Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146447.roa
File: AS146447.roa (raw, json)
Hash identifier: gyTPkOdfGMLYif8+s5kgin7zB8/npqRde1n+g/XiGbc=
Subject key identifier: 09:0A:65:3D:00:73:38:25:E9:2D:A0:7D:89:FE:5E:3B:EF:9E:57:AF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D683A59F79699C7157297B9BB8CFCB8EFB38545
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146447.roa
Signing time: Mon 25 May 2026 02:22:20 +0000
ROA not before: Mon 25 May 2026 02:17:20 +0000
ROA not after: Mon 24 May 2027 02:22:20 +0000
asID: 146447
IP address blocks: 240a:aed5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:68:3a:59:f7:96:99:c7:15:72:97:b9:bb:8c:fc:b8:ef:b3:85:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:20 2026 GMT
Not After : May 24 02:22:20 2027 GMT
Subject: CN=090A653D00733825E92DA07D89FE5E3BEF9E57AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:67:08:a1:82:34:c5:30:88:fa:fc:ae:b3:
16:71:1b:ba:34:53:83:eb:13:69:e5:38:27:47:25:
2e:86:9c:84:ed:1c:58:5c:0f:17:2a:05:c9:f3:18:
3d:2e:9d:e1:4f:9a:f0:6f:9a:47:77:d7:f2:68:00:
45:b0:2b:ba:39:b9:43:00:29:cf:7c:c8:69:f9:f4:
c6:57:21:97:00:97:23:f7:86:89:7a:69:b6:89:ef:
83:3a:0a:7e:bc:d6:42:77:8e:ee:d5:ee:dd:74:75:
d3:78:ab:89:f9:07:ac:97:f1:e9:aa:c6:d9:29:36:
bc:a5:3f:19:81:96:30:20:81:75:b2:c3:04:66:d5:
a6:ce:fb:b0:06:07:cc:8c:e7:4b:cc:66:f9:08:79:
16:a3:72:b4:34:32:fa:2f:d0:15:a8:d7:31:66:6c:
99:f6:c7:f8:9d:f9:78:4c:b1:d8:13:bb:4b:71:11:
ed:9a:3d:c1:94:62:6c:88:98:59:71:5a:b9:21:fb:
22:15:1e:aa:ff:b4:12:84:62:6c:d8:68:a0:f0:79:
41:2f:05:00:bb:28:28:22:d8:db:f6:52:2f:13:a6:
a6:69:e6:38:ce:22:01:78:cf:95:c3:86:b0:65:9d:
c5:ee:58:33:b6:9b:48:b6:fa:f0:03:a0:0b:c9:0f:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0A:65:3D:00:73:38:25:E9:2D:A0:7D:89:FE:5E:3B:EF:9E:57:AF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aed5::/32
Signature Algorithm: sha256WithRSAEncryption
50:13:23:a4:9a:fd:d7:60:d4:8a:d1:e1:d4:b2:1b:e8:e1:66:
70:e7:ea:42:2b:e4:b3:0f:4c:d3:2b:36:a7:9f:2e:ba:f5:c9:
2d:59:0c:f9:d8:5c:a6:a8:fc:c6:18:bb:53:86:bb:d6:e4:6e:
e4:4a:e6:42:b0:f0:da:66:43:08:f5:20:52:14:33:b9:a6:aa:
e7:31:e6:26:33:60:56:a3:a6:03:09:f6:ab:75:0c:d7:ac:72:
e3:1f:1e:47:6d:f3:d6:5f:af:2f:1f:f1:79:26:1b:6f:00:97:
97:42:50:12:bc:9a:ee:1b:e3:6a:97:29:89:96:db:67:ee:dc:
74:6b:59:2a:ad:5b:0f:fc:a7:37:14:e8:86:9c:98:4a:13:76:
3e:c3:ae:da:9e:2e:9a:22:8b:d6:e8:cd:33:d3:dd:f7:e3:5f:
1b:8b:4d:75:f2:d5:41:09:42:7c:67:6e:87:d9:02:11:aa:09:
98:1a:79:db:32:24:a2:cc:14:da:ff:a1:38:d7:d6:aa:b2:00:
0a:a5:bf:83:f5:ed:1d:57:38:a6:38:4b:ea:0e:ea:f0:af:75:
53:89:c3:c4:6a:3d:3e:74:9a:d3:70:81:40:14:13:12:cc:f1:
3c:13:31:43:0d:20:0f:b3:3e:2e:89:3f:d7:27:ae:8e:96:60:
68:0f:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client