Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146415.roa
File: AS146415.roa (raw, json)
Hash identifier: DgMCQlN0auSO13D0eFiYO+RL9MeUqeFzZJ25oaoTdB4=
Subject key identifier: 1B:B3:00:86:4C:F6:5A:9D:C8:61:D2:AB:19:7B:FF:03:56:23:90:69
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6449E4AB9471B78D3252C45404D4ABDA9C8A941D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146415.roa
Signing time: Tue 26 May 2026 06:12:39 +0000
ROA not before: Tue 26 May 2026 06:07:39 +0000
ROA not after: Tue 25 May 2027 06:12:39 +0000
asID: 146415
IP address blocks: 240a:aeb5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:49:e4:ab:94:71:b7:8d:32:52:c4:54:04:d4:ab:da:9c:8a:94:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:39 2026 GMT
Not After : May 25 06:12:39 2027 GMT
Subject: CN=1BB300864CF65A9DC861D2AB197BFF0356239069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:91:2c:87:bf:d7:fa:56:68:ef:24:88:0f:d6:
08:3e:bd:b5:4a:0d:dc:e3:1d:f1:45:5a:5c:59:71:
a1:67:08:bf:97:47:23:74:b6:da:9b:6e:c2:f7:76:
4b:e0:a1:66:4f:7d:b5:67:fb:e7:b2:20:05:7d:1a:
4d:d2:63:f1:7e:b6:4b:a5:9e:d6:ae:57:f1:58:2d:
46:52:84:ab:47:a7:6b:f3:69:4d:d3:b2:25:6b:24:
58:70:92:d2:d8:f5:2d:96:39:fe:c6:5e:83:77:3a:
77:b8:ff:73:6d:22:0c:76:23:79:80:19:79:e0:0a:
88:e6:f3:62:5f:15:34:df:c1:57:fe:ae:a3:60:9f:
41:6d:09:b2:26:9e:4c:61:2c:f0:64:11:f1:02:79:
62:7a:9a:ed:90:db:e9:f7:22:2b:f5:52:cc:87:86:
2d:00:32:86:a9:6e:af:31:ef:29:f7:83:63:3a:ee:
9b:01:68:df:6c:1b:30:9f:c5:ad:0f:30:54:7a:1b:
71:d1:f5:a5:cc:04:4d:31:8b:22:0e:ef:79:bd:10:
6b:6c:69:06:a5:47:fb:72:d5:74:fc:7a:26:7a:dc:
66:05:08:d7:88:00:af:fd:d2:45:f3:28:d5:d7:48:
ee:0f:49:a3:20:f6:59:d3:a7:02:47:ce:25:13:e6:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B3:00:86:4C:F6:5A:9D:C8:61:D2:AB:19:7B:FF:03:56:23:90:69
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeb5::/32
Signature Algorithm: sha256WithRSAEncryption
5e:a0:59:66:8c:7b:4b:48:f3:7f:2d:dd:61:1c:b3:ef:52:cf:
6e:2d:27:ce:b0:23:50:85:49:48:57:08:fa:b6:1e:6d:73:cf:
7d:36:a7:9d:fc:ce:84:6a:14:f6:53:27:1c:ff:5e:85:e6:04:
cf:f8:c0:e4:40:b7:1a:62:18:11:2e:6b:e0:d0:75:cd:75:ae:
43:5e:dc:4b:f8:1a:03:dd:f0:19:e3:bc:e9:30:c6:84:9a:e7:
d5:10:e3:05:2e:8e:82:bc:a6:9a:52:b3:40:96:22:94:82:c5:
76:17:bc:d6:46:65:59:ef:ba:50:4c:d8:08:20:c7:3f:97:39:
70:fb:1d:b5:bd:63:be:32:f8:20:a4:f7:c8:65:a2:7e:3e:d4:
b6:2d:a6:56:db:ae:20:31:05:92:33:44:c9:be:97:d2:39:9b:
7b:32:7b:59:74:62:08:ea:77:12:7f:62:e2:47:e4:ef:e3:ab:
d3:7e:ce:de:65:42:7b:b9:84:2e:75:88:64:85:42:ea:b3:ba:
bf:dc:7e:d6:80:54:0e:72:6e:02:4c:d4:5f:20:72:a0:0e:8d:
b4:ed:52:f9:53:b2:53:19:a5:ce:f0:65:cb:20:e2:a3:7e:eb:
b6:17:71:0c:ec:65:e9:b3:2c:69:f8:a1:a0:9c:c0:6c:16:57:
fd:e0:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:10 2026 by rpki-client