Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146373.roa
File: AS146373.roa (raw, json)
Hash identifier: ieAz2gvU9ciQPzFjM7yy4ggmYeyEYncBhSa57JR26MY=
Subject key identifier: 9E:BB:3F:96:83:84:55:68:A0:2D:D5:FB:E2:30:8B:DE:DD:BB:F8:6A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4DA720C24DD9271BDA9C05EE4A738F3C327CE4C7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146373.roa
Signing time: Tue 26 May 2026 03:16:48 +0000
ROA not before: Tue 26 May 2026 03:11:48 +0000
ROA not after: Tue 25 May 2027 03:16:48 +0000
asID: 146373
IP address blocks: 240a:ae8b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a7:20:c2:4d:d9:27:1b:da:9c:05:ee:4a:73:8f:3c:32:7c:e4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:48 2026 GMT
Not After : May 25 03:16:48 2027 GMT
Subject: CN=9EBB3F9683845568A02DD5FBE2308BDEDDBBF86A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:e9:6c:8c:f7:2e:fa:d4:d1:f2:ed:7e:72:
1a:3d:ab:a7:44:f2:8d:87:42:7b:1e:f4:30:d7:38:
81:ae:43:1d:a9:b1:77:71:45:f8:16:51:a1:ca:36:
b9:7f:26:b1:c9:1e:9a:bd:c4:a0:72:ce:c6:96:ef:
e2:f2:be:cc:cf:b4:a8:ac:89:8a:96:6e:25:7a:7d:
23:98:5c:9f:21:ef:7b:a1:52:ca:fc:ba:c5:2d:16:
56:72:fd:bb:a9:94:cf:74:a9:ff:3f:9b:8f:7e:50:
29:7d:89:2c:13:64:3a:71:39:32:61:b9:d5:7e:b5:
a9:a7:ff:c9:30:37:a2:10:a5:fa:ec:06:9c:7e:93:
34:fe:1f:21:be:08:83:a0:24:dc:63:aa:1e:e6:c9:
b2:8f:6e:cd:e7:19:e6:48:50:e6:10:27:50:a9:f9:
d7:24:eb:9e:ce:ed:89:cd:3b:9f:b8:d6:e1:b3:69:
7e:81:3c:60:6a:33:99:2e:68:14:be:e9:78:5a:e4:
b3:21:58:56:a8:17:de:dc:06:6d:44:7d:9c:05:3e:
f9:30:48:6f:01:a1:12:f5:b9:c7:60:6c:dd:0d:60:
f6:85:28:5a:94:c8:e9:ce:98:dd:c3:c5:88:33:05:
f9:b2:9c:cc:fd:2f:e6:bf:c0:f8:74:1c:e3:93:e9:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BB:3F:96:83:84:55:68:A0:2D:D5:FB:E2:30:8B:DE:DD:BB:F8:6A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae8b::/32
Signature Algorithm: sha256WithRSAEncryption
b6:27:bd:7d:e7:60:58:d2:df:73:19:b8:e6:ca:c5:9a:2b:2a:
c7:1d:5c:d7:5b:bb:85:97:6b:f0:78:63:1c:1f:d2:87:f9:f9:
d3:c2:67:ab:e9:46:58:f0:fd:21:8f:45:12:ee:18:e6:59:68:
28:2a:c3:aa:df:8b:52:f5:4b:23:bd:60:11:b0:54:39:93:12:
55:18:8f:97:a9:c8:9a:d1:f6:a5:dc:67:1a:c0:96:39:42:55:
a6:52:f6:0f:63:62:50:92:4e:7a:7b:da:5a:f2:f7:a9:59:32:
3b:f9:a6:0a:0f:5a:25:eb:f5:a0:3f:31:a0:bd:21:b2:4b:2c:
c9:39:f4:d1:f7:fa:34:8f:09:de:1b:b7:9f:f1:28:6c:ba:ab:
20:f9:2d:12:f7:9b:78:8f:18:c9:f8:06:55:72:24:ef:28:01:
9b:e3:b6:04:cb:07:c1:ee:97:07:50:ec:0f:c2:f9:95:40:4e:
ef:5b:93:79:5b:03:01:07:f0:0d:98:05:f8:00:90:ae:78:99:
6b:e3:f9:2c:78:61:ae:75:bc:20:f7:d3:45:17:7c:22:d0:e5:
b2:89:5a:ef:1d:66:ea:d8:b0:7d:be:39:67:b8:8e:66:7f:bc:
b5:18:d3:10:53:2f:f3:c9:df:f6:dd:30:e4:7d:fb:e0:34:4f:
88:a0:1c:14
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTacgwk3ZJxvanAXuSnOPPDJ85McwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDhaFw0yNzA1MjUwMzE2NDhaMDMxMTAvBgNV
BAMTKDlFQkIzRjk2ODM4NDU1NjhBMDJERDVGQkUyMzA4QkRFRERCQkY4NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8elsjPcu+tTR8u1+cho9q6dE
8o2HQnse9DDXOIGuQx2psXdxRfgWUaHKNrl/JrHJHpq9xKByzsaW7+LyvszPtKis
iYqWbiV6fSOYXJ8h73uhUsr8usUtFlZy/buplM90qf8/m49+UCl9iSwTZDpxOTJh
udV+tamn/8kwN6IQpfrsBpx+kzT+HyG+CIOgJNxjqh7mybKPbs3nGeZIUOYQJ1Cp
+dck657O7YnNO5+41uGzaX6BPGBqM5kuaBS+6Xha5LMhWFaoF97cBm1EfZwFPvkw
SG8BoRL1ucdgbN0NYPaFKFqUyOnOmN3DxYgzBfmynMz9L+a/wPh0HOOT6bXPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUnrs/loOEVWigLdX74jCL3t27+GowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquizANBgkqhkiG9w0BAQsFAAOCAQEAtie9
fedgWNLfcxm45srFmisqxx1c11u7hZdr8HhjHB/Sh/n508Jnq+lGWPD9IY9FEu4Y
5lloKCrDqt+LUvVLI71gEbBUOZMSVRiPl6nImtH2pdxnGsCWOUJVplL2D2NiUJJO
envaWvL3qVkyO/mmCg9aJev1oD8xoL0hskssyTn00ff6NI8J3hu3n/EobLqrIPkt
EvebeI8YyfgGVXIk7ygBm+O2BMsHwe6XB1DsD8L5lUBO71uTeVsDAQfwDZgF+ACQ
rniZa+P5LHhhrnW8IPfTRRd8ItDlsola7x1m6tiwfb45Z7iOZn+8tRjTEFMv88nf
9t0w5H374DRPiKAcFA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:15 2026 by rpki-client