Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146528.roa
File: AS146528.roa (raw, json)
Hash identifier: VSgNYQHVyGfUKDEjptHqUtiyAhd9WzpuyxXUrrHrG8k=
Subject key identifier: 21:26:83:1F:63:F1:53:5D:68:93:E4:FC:F5:31:5E:68:3A:C8:54:93
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02DE3A61FA1C31C152BBAE2961EBA5307DF55D53
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146528.roa
Signing time: Fri 22 May 2026 07:32:11 +0000
ROA not before: Fri 22 May 2026 07:27:11 +0000
ROA not after: Fri 21 May 2027 07:32:11 +0000
asID: 146528
IP address blocks: 240a:af26::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:de:3a:61:fa:1c:31:c1:52:bb:ae:29:61:eb:a5:30:7d:f5:5d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:11 2026 GMT
Not After : May 21 07:32:11 2027 GMT
Subject: CN=2126831F63F1535D6893E4FCF5315E683AC85493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:58:5b:a3:25:b0:45:95:7d:67:43:50:49:
4d:9d:35:42:a1:0b:42:c3:7f:84:f3:a8:cf:9d:f8:
09:cc:3b:92:b7:67:2b:a2:76:2e:f8:d7:d1:f2:34:
ba:ed:57:ed:cc:6e:e4:9f:3d:1e:3e:0f:b0:d8:22:
eb:90:59:79:7a:97:86:46:98:32:a6:ed:21:4a:02:
7f:90:f5:87:e9:ef:1a:98:c2:13:4b:5b:4f:90:79:
30:0a:5e:b6:ee:7e:2c:1a:76:6c:24:ab:40:7b:98:
df:00:41:fb:9f:fb:79:25:fb:47:fb:ee:fa:c9:02:
db:eb:c0:02:ff:cb:18:cc:60:66:f9:17:9c:9e:08:
87:7d:04:25:dd:aa:77:2e:a4:6b:50:15:14:f3:d3:
d9:88:30:3c:e6:38:80:a3:a2:b7:1d:05:96:12:20:
33:19:92:6a:c3:3b:8a:e1:41:e0:f6:bd:78:94:dc:
39:2b:d1:71:df:49:dc:7b:58:0e:ef:06:e5:db:7f:
26:fd:fd:a7:94:4e:b3:27:5a:a6:79:d3:25:23:68:
ef:5e:2e:c9:5d:75:f3:9f:bd:ab:12:a6:81:1d:a7:
99:05:ab:ee:39:86:46:64:f3:7d:f6:f0:7e:a1:95:
44:dd:f5:2f:58:40:16:60:c3:f6:6b:b7:a6:4e:be:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:83:1F:63:F1:53:5D:68:93:E4:FC:F5:31:5E:68:3A:C8:54:93
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146528.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af26::/32
Signature Algorithm: sha256WithRSAEncryption
aa:2e:d2:8b:67:12:06:bf:27:df:32:d2:4b:f0:48:5d:d3:c0:
93:22:07:18:82:72:d0:a6:ee:2a:bb:68:bd:9a:bf:8c:16:4e:
7e:99:20:a5:9d:6e:3f:f4:e4:ad:43:9a:3c:ac:ff:d3:6c:22:
4b:59:d2:9d:a6:74:06:41:1e:b0:03:d7:eb:aa:2e:d9:ab:17:
2e:2d:21:2f:4f:00:ec:c3:f0:8c:99:b0:5b:d0:1b:d6:6b:bc:
e4:43:83:e8:4e:06:d8:62:8a:8c:13:ca:cf:06:d4:92:8e:1a:
f1:f1:0e:9e:6f:af:c1:6d:a3:d0:b3:ac:c7:73:0d:58:c6:8e:
48:b4:7c:f2:98:5a:55:fc:b8:40:0a:2b:6f:9e:c7:02:b8:f7:
08:65:c8:18:4f:86:e7:f2:98:3c:d6:c1:72:11:c5:04:de:ad:
08:25:0b:c5:5c:bf:02:14:5e:f6:7f:1a:a6:cd:17:72:6d:04:
59:fc:4d:51:04:25:a5:b5:6e:a8:8a:7c:33:35:ed:52:19:44:
72:34:4b:3f:d4:91:7d:bf:af:de:48:cd:e8:13:dd:31:e5:b7:
dc:34:8a:34:1d:2c:f9:45:7c:74:60:25:f6:5f:c6:e2:32:a6:
e0:1e:53:01:70:4d:cb:af:bb:93:91:67:9f:9a:72:85:47:29:
cd:24:3f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:30 2026 by rpki-client