Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146552.roa
File: AS146552.roa (raw, json)
Hash identifier: aM2pbvps5+WCHypsdMMjAeQdmm2q/8pXHFBuQP9zmTk=
Subject key identifier: B6:55:D1:E5:43:3E:23:CB:AE:90:A0:77:7A:9F:DB:EC:11:68:96:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 063D1C06DDC55E226D215EB99273C9906FFD2E82
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146552.roa
Signing time: Fri 22 May 2026 04:27:05 +0000
ROA not before: Fri 22 May 2026 04:22:05 +0000
ROA not after: Fri 21 May 2027 04:27:05 +0000
asID: 146552
IP address blocks: 240a:af3e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:3d:1c:06:dd:c5:5e:22:6d:21:5e:b9:92:73:c9:90:6f:fd:2e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:05 2026 GMT
Not After : May 21 04:27:05 2027 GMT
Subject: CN=B655D1E5433E23CBAE90A0777A9FDBEC11689641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:60:ae:16:94:fe:58:33:fc:71:21:05:67:
57:d4:a7:36:47:65:26:09:de:0d:84:32:1b:51:b2:
09:dd:4d:c0:78:0f:c5:e8:31:09:54:46:cf:d9:b0:
b2:2b:a2:0a:64:a3:29:d6:3a:fd:99:1c:af:6f:e7:
71:2f:a5:d7:c8:51:a6:dd:0e:aa:aa:31:8c:7c:af:
71:fe:59:23:61:ad:37:36:f0:4f:a0:ff:f9:ad:19:
cd:4d:19:be:a7:86:d5:21:8f:ce:34:7e:36:4d:be:
a1:0f:0f:b6:01:7c:1c:0e:c9:18:e9:35:f9:b0:39:
ac:cd:34:62:4d:e5:4a:a9:ba:04:c8:6e:bd:b7:ab:
c3:14:64:23:28:60:e0:a7:52:7c:02:aa:f0:18:0b:
8b:3f:33:67:64:4c:7b:89:71:20:c2:2b:83:d5:84:
4b:a9:49:7e:35:25:30:be:16:6c:c8:e2:56:7f:e0:
d2:5d:1d:fb:fe:42:16:12:ce:4a:4f:97:2f:46:2f:
76:76:1c:bd:7f:7c:69:1c:36:2a:10:bc:c1:f7:75:
6c:84:74:37:c6:d6:7d:3b:09:95:ee:af:7d:f8:dc:
a6:2e:21:5b:ac:7d:72:23:fd:de:6f:33:df:29:75:
26:69:a3:db:64:c2:c7:c7:2d:6d:ff:5e:27:2c:01:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:D1:E5:43:3E:23:CB:AE:90:A0:77:7A:9F:DB:EC:11:68:96:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146552.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af3e::/32
Signature Algorithm: sha256WithRSAEncryption
70:fc:21:c0:a1:04:13:e1:c7:06:98:de:1e:01:ee:59:c9:13:
15:a8:36:3b:2e:14:65:a3:f3:c2:91:f5:4c:93:dd:6f:cd:0e:
86:bf:81:af:0e:7a:72:ba:58:b0:a5:09:43:dd:4d:d5:b2:de:
ec:b4:72:5d:64:08:7d:b0:ac:03:5c:cc:47:79:31:47:41:c3:
1d:9f:98:49:e4:ef:3b:db:c8:37:72:eb:7f:d4:c3:2a:a2:e9:
15:c0:07:89:ca:ee:88:68:3c:93:39:cf:cc:d7:a8:a8:06:00:
ea:55:5e:e1:d4:1b:80:06:fb:6a:15:c8:65:49:dd:7e:2b:90:
13:ad:a8:df:e3:cc:cd:2e:1f:29:e4:d3:89:e2:fd:a8:52:d3:
69:33:6e:2c:54:d6:de:3f:f6:63:84:ef:47:e3:bc:e9:0a:33:
34:d7:d3:13:48:44:5c:c1:ab:5c:7d:14:56:97:50:d2:b4:14:
2b:e3:81:fb:e7:07:25:c4:73:8b:8d:19:e5:93:33:4c:44:4d:
1b:4f:00:d0:67:16:01:94:ef:e6:15:ce:b7:df:be:de:8c:df:
9b:90:9b:5d:a1:ed:6d:81:0f:0e:3a:64:4b:19:2d:a6:0e:56:
99:89:a0:cb:84:a4:98:8e:84:16:66:93:1b:f5:2c:27:e7:85:
3a:9f:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:42:39 2026 by rpki-client