Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146557.roa
File: AS146557.roa (raw, json)
Hash identifier: WuGRUuzXOzeCXWzPFSHR9d2YPZ9oJJzK395wphil4DE=
Subject key identifier: E3:F2:35:5A:17:5B:86:15:E3:8B:67:6B:98:67:87:19:48:E3:9C:6C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F8ECD08D27E5C54B237F0D9B2E052460206D1E4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146557.roa
Signing time: Fri 22 May 2026 06:58:17 +0000
ROA not before: Fri 22 May 2026 06:53:17 +0000
ROA not after: Fri 21 May 2027 06:58:17 +0000
asID: 146557
IP address blocks: 240a:af43::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:8e:cd:08:d2:7e:5c:54:b2:37:f0:d9:b2:e0:52:46:02:06:d1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:17 2026 GMT
Not After : May 21 06:58:17 2027 GMT
Subject: CN=E3F2355A175B8615E38B676B9867871948E39C6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:e2:d2:58:55:14:ca:9c:c1:d4:70:c9:d9:
87:d3:ac:59:c5:5a:2c:28:16:fe:de:75:9f:aa:a7:
12:19:de:ef:99:48:d6:a8:4d:cd:a0:f4:9e:e7:fb:
19:f0:84:8c:2b:84:29:1c:db:7e:b6:31:77:87:18:
d3:68:11:df:1d:cd:7d:40:9e:73:8d:26:1e:56:72:
6e:f1:c5:bd:6c:b0:f7:23:7e:50:67:53:f2:01:e5:
f9:57:f2:f3:c9:5a:62:0c:b7:2c:fd:21:40:10:41:
74:c5:74:08:cd:11:b2:cd:48:67:11:04:0c:8f:93:
b0:9b:5d:65:c7:35:ad:d7:7b:53:db:16:07:84:35:
19:7f:7a:f9:35:95:c5:75:60:13:db:b8:e2:ad:d4:
a6:03:92:d0:ad:50:3f:7e:95:f6:ec:0e:d8:a5:db:
42:19:36:88:0e:c5:de:c0:78:e9:63:84:83:c0:a2:
23:13:0d:a7:36:2b:fb:29:b3:37:c2:92:7f:ce:63:
21:af:52:8d:7e:4b:67:80:fe:2c:92:18:a1:e3:51:
5b:3c:62:52:d8:42:e2:52:da:31:b5:3e:97:e0:48:
6b:8b:1a:d2:93:c4:bf:2c:f1:aa:4d:6f:3e:76:c1:
fe:79:e4:fb:28:c7:a2:6c:cd:26:38:cc:df:58:c6:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F2:35:5A:17:5B:86:15:E3:8B:67:6B:98:67:87:19:48:E3:9C:6C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af43::/32
Signature Algorithm: sha256WithRSAEncryption
39:40:b7:85:d4:b2:65:f5:3c:02:4c:aa:8f:af:ab:8a:1b:81:
f3:91:a9:6b:7c:1c:d9:77:1c:a4:05:c3:d2:17:09:a7:b5:32:
74:8c:8d:29:a0:7f:3d:f6:d8:e1:a0:af:ab:03:3a:3f:6a:6d:
e9:93:5f:a6:ab:14:e4:e5:13:8b:37:11:d5:e9:18:19:3b:5d:
7e:a0:05:45:4a:5e:89:99:c7:97:c8:8f:30:ce:e4:fb:86:a2:
24:0b:9d:44:5c:8a:35:be:7a:b1:d2:c3:76:27:a7:59:c4:af:
39:5e:67:c3:45:ba:02:a8:53:93:dd:34:1c:bd:8f:ed:d3:88:
df:ca:9c:c3:6f:6d:03:76:f1:ba:37:4c:54:2d:91:f7:ad:70:
4d:0b:d8:51:7f:59:5b:94:cc:43:81:19:39:08:31:7a:6c:01:
00:5e:f5:7a:1f:a3:43:e3:9f:0f:18:76:24:f9:dc:b6:e0:42:
57:dd:f9:65:3b:f2:99:f5:3a:e0:19:69:9e:cd:6b:ac:aa:bc:
9e:a6:c5:6a:33:c4:9f:4c:d2:f3:ab:4c:e9:95:ef:96:53:5e:
6a:9f:7b:e6:c3:f6:46:a6:f9:1d:53:83:56:03:07:76:db:2e:
df:b9:25:21:57:f6:ef:1d:8c:2f:d9:67:c1:04:0f:62:a9:d1:
3c:9b:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:31 2026 by rpki-client