Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146511.roa
File: AS146511.roa (raw, json)
Hash identifier: soDlvIZKY8uAsZmGHgPRPQ7F3KD+4rD86W5VPdLcxa4=
Subject key identifier: 5A:BC:7C:D0:FF:AA:E3:74:82:A1:CD:82:49:E0:30:35:89:AC:5C:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 34677120CE8B92ACC38A275E71371EFD2B66E108
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146511.roa
Signing time: Fri 22 May 2026 01:50:43 +0000
ROA not before: Fri 22 May 2026 01:45:43 +0000
ROA not after: Fri 21 May 2027 01:50:43 +0000
asID: 146511
IP address blocks: 240a:af15::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:67:71:20:ce:8b:92:ac:c3:8a:27:5e:71:37:1e:fd:2b:66:e1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:43 2026 GMT
Not After : May 21 01:50:43 2027 GMT
Subject: CN=5ABC7CD0FFAAE37482A1CD8249E0303589AC5CC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:35:77:ed:f5:4d:e1:0e:0f:c2:5e:ff:cd:
35:0f:31:e1:7c:bc:e2:c2:c8:46:82:82:1c:ef:16:
4a:97:ec:73:ca:3e:e3:ec:b6:ec:18:23:87:a4:35:
11:89:5e:88:e2:63:46:20:a5:86:d7:da:b0:17:30:
54:b9:e3:9f:4c:24:fe:e2:05:fc:23:6b:84:d7:6a:
a9:07:f9:21:6c:11:72:5a:9b:38:e8:1a:5a:67:88:
c0:d4:eb:4c:66:83:c2:c3:38:ad:06:ce:a8:5d:17:
66:74:08:c9:b7:b1:4b:c0:a2:75:ce:ed:8e:17:65:
e1:47:87:4f:36:b8:b7:29:ee:21:f2:96:f1:6c:dc:
84:1f:23:1b:29:cc:99:37:33:76:51:59:d9:00:8c:
ba:a7:bd:b6:89:47:a8:ca:39:44:b0:6d:1f:2b:b4:
0c:64:60:8c:d1:8c:5f:50:e1:cb:82:cb:bc:9f:b5:
93:ce:d7:77:64:40:75:54:d7:07:61:42:61:8f:52:
f0:d8:3a:e7:2c:ee:dd:b1:45:7e:99:2b:a1:a5:b5:
68:8e:33:02:d9:fb:2c:5a:42:46:e3:df:b3:d0:c1:
33:fa:d5:19:27:55:86:22:93:a6:ca:62:de:d5:12:
0a:42:6c:78:e6:f0:b7:90:1a:82:30:5b:99:69:36:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:7C:D0:FF:AA:E3:74:82:A1:CD:82:49:E0:30:35:89:AC:5C:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af15::/32
Signature Algorithm: sha256WithRSAEncryption
25:ea:73:3e:38:44:08:68:2d:a9:69:f1:e8:f9:7f:1b:84:ba:
fa:de:33:25:b2:51:1d:66:a1:61:a2:cf:34:64:c2:ee:bb:77:
48:14:fa:76:83:2f:de:28:5e:a7:a8:d2:18:6b:08:c9:d9:9d:
d2:64:d1:37:01:1a:88:48:fc:11:84:a4:f9:db:02:4b:83:31:
5b:0d:15:dc:ac:89:c4:34:22:9a:6a:7d:39:eb:98:03:d8:7e:
21:49:16:e4:4f:08:47:0c:e7:ae:34:ad:7c:7a:df:db:77:ac:
e2:cc:ea:fc:ab:9b:2b:5d:18:3a:81:be:4f:10:d0:01:3d:07:
ed:2c:8c:ec:dc:43:d9:90:5f:5c:f5:97:ea:e9:56:25:e0:b8:
73:6c:d0:04:7b:ea:71:cd:89:47:36:12:0d:7c:7f:b9:69:aa:
03:88:ac:07:e8:35:06:a3:27:85:fd:a2:b3:38:19:1f:d9:02:
64:96:1c:49:25:80:c4:a5:42:e5:fb:30:f7:03:f3:c6:0b:03:
89:7f:57:d7:cb:66:ac:69:b5:bd:97:ff:de:49:02:64:84:ba:
0a:c5:42:2b:f0:8a:89:a9:13:43:89:8a:d4:13:05:98:b5:d4:
00:f0:f0:35:a3:7c:7e:c3:95:06:3d:64:59:b0:f5:12:d3:2c:
87:63:47:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:54 2026 by rpki-client