5571F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:c0:03:75:2c:75:df:15:4d:7b:e8:33:92:
c4:f7:8e:a7:a6:1f:0f:96:f7:11:f5:69:ec:e4:c9:
fe:0f:fa:95:8c:8f:f4:e1:fd:cc:c7:3a:54:49:23:
2f:2d:41:a9:fb:a3:c5:90:79:76:91:da:66:19:c8:
38:47:e9:03:c8:14:77:87:be:d3:72:2b:1a:2f:93:
a6:a8:60:1b:21:d1:d6:17:be:16:ad:5f:42:97:d7:
a5:f2:1b:7d:29:71:c5:1d:56:c2:67:46:58:74:1c:
69:1a:60:b7:cd:84:c7:cc:88:a5:a6:f7:78:29:96:
d7:2d:2e:f8:9a:17:49:e2:7a:56:c7:d1:98:ad:5c:
3c:a9:16:2d:8e:4f:ae:6b:2a:29:2c:95:45:68:25:
b2:4e:53:04:2d:d5:ed:a2:7d:17:04:4d:d0:0d:0c:
8c:9f:0f:03:dd:78:b8:55:cf:53:ae:b2:46:de:ca:
2d:b9:24:aa:c6:77:67:48:c6:f0:73:2e:6a:27:d4:
17:32:b4:97:e4:06:a5:6a:17:75:7e:6d:a8:1f:60:
c3:55:55:4a:24:7b:85:1e:de:c0:81:7e:1e:12:73:
21:d1:9e:c8:3e:00:54:08:35:5b:5d:38:f6:26:64:
f9:38:14:4f:f1:db:e9:02:f5:a0:5d:68:37:4c:de:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D0:E2:0E:9A:3E:84:49:D0:4E:8E:FB:57:66:F9:BF:35:F5:57:1F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae85::/32
Signature Algorithm: sha256WithRSAEncryption
2b:05:ef:50:27:9e:62:7f:f3:f5:78:b6:50:85:33:02:ca:cf:
16:63:d6:fe:52:3e:c0:d3:d9:94:37:47:7c:fc:6c:1f:87:ae:
db:f5:e4:79:50:22:07:9e:95:b1:3a:8d:4a:6f:84:2e:f6:90:
d3:85:d2:7f:c2:4d:1e:ae:29:1e:48:1f:32:5a:51:a4:47:09:
c8:54:39:dd:69:0c:5f:1b:b1:b4:09:57:4e:80:dd:48:b1:51:
9c:f1:0a:8f:10:29:8a:35:dd:62:37:d6:4c:74:d2:11:95:cd:
62:f5:5c:7c:df:c7:9a:2b:d7:ad:ab:17:d7:fc:e7:c8:c3:49:
e1:03:8d:04:d8:d4:3f:1d:57:7b:66:59:2e:43:97:c9:8a:b4:
76:02:8a:1b:c0:56:5e:d8:a5:30:05:ce:1a:6e:9a:30:33:5d:
9c:8c:46:97:5e:78:f9:36:48:3a:13:d3:5a:c2:d5:12:58:a7:
77:15:d4:ec:80:a7:c9:c1:74:12:fc:af:53:7b:36:0d:a1:2f:
f0:ab:31:a3:1d:23:9f:e2:c6:58:a3:77:b4:44:2d:71:a2:ed:
ad:a8:e6:eb:fc:3a:1d:21:6e:77:b6:78:a4:b9:69:da:aa:7d:
83:a0:8b:d1:47:ad:f4:b0:1e:d7:fe:99:7a:c9:04:d2:a4:43:
33:7b:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:55 2026 by rpki-client