Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146530.roa
File: AS146530.roa (raw, json)
Hash identifier: SgcUhECQzUSezODySy1g9XXoKhLzJq2WoxaNyBzr83I=
Subject key identifier: EF:D1:E3:B3:64:F8:29:16:02:01:40:F6:C4:C9:C7:B5:AD:DA:D9:A6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 109E1037B8664860D9417A28D3373F5D00C4D820
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146530.roa
Signing time: Fri 22 May 2026 07:24:22 +0000
ROA not before: Fri 22 May 2026 07:19:22 +0000
ROA not after: Fri 21 May 2027 07:24:22 +0000
asID: 146530
IP address blocks: 240a:af28::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:9e:10:37:b8:66:48:60:d9:41:7a:28:d3:37:3f:5d:00:c4:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:22 2026 GMT
Not After : May 21 07:24:22 2027 GMT
Subject: CN=EFD1E3B364F82916020140F6C4C9C7B5ADDAD9A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:fa:5a:07:44:1c:b1:17:62:b0:dc:0d:12:
b8:59:8c:f9:85:4b:18:70:2b:07:45:a3:22:73:65:
77:11:c7:74:c8:cd:4b:f3:7f:8c:8f:fc:a3:f7:1b:
57:e0:4d:0a:e6:a3:b4:2c:f9:1e:c2:24:35:32:49:
6c:0f:8c:78:91:bc:99:fc:99:ba:a6:e4:d1:c9:25:
06:87:28:dc:4b:06:52:a3:1c:30:05:2a:97:87:eb:
c7:d7:a4:25:3f:b4:68:dd:ec:f6:24:b7:cd:f8:7b:
60:ac:bc:34:96:f0:ac:80:e9:8d:c8:6d:92:1e:2b:
4c:f7:9c:da:1d:40:64:2f:26:5d:d1:d1:b3:62:0e:
29:1b:8b:1f:0b:fa:5a:65:aa:60:62:99:53:03:1f:
ed:1e:df:b1:0e:e9:76:04:fb:7d:cb:14:2a:41:81:
79:75:7a:8b:c1:7e:8e:a5:6f:29:00:53:d5:5e:8a:
70:dd:db:f6:2b:1b:b5:96:9c:57:7e:d4:e2:da:f4:
50:83:f2:9b:72:8f:85:9e:e2:9d:9a:ac:71:e8:65:
95:46:ad:0e:3a:74:96:eb:d3:4e:80:87:58:70:b6:
4f:21:d2:6a:15:60:ad:af:98:ff:a2:76:38:68:88:
b9:0b:64:9b:19:88:cd:d9:10:9b:54:ca:68:f4:9b:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D1:E3:B3:64:F8:29:16:02:01:40:F6:C4:C9:C7:B5:AD:DA:D9:A6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af28::/32
Signature Algorithm: sha256WithRSAEncryption
11:91:36:b3:1a:09:ac:92:1e:88:c5:27:bd:e7:1d:f3:9c:79:
54:2f:d0:f3:fb:8e:08:c5:cb:27:c1:7b:21:11:21:41:1d:ac:
1b:94:03:be:b7:7e:9a:89:ab:47:ce:13:5a:59:da:78:95:fa:
40:16:7d:56:bb:81:65:be:3c:3d:39:d5:29:2a:5d:af:81:aa:
48:f3:ec:81:65:17:83:33:3c:3a:fe:c6:c5:f7:66:66:10:a1:
45:c8:1e:48:9a:02:79:13:a1:bc:98:38:a4:c1:17:e9:49:bf:
33:66:fc:30:5d:49:58:bd:99:e6:29:08:60:76:42:13:e0:0f:
0a:2d:59:1c:4b:18:ad:d7:30:fe:73:25:30:c7:eb:ba:5b:90:
ff:60:8e:93:78:1a:ef:8b:a9:b4:50:d6:ce:fa:3c:75:2c:b5:
c8:34:c3:07:84:97:fe:df:30:4b:53:e2:27:be:7b:6a:ec:c8:
83:8b:d5:70:39:af:f0:e7:7b:8e:e4:aa:3b:af:c8:aa:db:aa:
5a:da:d0:b3:4c:4f:1f:23:77:ff:1f:96:99:6d:8b:f4:6b:5b:
e4:82:a2:06:08:6a:2f:ff:0b:82:e0:4f:16:86:ea:3e:42:3a:
f1:3c:52:55:0b:d4:5a:72:5e:20:17:c8:68:32:33:4d:5b:28:
7d:ae:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:06 2026 by rpki-client