Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146543.roa
File: AS146543.roa (raw, json)
Hash identifier: ctNrLLDH6b7q0sZa6zoblBhKJQ3OpXwEAldkVqVfOwQ=
Subject key identifier: 31:6A:C4:78:87:75:D8:99:6B:51:1C:DC:DD:DF:3D:6D:04:E9:5D:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78DB34421CA1DB8F91F64FF1F1377909C68F14B0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146543.roa
Signing time: Fri 22 May 2026 01:50:13 +0000
ROA not before: Fri 22 May 2026 01:45:13 +0000
ROA not after: Fri 21 May 2027 01:50:13 +0000
asID: 146543
IP address blocks: 240a:af35::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:db:34:42:1c:a1:db:8f:91:f6:4f:f1:f1:37:79:09:c6:8f:14:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:13 2026 GMT
Not After : May 21 01:50:13 2027 GMT
Subject: CN=316AC4788775D8996B511CDCDDDF3D6D04E95D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:09:b8:84:49:33:dc:58:18:92:05:bc:36:
24:a1:f0:bc:c1:c8:03:6e:f7:22:c7:36:4b:c8:ac:
9e:8b:fc:4c:b6:f6:8d:0d:04:72:d2:d7:71:6e:a6:
91:d7:53:13:e4:8a:80:69:fe:72:75:d7:68:c9:24:
4f:6a:cf:c2:3e:ea:10:97:19:c0:e1:11:44:f7:59:
9e:8f:41:29:9b:b3:57:50:30:ca:f6:b3:53:54:9d:
77:6b:98:e0:2a:0f:d8:78:59:ae:61:1f:89:8a:51:
04:23:77:78:83:c3:05:40:6c:c8:b6:64:53:6e:33:
c0:61:75:dd:18:4f:f9:59:42:88:82:30:c6:1d:99:
95:5c:62:8d:42:95:d9:99:d3:4c:fd:5c:f2:d4:b6:
86:3c:2d:27:74:4b:8d:a4:dd:ca:b7:31:86:1d:87:
fa:76:c5:81:3a:5b:71:5d:24:31:8f:0a:17:64:23:
8d:81:25:e1:2a:35:a2:c5:ab:17:f7:f1:95:3d:f5:
b6:82:48:f6:1d:a0:63:36:11:b4:e8:9f:ab:4b:c3:
77:8b:35:61:6a:83:22:6f:03:47:6d:47:38:21:9e:
88:cc:21:7d:39:30:ea:d2:92:31:a0:f2:cf:0a:1b:
b8:5f:80:fa:ee:41:01:a7:2a:a1:f7:b5:1c:0b:53:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6A:C4:78:87:75:D8:99:6B:51:1C:DC:DD:DF:3D:6D:04:E9:5D:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146543.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af35::/32
Signature Algorithm: sha256WithRSAEncryption
25:f9:0c:03:dc:16:a5:25:a0:ef:d5:14:d3:ca:f2:89:ba:13:
35:b7:57:11:54:64:cd:07:21:80:2a:ce:4d:21:9a:66:ad:a4:
6f:2f:b0:aa:2b:e7:30:bc:27:a4:f0:91:b3:14:a0:89:77:09:
bb:23:02:d4:cb:48:67:68:95:2a:04:a4:5a:b8:e4:60:ea:65:
64:40:c1:26:f2:91:1b:35:c4:e5:b8:49:c4:db:de:16:af:2f:
06:10:cd:c5:4b:54:90:a9:a7:46:00:90:42:4d:d4:36:f8:d4:
65:e4:23:f6:c7:c5:d7:a6:d8:05:c4:96:29:b2:fe:bd:14:a9:
48:1c:de:50:8c:d8:2e:ca:72:5d:9d:07:bd:58:bf:d4:f1:2d:
88:18:6f:7f:76:81:4a:ef:bc:aa:70:c3:98:f4:ea:ec:bd:ee:
e8:ef:c6:66:c0:a5:89:0d:ca:a5:d9:2a:41:07:9a:a3:e7:60:
d3:4b:6c:70:37:a2:7c:64:7d:ea:15:7f:c4:c5:19:28:e7:46:
bf:83:b1:84:30:d9:e9:2e:9a:99:99:24:26:ba:56:e9:19:cb:
f4:53:5b:5b:5b:4d:60:f4:40:4a:55:2a:03:c5:c0:78:e2:e0:
f8:b9:5c:e9:8a:b1:20:bb:00:1a:a6:3c:6f:d7:2b:af:67:e2:
b4:73:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:55 2026 by rpki-client