Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146413.roa
File: AS146413.roa (raw, json)
Hash identifier: PPrqkxPrdafAVEx6PdsFLApzZxuPmtnCco60rhOCE88=
Subject key identifier: 82:F4:10:A0:84:55:37:06:20:2D:C0:51:15:FB:1C:C7:39:5C:66:A8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 536B39EACE5374FAAC75D3317BE4AF2E985A925F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146413.roa
Signing time: Fri 22 May 2026 07:41:03 +0000
ROA not before: Fri 22 May 2026 07:36:03 +0000
ROA not after: Fri 21 May 2027 07:41:03 +0000
asID: 146413
IP address blocks: 240a:aeb3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6b:39:ea:ce:53:74:fa:ac:75:d3:31:7b:e4:af:2e:98:5a:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:03 2026 GMT
Not After : May 21 07:41:03 2027 GMT
Subject: CN=82F410A084553706202DC05115FB1CC7395C66A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:b1:98:93:71:d3:97:79:fb:ac:d8:ab:e1:
ee:24:56:22:db:b0:6d:11:fe:4b:0a:e7:0d:29:09:
ff:7f:6d:92:cd:39:9f:a6:76:37:a7:c7:11:d7:13:
55:0d:c9:c2:bb:c4:8c:e8:e6:a3:86:94:8c:63:96:
29:df:26:6e:8f:64:40:f1:d0:85:71:30:2e:a9:43:
f7:f6:38:ac:f1:5a:05:36:95:7d:33:0d:c1:1f:2c:
fa:b6:aa:48:e9:9f:a1:42:83:bd:42:7f:e3:10:58:
88:18:7e:7d:f3:1a:47:27:34:d0:48:b8:c7:b9:0a:
19:cb:98:34:1b:7e:d8:47:93:b2:78:69:a4:0f:54:
b3:01:60:5b:ee:cc:88:32:d4:b9:13:55:2b:3c:61:
84:61:4c:89:0f:10:f7:76:a8:0e:94:cc:11:f4:9e:
fe:57:80:89:e6:35:a9:2c:81:c8:5d:06:f1:a7:4f:
95:a5:53:d2:be:b1:ac:6e:49:46:df:48:1f:d7:4e:
e5:b4:36:e0:10:f8:2b:f4:57:14:1c:f5:2c:8a:5b:
d8:fe:55:a3:02:cf:9f:bc:17:91:0b:05:84:41:c6:
84:c4:48:e2:fb:92:16:b5:3f:1f:ce:50:b4:39:1b:
c0:0c:80:cf:a9:c9:c8:49:0c:19:cc:eb:5d:17:ec:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F4:10:A0:84:55:37:06:20:2D:C0:51:15:FB:1C:C7:39:5C:66:A8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146413.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeb3::/32
Signature Algorithm: sha256WithRSAEncryption
80:91:b3:b8:a2:3a:53:e7:94:9d:e6:47:80:a2:c9:db:1c:9b:
9b:78:dc:d7:03:c9:d1:80:c8:49:b9:a0:80:92:c5:f1:8b:c7:
51:e4:b4:4a:a5:8f:db:95:bf:dd:aa:91:97:09:a5:6e:16:38:
0c:fb:ef:f1:c8:09:97:c1:77:0a:89:76:a9:ca:84:a1:e0:ca:
c7:04:62:c8:a4:26:ea:9b:4c:31:be:44:da:20:d2:3b:d8:c8:
1f:d9:9f:bc:b6:0e:7a:28:f3:07:1e:69:72:a6:26:30:3c:24:
87:9b:5a:dc:8f:28:2f:08:a6:0e:fe:4d:34:55:a3:71:05:a9:
36:12:36:f3:4e:32:1d:c0:68:92:b5:88:c7:07:af:f8:73:13:
53:fc:3b:ed:74:d2:f8:30:f6:be:31:5a:75:7e:17:e1:70:88:
29:cb:d1:12:c1:37:83:46:0b:b5:c3:2c:cb:8e:5f:ca:b7:1d:
88:f7:6b:ac:60:f2:f3:9f:92:02:a9:5c:bd:fc:aa:be:18:58:
41:a9:fd:8a:ca:3e:cf:04:d5:21:e0:58:9a:74:4d:e5:fc:bf:
30:85:f3:5b:9c:7f:63:2d:72:c3:8e:98:0d:4f:3c:25:5a:50:
87:68:8b:f7:d2:61:f9:69:7f:d8:db:b4:b8:e0:35:19:ab:2c:
12:f1:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:19 2026 by rpki-client