Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146385.roa
File: AS146385.roa (raw, json)
Hash identifier: W6VrA8k96EiX3n3fkpTNSTuMhMd3scEFwYkhEXKu4fE=
Subject key identifier: DB:05:E3:CF:45:13:03:ED:2B:A6:C6:4F:CC:82:15:25:D7:1B:FD:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D68225C12CF8B1A4E1A2C9EA82586F8668DF4E0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146385.roa
Signing time: Mon 25 May 2026 01:51:29 +0000
ROA not before: Mon 25 May 2026 01:46:29 +0000
ROA not after: Mon 24 May 2027 01:51:29 +0000
asID: 146385
IP address blocks: 240a:ae97::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:68:22:5c:12:cf:8b:1a:4e:1a:2c:9e:a8:25:86:f8:66:8d:f4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:29 2026 GMT
Not After : May 24 01:51:29 2027 GMT
Subject: CN=DB05E3CF451303ED2BA6C64FCC821525D71BFD20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:f2:08:25:bb:41:8b:d6:78:3e:b8:bf:0d:
c6:03:22:68:04:2c:81:04:8d:8c:99:00:8e:7f:ff:
d3:7a:82:a4:31:52:95:19:75:0b:0d:be:3f:19:6b:
7e:c1:5b:07:c5:c2:b4:ca:78:41:7f:84:76:da:92:
52:1c:a1:7e:56:c4:1d:71:07:97:4e:22:7d:48:f8:
c3:6a:06:19:a6:a2:fb:09:f9:03:19:ee:29:bc:34:
1d:53:05:48:02:c9:8c:2a:03:6a:c7:88:1d:3d:61:
98:6a:76:a4:90:da:45:20:fb:01:90:9c:67:c4:28:
a6:85:9d:12:ca:33:1c:59:ed:c4:12:fa:a2:a5:bf:
91:3d:5c:a5:73:ed:74:54:29:d8:22:00:02:9a:4c:
78:c7:ab:c4:03:54:ba:0a:d2:ca:02:7b:73:a3:94:
6d:6b:50:d5:2c:1d:5a:ad:3a:23:ae:0d:4e:49:b7:
42:43:98:8f:75:05:03:21:29:f8:39:4a:cd:ee:30:
ce:0b:37:ce:a0:ac:c1:61:e3:5d:e5:eb:74:88:b1:
d9:b5:f9:09:82:cf:db:46:52:58:93:c0:f0:a4:35:
e2:54:c8:a3:72:e2:05:ff:2d:b0:39:1f:68:2a:c3:
53:f2:92:99:67:42:d4:a7:4d:4d:14:54:04:8f:73:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:E3:CF:45:13:03:ED:2B:A6:C6:4F:CC:82:15:25:D7:1B:FD:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae97::/32
Signature Algorithm: sha256WithRSAEncryption
b3:22:14:6d:57:14:07:f5:38:28:e9:f4:ff:8d:5e:93:6e:7e:
08:08:90:6b:2c:06:53:7a:93:52:99:ea:00:1d:f0:6e:2e:e8:
cf:e9:db:9a:8e:ab:6f:10:78:e0:b9:ca:86:48:17:ec:cd:6e:
43:7e:2a:3e:50:56:7f:17:4e:7d:21:44:e0:2d:c6:d2:fc:b3:
fd:5f:ce:f4:33:5b:28:69:98:19:9a:d7:29:4a:aa:7b:2b:a4:
4f:be:6e:10:7e:9c:fa:2f:0a:57:a3:e3:9b:62:c8:41:bd:28:
17:cb:df:77:b9:93:1d:79:ad:18:32:0c:dd:34:86:b1:61:ff:
b5:c9:ac:bf:8b:c1:58:ab:e6:a1:0f:5a:e4:9a:16:ce:91:eb:
89:0c:cb:84:0a:b5:c4:3d:36:d8:dc:d1:e2:98:03:b5:9d:ff:
45:20:de:e4:bf:79:fc:1d:a8:24:61:e1:64:a8:48:5e:21:f8:
78:3c:06:21:78:9e:eb:7b:bb:3e:cc:22:3e:27:22:24:df:6b:
2c:5f:f0:d2:41:36:c3:2e:4d:41:d9:ea:de:db:de:5b:4b:f4:
6b:55:1c:67:05:88:6d:b4:b0:55:35:f3:d3:4d:98:59:b5:b1:
92:df:c2:94:e6:b3:9c:1b:68:22:f6:3b:de:82:27:4f:4c:02:
15:42:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:41 2026 by rpki-client