Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146387.roa
File: AS146387.roa (raw, json)
Hash identifier: lGXZaeALcMI0fkq3hd04zNuXqk+x9HRglXxJIXoWBMc=
Subject key identifier: 69:DE:B1:1B:D7:CF:2A:53:56:6F:4D:73:FF:74:CA:26:AB:D1:95:04
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D1A9D5ECFC3ED4C998725A1311337A11C486C22
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146387.roa
Signing time: Mon 25 May 2026 01:19:56 +0000
ROA not before: Mon 25 May 2026 01:14:56 +0000
ROA not after: Mon 24 May 2027 01:19:56 +0000
asID: 146387
IP address blocks: 240a:ae99::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1a:9d:5e:cf:c3:ed:4c:99:87:25:a1:31:13:37:a1:1c:48:6c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:56 2026 GMT
Not After : May 24 01:19:56 2027 GMT
Subject: CN=69DEB11BD7CF2A53566F4D73FF74CA26ABD19504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:ef:0e:e1:8f:12:3d:df:62:02:fa:68:24:
63:80:7a:95:de:bd:b1:15:d0:68:67:15:7d:3c:94:
2f:7b:14:f4:18:a5:59:e0:38:bd:63:ab:a4:69:43:
1c:91:09:c4:ba:3a:49:b6:6d:f8:a1:81:54:b3:e1:
a0:ab:b9:b0:36:c3:a9:ca:0b:38:8d:dc:55:dd:1b:
e8:bb:35:13:68:5a:f3:d6:10:ad:81:32:b6:e4:11:
d8:33:b9:e8:74:bc:d0:69:b9:7b:9c:08:52:0e:1b:
65:1f:96:8b:e1:ac:3b:a5:c1:c0:1b:e9:6f:84:5c:
cb:ab:c0:f3:d1:aa:a2:c6:1a:e9:94:a2:c8:19:df:
4e:ad:5c:a6:8c:1d:ed:5e:1c:f6:18:c9:f0:23:26:
f4:d0:36:ff:95:ff:e4:00:b2:0b:61:b7:62:28:24:
10:14:fc:66:77:32:a0:fa:fc:85:c4:7d:23:2f:ad:
da:4f:ee:43:a3:61:8c:d1:8e:90:0f:b6:b0:a7:89:
02:c8:30:81:69:b4:4a:f7:a8:29:5e:47:88:af:9d:
d9:3b:19:76:fb:30:e7:7d:a5:e2:36:7a:3f:f1:5c:
ee:e6:9e:69:b9:2b:c7:b2:92:b1:46:68:92:c6:43:
31:59:13:f9:0c:e8:6b:70:59:a6:ad:48:58:54:fc:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DE:B1:1B:D7:CF:2A:53:56:6F:4D:73:FF:74:CA:26:AB:D1:95:04
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae99::/32
Signature Algorithm: sha256WithRSAEncryption
a3:21:49:a2:35:5b:e9:03:a5:01:b4:f5:e2:21:5e:63:91:56:
00:38:c9:a8:b9:a9:58:d2:77:5c:c2:31:b1:e7:f0:8f:2a:5b:
04:93:3b:b5:93:47:1f:fc:f1:df:c3:c9:20:a6:07:93:f1:f9:
23:be:43:77:57:a0:c3:85:b5:2c:79:74:d0:7c:da:af:d1:76:
10:64:b5:0f:d2:6d:50:16:32:91:b7:f5:cf:fb:25:2c:ac:a3:
83:48:7d:ab:92:6d:0d:ed:24:f9:a3:d1:6e:3d:b6:8b:fb:ef:
f6:9e:5c:e7:3c:d5:98:c3:f9:90:db:ef:b8:83:ca:82:ec:a7:
eb:f5:43:87:4d:14:3d:c3:a8:42:96:c6:98:95:ab:b3:4e:8f:
6b:4e:9c:a4:b3:bf:de:85:76:0f:af:ea:1f:28:37:96:1f:00:
66:7b:2a:79:2e:97:d3:36:57:96:d5:52:07:7c:8e:25:a6:21:
66:f6:91:04:2a:3f:2e:c9:29:2e:99:43:34:0b:f2:ad:8c:8b:
21:3a:ab:48:f0:41:93:b6:5b:49:3d:9e:ed:65:53:60:a0:05:
22:37:67:b0:c2:61:61:ef:81:11:fe:dd:10:eb:f7:ba:22:68:
66:b4:99:1f:8f:7a:97:dc:73:15:75:aa:fb:55:b5:b2:53:3a:
c9:89:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:19 2026 by rpki-client