Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146380.roa
File: AS146380.roa (raw, json)
Hash identifier: kMeQPbuU/q/0YNNJk3j69XTuldFMrZzy982G2dFS/zk=
Subject key identifier: AE:FD:19:69:30:5A:60:FE:13:78:42:8E:C7:9E:A0:D2:77:64:91:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 348F2B8F473F8B6C1B1DC11AC0A295017059F418
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146380.roa
Signing time: Fri 22 May 2026 07:40:49 +0000
ROA not before: Fri 22 May 2026 07:35:49 +0000
ROA not after: Fri 21 May 2027 07:40:49 +0000
asID: 146380
IP address blocks: 240a:ae92::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:8f:2b:8f:47:3f:8b:6c:1b:1d:c1:1a:c0:a2:95:01:70:59:f4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:49 2026 GMT
Not After : May 21 07:40:49 2027 GMT
Subject: CN=AEFD1969305A60FE1378428EC79EA0D2776491DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b9:04:aa:88:fc:78:22:1a:d6:4a:c0:0d:66:
9b:ef:d6:96:bc:76:e8:ab:93:e4:36:63:2d:56:cf:
8c:63:06:d2:cb:f2:fa:24:79:88:8e:60:31:c7:99:
5e:20:f4:6c:9b:30:fc:83:dd:b9:5e:6e:9d:c6:6a:
07:d2:c0:a0:17:cf:65:0f:fb:3a:11:fa:aa:6f:b4:
0b:0c:40:9b:d9:20:67:56:cc:4f:ae:0d:38:f1:22:
42:2d:21:08:e0:d4:9b:48:32:59:b8:08:46:8d:27:
5f:98:4e:cc:be:a5:93:1e:ff:61:55:d9:f1:a2:c5:
5d:b6:e3:6f:fa:82:cd:45:5f:ab:a3:57:75:34:64:
5d:23:80:c4:6f:a5:35:95:97:2e:13:52:24:2f:fc:
55:e5:05:40:41:79:4b:f4:a5:8d:09:77:8a:51:7e:
b4:db:21:a0:b1:df:0a:80:4a:40:28:b4:bb:48:dd:
e7:b4:d8:3f:73:74:af:e0:18:64:af:6c:5e:f0:46:
5a:a2:eb:43:4d:4e:18:f0:d1:e9:cc:a5:b0:0f:db:
51:1e:6f:23:aa:89:f4:d4:ce:6e:bf:56:fe:8c:1b:
45:c9:76:b1:72:20:ac:dc:c0:e2:53:31:f8:2b:89:
2e:cf:d0:99:1a:a9:d1:7e:b6:80:d9:47:d2:f2:b4:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FD:19:69:30:5A:60:FE:13:78:42:8E:C7:9E:A0:D2:77:64:91:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146380.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae92::/32
Signature Algorithm: sha256WithRSAEncryption
0b:3b:1c:8f:89:cb:1f:05:68:db:4f:e6:27:4f:51:53:a6:e9:
41:29:c5:3b:be:61:e4:38:33:04:75:ca:c9:8c:9b:8c:9a:c4:
b6:b9:3e:76:3c:2c:fc:0b:88:b4:8f:31:63:a4:76:18:e7:5b:
d3:db:40:ea:50:cd:ce:73:14:e0:3d:2e:cb:bb:dd:cd:bd:cf:
21:f6:32:0e:71:2d:18:04:58:ab:73:c7:4d:44:9e:ac:18:5f:
78:e2:af:54:f1:e2:96:57:1e:14:93:d8:b4:c4:25:3f:b9:3d:
cb:52:e4:b8:47:af:e6:54:89:9c:46:43:84:b6:94:0a:0d:4a:
fd:02:39:2a:f5:44:6e:da:9b:7f:45:50:21:ab:eb:d3:fd:49:
97:10:00:03:41:a0:6a:ee:f5:f3:df:44:08:eb:4c:ff:d6:79:
7b:f8:8d:01:25:32:f3:c5:55:c6:04:05:7e:a3:ea:0e:ef:22:
3d:37:64:9a:f2:f1:b1:bd:4d:20:53:a7:98:02:18:29:83:b9:
e0:3b:d9:e9:84:46:12:cf:20:0a:15:45:c0:16:d9:35:30:90:
1b:a1:73:b7:1f:17:30:ce:f7:e7:3d:ba:3a:3d:46:ca:b0:51:
0a:db:ff:38:94:fe:d0:3e:2d:56:1e:5e:ae:8d:0f:75:44:c6:
13:19:6c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:35 2026 by rpki-client