Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146446.roa
File: AS146446.roa (raw, json)
Hash identifier: iCdnpBXHFUCPDaPrxF2uM01jFeQFiW2h7+9CMFMjeI0=
Subject key identifier: CB:D3:E1:57:6D:BF:7A:47:19:06:CD:21:ED:7C:23:88:9B:FF:80:CC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2749F623FF1A3ABA64A941BC372EE9021169D600
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146446.roa
Signing time: Fri 22 May 2026 06:05:19 +0000
ROA not before: Fri 22 May 2026 06:00:19 +0000
ROA not after: Fri 21 May 2027 06:05:19 +0000
asID: 146446
IP address blocks: 240a:aed4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:49:f6:23:ff:1a:3a:ba:64:a9:41:bc:37:2e:e9:02:11:69:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:19 2026 GMT
Not After : May 21 06:05:19 2027 GMT
Subject: CN=CBD3E1576DBF7A471906CD21ED7C23889BFF80CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:d1:41:3d:a5:40:26:11:5a:fc:0d:0a:29:
1c:20:e7:28:cc:35:2f:c1:64:4d:b3:08:90:ce:ae:
e6:f3:ce:a5:63:ce:59:aa:7c:b6:17:bf:55:ad:5c:
29:72:43:5a:3d:c5:ea:75:8f:2e:0c:90:55:60:90:
94:e6:c9:cb:74:c1:19:a2:7a:ef:6b:9f:96:0c:31:
5d:53:59:cd:bd:f2:bd:57:5a:ac:1d:41:87:87:5d:
76:b6:06:1a:17:77:59:c0:85:25:2d:7e:b5:ba:93:
b4:4f:9b:18:70:ac:8d:cf:fd:e3:3e:31:e2:a3:b4:
46:d4:ed:c2:b3:2b:e3:62:c3:42:43:d8:23:c2:01:
a3:45:cb:7b:7d:69:2c:1b:92:a3:56:c7:71:0e:0f:
5e:79:bb:07:db:9d:81:36:82:70:2d:fa:10:ea:75:
81:6d:3a:ae:ad:79:8b:db:7e:6f:b6:91:bc:d2:d9:
53:71:57:34:40:13:65:6a:ad:12:75:e1:b6:bf:59:
f8:65:d4:8f:26:1d:c9:c2:45:23:93:35:da:ed:e3:
6f:14:03:9f:34:ef:56:ad:02:07:32:4f:8a:a8:ad:
76:07:c7:44:a1:1a:4b:49:9e:1b:7b:c2:7d:f0:f0:
35:4d:8e:0d:38:cc:ba:e0:e6:dc:35:2d:9b:e0:9d:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:E1:57:6D:BF:7A:47:19:06:CD:21:ED:7C:23:88:9B:FF:80:CC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aed4::/32
Signature Algorithm: sha256WithRSAEncryption
ac:bf:e7:31:53:c5:61:3e:54:03:ad:58:9b:10:91:6a:cf:f5:
ef:b8:3d:62:cd:11:ef:b0:b0:11:6f:c2:13:5d:ac:8e:91:a4:
97:47:97:0a:bf:a1:30:5a:b2:f3:a1:2f:3b:ae:86:4a:a3:61:
b7:f1:a2:c5:fa:02:fc:47:4d:3e:e6:46:29:a7:3e:0b:85:f3:
a5:61:de:21:7d:30:96:29:60:72:f0:a0:97:d4:85:66:f4:97:
d8:aa:99:f0:bd:ae:fd:2f:4e:7f:bb:2b:21:2c:4d:eb:fb:a1:
5f:1c:e9:ae:4a:09:96:c5:ff:63:59:84:8e:1d:5a:59:c8:71:
ea:b2:34:98:fa:6d:c9:ba:eb:cc:ad:b0:03:5c:32:83:3d:92:
03:ce:39:85:f5:e5:ce:38:64:4b:5e:3e:b4:5a:9e:f3:11:c5:
07:bf:eb:7f:dc:a5:3f:75:8f:c9:0f:91:d3:d1:21:e2:44:21:
d5:ff:f6:75:4c:f8:ce:ac:63:81:99:ae:61:f3:0f:a9:3c:2d:
aa:ea:ec:6b:6c:0f:34:dc:49:9b:b2:4c:f6:3f:12:2f:d5:d7:
e5:dd:cf:ed:3b:b0:50:05:50:14:07:7f:58:07:ab:a2:b6:82:
df:f9:e0:00:77:03:78:91:de:8e:f7:6d:ae:8f:fb:e8:30:a7:
9a:81:55:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:44 2026 by rpki-client