Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146391.roa
File: AS146391.roa (raw, json)
Hash identifier: cvjc9lWzcJkqOcEmdvve71ql57RTWR6GF8AumcBV83Y=
Subject key identifier: 0D:1E:4A:AF:6D:F8:8D:89:E1:CC:4A:52:27:50:1D:5B:D5:97:95:6F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 710DFB485ACD9895275CE37319BCE1AF8FA9E05B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146391.roa
Signing time: Mon 25 May 2026 01:51:33 +0000
ROA not before: Mon 25 May 2026 01:46:33 +0000
ROA not after: Mon 24 May 2027 01:51:33 +0000
asID: 146391
IP address blocks: 240a:ae9d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0d:fb:48:5a:cd:98:95:27:5c:e3:73:19:bc:e1:af:8f:a9:e0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:33 2026 GMT
Not After : May 24 01:51:33 2027 GMT
Subject: CN=0D1E4AAF6DF88D89E1CC4A5227501D5BD597956F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:5b:8a:fe:30:d5:bd:16:92:af:68:2d:3a:
6b:e8:fb:5b:da:64:7e:21:d9:d1:47:e0:dd:8a:c5:
20:80:e1:03:c7:3e:5e:2c:6a:06:0f:0d:2b:0b:88:
c9:1e:12:f0:f3:8d:4b:86:39:5b:a5:53:da:ea:b1:
e2:d7:14:6a:5e:d8:28:d1:0d:dc:6c:57:10:f3:9a:
ed:d6:b5:4b:c8:7e:3a:0b:21:e0:e1:be:fb:1c:27:
4b:e3:45:68:e6:6a:a8:6b:67:cd:93:70:87:89:ee:
19:22:08:4a:7b:aa:80:09:b0:11:49:61:bc:74:e3:
00:1b:43:a3:16:20:9e:f4:fc:fe:1a:6e:9f:a3:7d:
55:6c:9c:18:45:bb:a6:83:b9:69:38:1a:46:8f:6e:
00:a8:82:94:7a:f9:1d:a0:b9:f2:3f:c3:3a:d5:fe:
fb:56:67:fc:cb:2d:f9:05:d2:f9:12:fe:8b:d6:3f:
44:aa:d3:f6:ab:16:b0:83:b4:a1:b9:a6:b6:17:fb:
96:e8:99:10:a4:84:c2:30:90:94:23:9c:89:f8:d8:
a8:60:05:f5:e2:58:ee:62:f7:2d:bd:5f:1f:6a:c0:
c9:83:01:f7:fa:47:49:9a:cc:69:7e:f4:30:41:a8:
b2:4e:72:d2:a4:92:b1:9d:85:e0:59:69:63:02:20:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1E:4A:AF:6D:F8:8D:89:E1:CC:4A:52:27:50:1D:5B:D5:97:95:6F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae9d::/32
Signature Algorithm: sha256WithRSAEncryption
5e:c2:8b:c5:b5:6b:e3:c8:ce:fa:a4:47:3f:a5:79:35:c8:67:
8a:68:fc:0c:0c:44:84:a0:c1:d1:7f:b2:5e:df:bf:e1:63:a9:
0f:01:9e:12:17:98:c5:dd:66:91:6f:69:18:3b:0a:53:ed:4c:
82:cd:b3:5a:64:da:94:7b:74:d5:8a:e1:2f:d5:01:38:78:c0:
2f:1e:8f:a2:01:59:79:22:32:2f:fa:47:e8:03:df:ba:fc:ac:
66:33:f9:5c:96:63:70:80:bc:db:ba:4b:e4:15:15:ab:fa:1b:
9e:c4:73:a4:a2:04:92:a2:49:38:dd:33:b3:c3:68:6a:fe:44:
ea:f2:84:b0:ce:8d:76:cf:d6:30:da:c9:07:86:56:32:ee:fe:
97:39:21:f1:f6:a4:6f:37:ba:63:99:ca:be:40:09:34:22:7d:
09:32:b9:6e:00:8c:b8:8d:3d:20:85:b1:2f:97:43:78:9d:b6:
c5:e5:a2:04:fb:b9:40:14:d2:86:0c:76:38:54:56:9d:e9:a2:
24:10:dc:f8:d8:99:14:21:fc:0a:d9:1d:d3:ca:91:ce:1a:35:
be:af:5b:51:9e:2a:2b:eb:7d:38:76:06:dc:a9:18:0f:ff:04:
ac:ca:e6:e1:54:3b:0c:c4:f3:8b:d6:51:7e:04:7c:b7:ad:f4:
c2:5d:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:29 2026 by rpki-client