Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146529.roa
File: AS146529.roa (raw, json)
Hash identifier: DP80uCPi6C4dZuPljtUXhA5YC5VAPGq3Bkes26RT/bY=
Subject key identifier: 80:A9:0A:75:25:BB:E5:9A:E6:ED:F5:AA:0C:31:78:F0:5F:24:14:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6EC6E33EA1AB0928203086D894908D2A1C00AE85
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146529.roa
Signing time: Mon 25 May 2026 06:28:30 +0000
ROA not before: Mon 25 May 2026 06:23:30 +0000
ROA not after: Mon 24 May 2027 06:28:30 +0000
asID: 146529
IP address blocks: 240a:af27::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c6:e3:3e:a1:ab:09:28:20:30:86:d8:94:90:8d:2a:1c:00:ae:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:30 2026 GMT
Not After : May 24 06:28:30 2027 GMT
Subject: CN=80A90A7525BBE59AE6EDF5AA0C3178F05F241491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:7b:69:d6:c4:db:96:e2:c4:fe:8c:c4:5b:
a3:c0:79:74:96:30:c1:41:e7:9b:3c:6a:09:de:f6:
a8:06:67:42:d4:f3:ef:c8:d4:b2:e4:cb:20:b3:e0:
cb:aa:d2:80:0b:58:1f:21:48:d7:55:e5:4e:fe:2b:
8b:a5:2e:e1:a9:42:be:13:23:6a:86:52:b3:21:d6:
e4:7d:ac:f8:a3:ac:27:d7:6f:d7:f9:83:af:29:aa:
9f:36:e0:ef:2e:a9:80:ac:5a:21:5b:c9:b5:06:0a:
47:bc:f4:b3:e6:25:63:a6:1f:f9:5d:37:33:9f:0a:
88:66:3a:f0:49:bb:31:9e:70:b1:86:23:88:ac:27:
0f:4c:3d:30:83:16:6d:67:d7:ff:ad:0b:6f:55:89:
f3:f0:35:34:d2:af:5a:d6:fe:8d:f4:4f:e0:67:8b:
b2:d6:97:79:02:a0:25:50:c1:6f:02:af:2a:8c:45:
5d:55:b4:18:8e:0c:f3:33:d7:6a:be:a4:49:0a:2f:
1c:4b:fa:01:3c:88:e6:bb:56:d9:36:e9:26:ac:d2:
cc:c7:6b:d4:23:f9:0c:ff:e3:c2:77:f9:c1:a5:48:
85:45:f3:16:49:d6:9f:d7:f5:c1:20:76:d9:21:8c:
50:38:e9:11:46:2a:1f:2c:cb:41:1c:57:fa:54:dc:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A9:0A:75:25:BB:E5:9A:E6:ED:F5:AA:0C:31:78:F0:5F:24:14:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af27::/32
Signature Algorithm: sha256WithRSAEncryption
87:01:93:b7:fe:ad:6c:b2:4c:60:96:f4:4a:9f:e7:56:41:cd:
9b:59:1e:e6:29:83:da:a4:08:bf:54:7d:77:76:13:fe:9f:48:
e9:26:09:ed:14:fb:75:bc:a6:89:65:2f:79:3f:48:2a:91:dd:
e5:63:ab:f7:85:c4:32:f7:6d:1f:f0:6e:8b:ae:56:9a:97:13:
56:f9:8e:50:3e:f9:78:d3:a6:5a:e3:2d:f6:94:4e:c1:3d:e8:
9d:6d:89:00:cc:fa:48:c5:83:1c:0d:cb:be:73:c6:fb:a0:d9:
4a:e1:df:ba:01:27:b6:6c:7d:e3:af:2c:a3:c3:c5:8e:7e:98:
6e:2b:d9:72:89:66:e2:31:93:b7:5a:1f:2e:5e:31:f9:0f:c7:
39:71:3f:89:bf:77:4f:0a:fd:44:29:44:3e:82:7b:0b:50:69:
38:17:64:81:8a:99:cb:f2:a4:9d:f9:cd:16:93:5e:90:ee:63:
55:14:6d:02:c4:29:5a:e4:da:89:cc:f2:b7:c7:71:6f:0b:56:
59:80:7d:d7:63:3f:a1:c7:52:9d:c0:60:c3:9b:39:25:79:6c:
f9:83:b6:81:88:0b:83:ab:a6:dd:f2:09:16:1c:93:10:c4:0b:
35:b4:ce:56:ca:e6:ec:c2:7c:d1:a9:55:17:65:92:9a:3a:e6:
f1:35:df:cc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbsbjPqGrCSggMIbYlJCNKhwAroUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMzBaFw0yNzA1MjQwNjI4MzBaMDMxMTAvBgNV
BAMTKDgwQTkwQTc1MjVCQkU1OUFFNkVERjVBQTBDMzE3OEYwNUYyNDE0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nXtp1sTbluLE/ozEW6PAeXSW
MMFB55s8agne9qgGZ0LU8+/I1LLkyyCz4Muq0oALWB8hSNdV5U7+K4ulLuGpQr4T
I2qGUrMh1uR9rPijrCfXb9f5g68pqp824O8uqYCsWiFbybUGCke89LPmJWOmH/ld
NzOfCohmOvBJuzGecLGGI4isJw9MPTCDFm1n1/+tC29VifPwNTTSr1rW/o30T+Bn
i7LWl3kCoCVQwW8CryqMRV1VtBiODPMz12q+pEkKLxxL+gE8iOa7Vtk26Sas0szH
a9Qj+Qz/48J3+cGlSIVF8xZJ1p/X9cEgdtkhjFA46RFGKh8sy0EcV/pU3AzlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUgKkKdSW75Zrm7fWqDDF48F8kFJEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvJzANBgkqhkiG9w0BAQsFAAOCAQEAhwGT
t/6tbLJMYJb0Sp/nVkHNm1ke5imD2qQIv1R9d3YT/p9I6SYJ7RT7dbymiWUveT9I
KpHd5WOr94XEMvdtH/Bui65WmpcTVvmOUD75eNOmWuMt9pROwT3onW2JAMz6SMWD
HA3LvnPG+6DZSuHfugEntmx9468so8PFjn6YbivZcolm4jGTt1ofLl4x+Q/HOXE/
ib93Twr9RClEPoJ7C1BpOBdkgYqZy/KknfnNFpNekO5jVRRtAsQpWuTaiczyt8dx
bwtWWYB912M/ocdSncBgw5s5JXls+YO2gYgLg6um3fIJFhyTEMQLNbTOVsrm7MJ8
0alVF2WSmjrm8TXfzA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:13 2026 by rpki-client