Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146512.roa
File: AS146512.roa (raw, json)
Hash identifier: FXr4wqxUZ12P1jKpPJtlVEzQtp0k6BK9Ijqq061mmR8=
Subject key identifier: 6F:AC:4B:1C:DF:BE:EF:60:20:C1:51:03:2C:11:A3:47:EF:76:34:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F9D1AF12EB136653CACBD916DFC68E428B8B736
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146512.roa
Signing time: Fri 22 May 2026 07:24:46 +0000
ROA not before: Fri 22 May 2026 07:19:46 +0000
ROA not after: Fri 21 May 2027 07:24:46 +0000
asID: 146512
IP address blocks: 240a:af16::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9d:1a:f1:2e:b1:36:65:3c:ac:bd:91:6d:fc:68:e4:28:b8:b7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:46 2026 GMT
Not After : May 21 07:24:46 2027 GMT
Subject: CN=6FAC4B1CDFBEEF6020C151032C11A347EF76341C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:eb:56:9a:f3:5c:c0:08:6d:4b:b3:e9:9a:
c1:98:ce:0b:8a:ad:92:2e:75:c9:7d:93:3a:64:22:
55:70:2c:9d:2e:fc:b8:47:59:6d:a7:20:56:62:3f:
2c:46:f9:c0:7c:52:fc:9d:8c:29:f7:d0:71:f8:d5:
bb:a1:21:ec:3a:73:a0:6d:4f:b4:3e:d9:51:22:63:
77:c2:d4:9f:bb:47:97:6c:e8:ef:fa:59:23:55:66:
b4:57:dc:41:40:75:76:08:ee:f9:de:57:e7:a8:a9:
80:d5:63:79:18:ab:84:2c:df:25:e3:00:a2:f4:73:
33:50:fa:a1:7f:9c:82:4e:d2:46:d7:ab:c0:e3:49:
88:ef:20:44:9e:0b:d9:2a:52:e5:32:6a:92:20:4e:
08:7a:92:41:17:8d:e5:a0:67:17:a3:8a:5b:3a:a6:
51:8e:4b:39:f9:bf:db:13:ed:c1:05:99:5c:4b:f2:
b6:eb:81:39:dc:0a:cd:cd:7e:35:e2:bd:7a:d9:8b:
5d:2b:c3:9f:06:73:03:dc:58:a1:41:4a:e6:b1:dd:
86:25:d8:b2:25:b5:aa:a9:dd:95:2f:f8:c2:28:fb:
41:c4:05:da:5b:0c:ff:c8:a5:36:89:f4:16:c2:d6:
0d:e7:fa:14:18:38:6b:f4:c8:15:85:d8:73:f9:c4:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AC:4B:1C:DF:BE:EF:60:20:C1:51:03:2C:11:A3:47:EF:76:34:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146512.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af16::/32
Signature Algorithm: sha256WithRSAEncryption
5b:08:ae:f7:de:8b:2b:ea:6d:c2:03:6e:59:3d:f7:f4:42:9e:
1e:68:35:98:5d:2a:5c:a4:86:a5:f4:33:7e:1d:a2:42:98:db:
4e:ca:1f:d9:10:b7:7e:2c:02:01:e2:fc:df:19:cf:4b:3c:fd:
1a:07:32:5a:1e:a2:7a:2d:eb:dc:00:79:da:13:95:a7:5d:7d:
95:32:94:fa:4b:6d:dd:f0:57:cc:87:36:ae:c1:8e:3b:1f:ee:
b0:91:4f:de:75:ba:c0:05:87:19:79:79:56:22:0e:05:4d:72:
60:ea:79:8b:d3:13:d8:7d:ed:86:a5:c7:8a:85:4b:81:0d:d0:
a2:e0:ad:58:b9:4b:42:a5:18:1b:af:9b:bf:41:2f:04:3f:f8:
ba:50:09:f4:e6:ae:95:23:27:bf:a6:86:f4:e6:18:3e:29:2f:
1c:95:63:f8:d4:f5:a2:f1:07:45:92:61:a2:2b:17:2a:de:ca:
b3:59:bb:4a:33:98:3e:fd:78:78:94:a9:27:a7:cd:68:1e:10:
58:ec:4c:9f:c2:99:74:2d:f6:22:6f:5f:6f:fd:11:e0:b2:20:
65:c4:7b:37:94:c3:27:2e:7f:04:d8:81:bf:50:c4:01:b9:ea:
bd:27:73:c6:74:d8:ab:80:6c:44:3a:f1:66:9e:fc:3e:6a:bb:
72:eb:22:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:10 2026 by rpki-client