Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146480.roa
File: AS146480.roa (raw, json)
Hash identifier: nsh5Z6ra0PRC0QfFGCCeZMl1HtlHKoIJJ+dCsYCBlFA=
Subject key identifier: 22:C9:51:9C:0A:9C:AE:AA:7A:BD:55:1A:A3:7D:B9:A1:84:FB:4C:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 53A187B42D5720F10EAAA88BDFAB52911FBF1327
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146480.roa
Signing time: Fri 22 May 2026 07:24:35 +0000
ROA not before: Fri 22 May 2026 07:19:35 +0000
ROA not after: Fri 21 May 2027 07:24:35 +0000
asID: 146480
IP address blocks: 240a:aef6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a1:87:b4:2d:57:20:f1:0e:aa:a8:8b:df:ab:52:91:1f:bf:13:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:35 2026 GMT
Not After : May 21 07:24:35 2027 GMT
Subject: CN=22C9519C0A9CAEAA7ABD551AA37DB9A184FB4C3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:c5:7c:aa:d4:1b:3a:11:6e:27:43:b4:7f:
86:57:31:6e:6f:47:ac:9d:b0:28:08:1c:f1:f7:c8:
be:c3:62:61:66:44:bd:8a:fb:d3:2b:7d:48:65:2c:
64:a3:55:30:9a:0a:46:01:76:cc:75:da:31:e5:3b:
3b:b5:5a:f7:e0:02:25:e6:ba:bb:f9:05:e2:c6:cd:
87:41:9c:26:dc:3d:9b:ac:df:55:1e:50:35:b5:97:
93:42:5f:ed:97:cd:fe:69:05:91:41:64:59:6a:b4:
e0:9f:9d:f9:ff:fe:d7:ce:be:7d:51:bb:51:e6:ba:
59:81:f6:62:3b:17:2c:d2:1f:66:e7:7e:65:44:6e:
a4:a5:98:80:64:f9:e8:d3:10:8f:bf:22:2e:71:13:
57:e8:7f:d3:65:33:71:bc:ba:a5:31:a8:26:b1:ff:
14:b7:13:34:03:8c:f9:87:d5:38:aa:f7:30:83:04:
7c:be:d8:cf:4c:bb:1f:7a:94:7a:21:b1:ca:19:75:
0b:85:2a:67:9f:a0:f1:9c:0d:1b:12:77:28:77:0a:
5f:04:dc:64:7c:b9:6b:93:e7:b0:3e:94:7e:f5:ba:
bc:d5:a2:99:55:58:9b:6f:95:3a:5a:83:64:68:1b:
68:f5:7b:a6:48:8a:33:45:ed:39:22:6e:ce:f1:f1:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C9:51:9C:0A:9C:AE:AA:7A:BD:55:1A:A3:7D:B9:A1:84:FB:4C:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aef6::/32
Signature Algorithm: sha256WithRSAEncryption
ae:50:cd:19:19:1c:28:94:f2:91:12:f6:e9:21:54:1e:17:19:
75:4d:9b:a3:f0:10:56:2b:cf:86:b9:87:f8:a6:9e:9a:2c:20:
fb:d9:e5:79:80:d6:78:9a:73:da:54:cb:9b:a9:3c:09:d9:01:
19:49:06:66:f0:b0:e0:3a:95:06:15:ab:e4:78:e4:ba:66:d3:
e9:30:43:4d:04:7c:2d:80:78:eb:cf:56:06:9f:0d:d4:f2:45:
42:7e:fe:db:20:01:40:c9:27:f7:ce:98:e3:fa:70:85:69:f8:
db:01:89:7c:ca:1b:25:23:a3:c2:95:06:af:ad:ac:fc:7f:e5:
cc:7c:c9:0f:ec:8d:7f:d5:c4:0c:06:e1:72:38:50:d2:6e:99:
27:51:47:1a:24:11:60:32:a6:a5:2d:73:35:49:70:ae:6f:0f:
fd:a0:c5:0f:01:95:cc:24:5e:e8:17:6d:c4:29:e7:0e:12:69:
5d:2a:f6:f9:3e:18:28:b0:32:d9:f2:a2:22:1a:5d:97:83:df:
d1:a3:80:9d:8b:dc:cd:80:e9:88:de:79:22:22:aa:aa:ab:63:
58:82:20:e8:b5:60:2d:7d:3c:f1:bf:67:6f:ff:e1:f6:26:9b:
41:01:6d:7d:c6:b8:69:89:f9:fc:e3:e3:0e:6f:53:8c:42:40:
ea:d8:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:41 2026 by rpki-client