Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146409.roa
File: AS146409.roa (raw, json)
Hash identifier: nlMwH4ab/Fz+CZLtIjrj3QMSpQF0R6qrvOOPaNFI8Yk=
Subject key identifier: 5F:A8:9E:25:34:91:43:9D:BF:FE:79:3E:D2:BA:AB:6B:0A:AA:36:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 69CEFB501C2D32C72495757E9BA11C99185D0C43
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146409.roa
Signing time: Mon 25 May 2026 03:19:47 +0000
ROA not before: Mon 25 May 2026 03:14:47 +0000
ROA not after: Mon 24 May 2027 03:19:47 +0000
asID: 146409
IP address blocks: 240a:aeaf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ce:fb:50:1c:2d:32:c7:24:95:75:7e:9b:a1:1c:99:18:5d:0c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:47 2026 GMT
Not After : May 24 03:19:47 2027 GMT
Subject: CN=5FA89E253491439DBFFE793ED2BAAB6B0AAA361B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:4b:32:24:33:05:7e:bc:88:86:54:c9:5c:
8e:06:6e:62:b2:b8:e9:d5:8e:11:2e:63:03:e9:2f:
13:54:9f:65:48:04:5f:4e:9e:54:ac:51:85:40:f2:
16:8c:d5:6d:dc:54:f5:80:4b:38:40:9b:72:49:d8:
a8:1a:14:f7:fb:26:38:50:be:05:3d:67:46:ae:62:
05:29:b2:1d:e4:49:e2:c5:65:7f:72:fd:fe:9e:01:
8e:8f:ce:d6:2d:7b:18:3a:2c:99:b9:96:14:aa:77:
4d:c2:4e:52:29:9d:e6:c7:f7:fb:00:b1:bf:0e:2d:
27:df:05:82:82:90:29:47:c3:18:a1:b8:22:28:87:
48:8b:b3:a9:d5:3e:37:c7:9f:db:4b:d2:52:39:6d:
7c:8d:4d:a1:a6:34:fe:0a:19:d2:59:fc:b8:8e:26:
de:c1:9c:1d:4c:4d:b4:71:bb:4e:0e:8c:a5:3c:10:
9f:30:21:1b:7f:4c:ad:3b:a6:5f:fc:f2:47:b7:eb:
30:1a:7c:1d:bd:fe:e3:ce:b0:a2:7a:63:e4:77:84:
62:e0:ab:cc:57:ba:e0:5c:9e:4c:3f:78:64:91:34:
e7:1a:49:6c:17:ed:eb:b1:15:94:68:f1:2f:1d:2b:
88:cc:f1:36:8f:17:a5:b8:11:1b:46:a2:5e:5b:98:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:9E:25:34:91:43:9D:BF:FE:79:3E:D2:BA:AB:6B:0A:AA:36:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeaf::/32
Signature Algorithm: sha256WithRSAEncryption
1a:bd:63:c4:5b:a4:a2:5b:e0:a6:a2:de:33:7a:d1:5b:d8:e6:
7b:61:21:dd:0d:ec:dd:98:47:34:56:19:f7:39:d8:a2:f1:bb:
53:7d:60:7f:1e:5b:b9:3d:3a:09:0a:55:1e:ca:6a:56:a6:5e:
b3:5a:44:f9:e1:07:0b:de:38:04:46:eb:7b:77:11:1b:05:ba:
35:3a:3e:04:62:2d:c4:d2:64:ea:12:81:ca:8a:7f:9e:63:18:
ca:1c:2e:94:23:63:90:09:f8:53:07:65:ab:81:50:3b:71:81:
67:66:89:bd:cc:99:5e:e4:34:18:a4:fa:c1:e3:46:cb:df:81:
91:62:c2:5b:91:9e:f6:3b:83:f8:3c:d6:38:4d:a8:fd:99:0d:
f1:5c:c4:7d:6c:d6:b9:8c:3d:c5:57:7e:e5:98:30:c8:f4:31:
1b:9a:d8:33:65:9e:00:79:e0:2e:ab:76:5a:35:79:8e:9f:1c:
28:f4:a4:24:01:c0:de:14:40:19:07:e8:26:d6:3e:02:2f:10:
0f:c9:6e:66:e9:f3:c6:cf:74:fa:fb:73:5e:6d:6c:8b:b2:73:
6b:66:80:23:92:11:23:92:b5:a6:e8:3f:02:27:f4:10:27:d7:
9b:44:0c:25:ac:e7:c8:80:0c:1c:e5:8f:37:ba:a6:e0:0c:6a:
33:cd:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:46 2026 by rpki-client