Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146523.roa
File: AS146523.roa (raw, json)
Hash identifier: 0YaUAE06wKdgk73QfqpZcb7EhS2jc+noBhBD6gQCigY=
Subject key identifier: 6A:CC:1D:3B:D4:02:81:0E:B1:5E:89:52:AA:71:C1:BF:33:94:FE:0D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22191CBE87C7E030AC415E3B52B60A7D0CEEC4A1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146523.roa
Signing time: Fri 22 May 2026 07:09:06 +0000
ROA not before: Fri 22 May 2026 07:04:06 +0000
ROA not after: Fri 21 May 2027 07:09:06 +0000
asID: 146523
IP address blocks: 240a:af21::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:19:1c:be:87:c7:e0:30:ac:41:5e:3b:52:b6:0a:7d:0c:ee:c4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:06 2026 GMT
Not After : May 21 07:09:06 2027 GMT
Subject: CN=6ACC1D3BD402810EB15E8952AA71C1BF3394FE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:f8:07:1d:29:cf:85:c7:44:36:09:94:e8:
33:1f:cf:b5:06:6c:8b:8b:92:6e:48:6a:e3:59:20:
b4:39:2f:88:56:0b:50:68:95:b9:db:2f:96:d1:52:
86:fb:eb:dd:44:41:da:63:21:ae:cf:76:d4:a0:56:
ab:5e:90:2e:a7:fa:7f:63:53:a8:30:7a:3d:01:b9:
5c:6d:07:76:79:f1:5b:34:68:3f:ab:f1:3a:95:12:
b3:53:97:f2:a9:dd:5e:9c:1f:67:6a:4d:ed:88:6c:
7c:13:4d:b0:05:2d:c1:6b:5d:bf:2e:18:3f:a1:da:
99:b4:18:85:b5:cc:4a:df:25:4a:e3:5f:c6:e7:1d:
50:2a:96:b0:9f:19:4c:53:1d:fc:7d:02:68:74:c0:
16:48:0a:75:f4:74:4a:34:65:4e:af:27:9f:30:56:
2a:d5:9e:f8:a6:1b:a3:40:08:99:f9:a1:fd:97:e5:
b5:01:f4:62:df:51:ac:f6:28:95:43:8c:18:bc:d6:
fc:07:fd:22:75:ad:fa:e7:8c:e1:35:e5:ae:9b:ec:
f6:cf:1b:94:28:15:57:83:af:71:44:8f:ee:11:b9:
34:6f:a8:f0:4a:9c:7b:35:03:c8:27:78:98:b0:07:
80:d5:34:f6:70:1c:64:25:fc:e3:e2:66:da:59:04:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CC:1D:3B:D4:02:81:0E:B1:5E:89:52:AA:71:C1:BF:33:94:FE:0D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146523.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af21::/32
Signature Algorithm: sha256WithRSAEncryption
7e:fb:4d:9a:93:5a:7b:51:78:4b:0d:f6:59:0e:32:0a:8a:eb:
f3:05:f0:ea:1d:dd:d0:4e:e8:32:63:74:7f:8d:2b:d0:c9:e1:
69:20:07:47:0e:3c:11:0b:11:14:12:d6:e9:f0:76:1c:d6:78:
b6:cd:b6:cb:3d:de:31:f4:4f:a0:75:1d:ca:12:8a:fc:d1:d7:
6f:15:50:6e:c0:86:8e:7d:be:82:d2:16:d2:f4:1e:8a:a5:10:
94:3c:f2:39:c9:f8:29:35:0c:d2:34:86:ec:49:09:aa:78:52:
86:39:12:3a:2d:60:e5:9d:b5:71:58:fb:b1:89:d4:37:1a:ce:
61:d2:a3:0b:79:67:29:ad:08:6e:82:d5:5b:4c:ac:c1:cf:3e:
6b:39:d5:cb:f4:25:1e:b4:2b:9b:e4:14:f4:b3:96:4e:e2:a3:
e2:3b:ad:b5:01:4d:e6:95:e6:50:6c:47:c4:69:f5:c5:e3:f7:
e2:7f:9d:f5:5b:a9:7d:c4:f1:8d:08:82:5e:25:d2:8d:4c:95:
f5:33:cd:01:dd:87:d0:94:61:5d:07:1e:8c:30:9f:f1:81:3c:
30:02:ef:c6:52:21:6f:e9:8c:32:60:24:53:e8:c8:a2:f4:5c:
6e:45:ea:70:7d:dd:34:e7:5e:3f:f4:c7:a7:78:68:c1:db:75:
db:bd:7a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:11 2026 by rpki-client