Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146460.roa
File: AS146460.roa (raw, json)
Hash identifier: qOEHeN68tr4BwdwCcAlNuBOpjTzr9kMKsFV9afuBVzk=
Subject key identifier: 1B:BE:39:73:90:9E:18:7D:AB:52:43:6B:D8:EB:0A:77:07:EE:5F:E4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 441DB668609FCEB6609832AC2F3AF93FDE30394B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146460.roa
Signing time: Mon 25 May 2026 02:22:50 +0000
ROA not before: Mon 25 May 2026 02:17:50 +0000
ROA not after: Mon 24 May 2027 02:22:50 +0000
asID: 146460
IP address blocks: 240a:aee2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:1d:b6:68:60:9f:ce:b6:60:98:32:ac:2f:3a:f9:3f:de:30:39:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:50 2026 GMT
Not After : May 24 02:22:50 2027 GMT
Subject: CN=1BBE3973909E187DAB52436BD8EB0A7707EE5FE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:73:a9:bd:11:61:0b:17:32:13:f9:b7:2b:
4c:df:6d:da:73:2b:64:c7:03:9e:9c:d0:ff:79:e1:
70:67:f9:ef:47:74:72:bc:dd:b3:b2:f3:c5:75:f4:
05:72:9b:b8:82:b7:ea:7e:19:48:25:cc:f2:22:d5:
0a:0d:8c:aa:b6:a0:db:9a:91:e3:88:58:56:60:d4:
f1:81:e5:0a:36:32:e9:7b:33:7d:73:17:82:41:33:
2b:04:2b:56:59:d1:d8:71:79:1b:ca:ef:a6:bb:8f:
5b:6d:ba:6c:7a:7e:35:8e:4b:ec:9f:29:62:d1:59:
1b:cb:3a:70:1e:aa:10:ac:01:5b:0e:00:1b:e1:40:
40:45:6e:81:bd:b6:0e:9e:2a:1a:79:26:7e:7c:a9:
50:7e:70:ce:b3:2c:40:aa:7f:75:85:dc:e9:58:64:
da:ad:75:a2:72:32:4d:a1:94:01:24:57:51:e8:55:
6c:3c:96:29:bd:03:a1:23:d3:c7:cf:38:35:78:8b:
a7:4f:d3:40:6e:66:59:52:8d:da:6c:55:e0:97:4e:
4a:66:7e:49:50:71:86:a3:ba:a9:94:92:8c:73:9e:
7e:d3:32:f7:74:2f:a8:b8:a7:5c:df:a7:90:dc:ae:
a8:3e:cd:de:dc:bc:fa:eb:50:ac:28:4c:42:d6:6c:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:39:73:90:9E:18:7D:AB:52:43:6B:D8:EB:0A:77:07:EE:5F:E4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146460.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aee2::/32
Signature Algorithm: sha256WithRSAEncryption
71:2c:3d:88:de:49:24:dd:c2:3f:75:95:cf:eb:7a:03:ed:47:
24:1e:83:19:23:ff:9a:17:45:e4:b0:9c:cd:73:11:23:f9:d9:
2f:7e:97:40:25:67:cc:9d:ce:aa:26:57:b5:fb:d2:1a:16:d6:
aa:55:de:c7:3f:00:69:6f:ab:22:23:58:f0:41:95:e8:9c:70:
9a:75:69:cf:c7:8d:ad:17:15:60:6b:40:81:df:8d:6b:0a:8f:
3e:c4:17:dc:41:c9:fa:0e:72:15:b6:0b:8e:e9:88:0c:2e:99:
03:32:c3:11:76:dd:e4:57:10:be:3a:8a:0d:cc:ad:d3:38:d3:
83:38:46:a3:1a:43:79:c9:d0:c0:4d:2c:44:82:54:f5:f2:5c:
02:42:5b:5b:e7:06:61:60:ce:92:79:2e:00:78:26:aa:6f:5c:
d1:14:08:15:55:95:68:44:bb:14:51:12:6c:80:8f:97:aa:8f:
d6:61:a0:8b:c9:00:c1:50:ac:a2:be:ae:fd:71:45:21:3e:15:
00:7f:98:9c:6e:67:b4:f4:df:18:06:8e:60:3c:ae:0e:6f:ed:
cf:50:66:62:8d:0f:7e:54:be:ce:a2:c8:7a:08:5a:6b:00:b5:
af:14:f2:0c:50:c8:fc:f1:6b:a5:5e:cf:ae:2a:fe:36:14:84:
8d:a5:18:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:01 2026 by rpki-client