Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146522.roa
File: AS146522.roa (raw, json)
Hash identifier: X5r4UPVYXJl6aJdO7bOSbsTylgjc0m/JARlBFnz4SmU=
Subject key identifier: 96:21:54:03:FB:03:06:70:3B:AA:10:49:74:D4:B0:6F:1E:AF:E3:52
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32409EFCB205D6E8684A6F6D7E983174CA14D05F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146522.roa
Signing time: Mon 25 May 2026 01:38:14 +0000
ROA not before: Mon 25 May 2026 01:33:14 +0000
ROA not after: Mon 24 May 2027 01:38:14 +0000
asID: 146522
IP address blocks: 240a:af20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:40:9e:fc:b2:05:d6:e8:68:4a:6f:6d:7e:98:31:74:ca:14:d0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:14 2026 GMT
Not After : May 24 01:38:14 2027 GMT
Subject: CN=96215403FB0306703BAA104974D4B06F1EAFE352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:95:23:f7:06:89:9f:ee:a0:f2:69:6e:06:
47:53:e6:d3:26:00:0a:33:b2:09:d8:80:ee:fc:3e:
ac:82:99:78:94:dc:3e:46:ea:6e:40:c6:36:ff:28:
c4:2f:4a:9f:4f:37:76:eb:70:07:de:5e:db:ae:89:
96:06:fe:cb:27:fb:39:6e:60:7f:8c:90:60:26:06:
3b:1c:e2:a6:e6:bc:70:c8:1a:45:f6:66:df:e3:c0:
f9:c1:46:f8:03:70:74:bf:85:cd:70:57:ab:0f:ef:
38:17:47:56:85:02:70:81:58:5b:ac:f6:aa:d5:7b:
c6:7f:bf:3d:45:42:80:c1:be:ce:13:8f:42:ea:a5:
da:65:22:d0:e7:39:3e:56:59:17:d5:34:10:db:e8:
73:70:e3:83:6d:5b:7e:ce:a7:b2:1f:cf:53:ea:83:
37:39:9a:3c:29:c7:15:d5:73:0e:62:ab:08:a2:77:
97:7d:c7:2d:bb:6b:07:9a:21:49:53:c0:5b:06:3f:
42:65:65:6e:da:d1:a5:a5:58:4d:88:62:d0:c9:90:
a6:de:de:87:fe:db:a8:e7:3a:a4:f5:d9:23:50:f0:
46:36:e1:59:14:85:73:bb:ca:29:ad:4f:40:36:97:
37:fe:4a:f3:b1:a7:a4:7d:7f:2f:e4:eb:9e:9d:e2:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:21:54:03:FB:03:06:70:3B:AA:10:49:74:D4:B0:6F:1E:AF:E3:52
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146522.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af20::/32
Signature Algorithm: sha256WithRSAEncryption
6a:1a:22:ed:d7:24:52:ca:23:c4:0f:a8:6f:c4:24:cc:26:43:
20:17:db:70:57:9c:a8:1f:63:68:05:20:a0:a4:58:66:64:0d:
4f:cb:0a:e4:91:28:ac:55:ee:40:e5:24:f8:16:7b:87:a4:36:
5f:63:2d:21:bf:73:60:45:4c:39:e3:a1:86:7b:e5:29:e2:c1:
a2:50:78:c7:5d:89:02:24:0a:5c:9c:92:2e:26:28:54:35:0f:
56:e0:c0:8d:02:84:84:03:4c:94:d9:cf:74:d5:01:2b:e7:25:
2c:8d:a0:3a:a9:cf:99:9f:79:e6:60:bd:13:1b:32:67:12:23:
1f:f0:8a:e2:f2:98:11:2c:c4:cd:58:a7:47:f7:e3:6e:fd:d4:
1a:0e:17:ce:c0:38:48:7e:6a:49:a7:48:b7:8b:ce:d1:96:9e:
74:e4:f5:27:32:0c:c1:2a:29:a7:e7:56:55:8b:56:3a:cf:9d:
54:7f:79:8b:bd:9e:e3:d4:10:1a:53:9c:1d:c1:77:61:8a:b5:
72:6b:a1:fd:8b:89:25:4b:e5:5a:7f:cf:d4:5c:98:d6:f3:8c:
8a:98:02:75:ae:91:5d:e9:c8:9a:07:78:e6:13:13:db:ff:40:
24:65:fc:ea:33:dc:eb:5b:8c:05:c7:62:13:b8:42:24:b4:35:
bf:c9:85:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:17 2026 by rpki-client