Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146468.roa
File: AS146468.roa (raw, json)
Hash identifier: OAtggYTLJvlklF8X4+enaoNSyEynfS/e39K/sfaRijc=
Subject key identifier: 12:77:90:68:39:08:37:B2:88:EA:CC:44:A9:7C:A1:20:EA:F6:AE:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5333364548AD370C02343E8670885D73E83098B0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146468.roa
Signing time: Fri 22 May 2026 07:40:53 +0000
ROA not before: Fri 22 May 2026 07:35:53 +0000
ROA not after: Fri 21 May 2027 07:40:53 +0000
asID: 146468
IP address blocks: 240a:aeea::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:33:36:45:48:ad:37:0c:02:34:3e:86:70:88:5d:73:e8:30:98:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:53 2026 GMT
Not After : May 21 07:40:53 2027 GMT
Subject: CN=12779068390837B288EACC44A97CA120EAF6AE91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:9f:2a:d3:07:51:49:ca:64:64:c3:1e:ae:
d1:fe:9e:91:69:b0:74:15:d0:b8:f4:82:b8:6f:6c:
92:34:8d:32:30:70:a6:2e:a5:b2:6c:2d:ad:de:0d:
49:c9:59:76:2a:da:8d:15:0d:b0:be:8e:6c:96:32:
aa:24:88:32:71:81:64:90:bb:50:a5:bd:6b:d1:c8:
17:81:42:0b:47:30:57:6f:b3:4e:54:db:41:eb:c6:
db:cf:44:b6:1c:ca:35:cf:d0:07:80:cb:41:3a:97:
7a:7e:af:0c:8b:06:6d:6d:8f:4c:5d:a0:b2:54:0f:
48:59:32:bf:09:f4:91:77:a7:cf:f0:48:2d:48:76:
0f:be:e2:a6:d6:11:67:c6:a7:6b:d4:e5:b3:9c:60:
e5:3e:06:32:e3:3e:cb:de:af:72:a2:01:c6:bf:53:
f7:56:19:04:ad:05:15:70:46:5d:70:22:1a:72:be:
66:b5:86:a4:39:d8:23:75:76:b2:1b:44:e4:9c:f3:
1f:e0:ba:58:b4:48:3e:89:34:b5:bf:e8:ad:8b:f3:
27:13:4c:c1:de:b0:f4:21:f3:47:95:87:14:3c:d1:
e1:8f:50:91:c3:57:86:34:1c:ae:4f:a6:36:f5:37:
e0:b8:05:71:9f:93:8b:39:01:f5:1c:fb:c6:25:2a:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:77:90:68:39:08:37:B2:88:EA:CC:44:A9:7C:A1:20:EA:F6:AE:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146468.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeea::/32
Signature Algorithm: sha256WithRSAEncryption
1a:6b:4a:2a:50:72:54:2f:b5:a6:e6:54:30:9b:0e:bd:af:c5:
3d:d3:87:65:61:3a:26:7d:1d:26:5c:31:fa:64:46:e6:58:e8:
42:fc:79:c4:78:2e:03:14:e3:3b:f3:4a:14:3f:e4:66:45:54:
68:4e:54:cf:80:3c:52:80:74:41:54:75:c7:5b:11:85:f1:04:
03:29:32:c8:9a:d7:40:ba:3f:74:62:0b:80:4f:9e:a6:99:70:
2b:7d:01:91:7c:cf:a2:2e:10:7b:8c:75:0f:70:85:1b:cd:26:
bd:74:35:bf:fd:45:b8:4c:2b:f9:dd:28:cd:89:97:5e:0f:60:
69:b8:cb:be:c5:83:9f:cc:6d:87:05:37:da:94:53:e0:56:3e:
f2:10:d1:13:ab:1b:1c:32:bf:4f:d8:a9:ee:bd:fd:af:76:6f:
d8:0c:71:d2:59:fa:3e:2d:10:e7:5f:d8:1b:2e:c3:34:8e:be:
8f:0e:fb:97:b3:df:ef:06:e0:02:56:30:cb:2d:a9:6a:1c:f0:
36:87:d3:c5:8f:35:dd:35:dd:34:5c:80:00:04:37:13:4b:c8:
f9:aa:0b:c5:f5:2c:cc:98:2f:26:fe:59:d4:66:50:50:8d:24:
0f:e9:8d:66:dc:b5:d5:6a:89:4d:79:4c:51:67:80:7f:13:68:
3b:c9:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:36 2026 by rpki-client