Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146558.roa
File: AS146558.roa (raw, json)
Hash identifier: UAF9r2luIhKVQrveo7gzBiID6C+JprbVbKRcRXHalVg=
Subject key identifier: 3C:8D:5C:EA:FF:5F:A4:95:22:E4:0B:20:6B:81:2F:4F:B0:61:AE:BC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5352FAFFD00F688DC69002D633941904D35A442C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146558.roa
Signing time: Tue 26 May 2026 06:12:37 +0000
ROA not before: Tue 26 May 2026 06:07:37 +0000
ROA not after: Tue 25 May 2027 06:12:37 +0000
asID: 146558
IP address blocks: 240a:af44::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:52:fa:ff:d0:0f:68:8d:c6:90:02:d6:33:94:19:04:d3:5a:44:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:37 2026 GMT
Not After : May 25 06:12:37 2027 GMT
Subject: CN=3C8D5CEAFF5FA49522E40B206B812F4FB061AEBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:19:72:cd:c5:b4:48:73:1a:5b:b9:79:2f:
82:5e:5e:4a:54:71:af:cc:48:90:0a:3e:24:ab:85:
43:f6:6c:ca:a9:6f:c0:49:0d:8e:15:c9:1e:75:8b:
7f:73:5a:b9:fe:a7:d0:2a:61:28:cc:0b:75:68:f4:
55:5a:98:de:87:0b:0c:d1:dd:26:f1:63:dc:9d:30:
4c:d8:df:c4:66:ab:a0:89:a3:ef:48:de:f0:74:60:
08:fd:83:ac:b1:7b:38:d0:0b:65:b3:51:f8:e5:90:
60:a8:b0:34:42:1f:2f:7c:67:53:cd:75:66:a3:c1:
75:70:fe:70:0d:82:1d:a4:5e:2a:3b:71:c6:fa:45:
f4:5a:16:5c:5f:32:65:75:d9:68:b7:78:ee:3c:b5:
78:58:af:19:4a:28:96:d7:be:4b:16:55:38:fc:37:
4e:6e:28:6d:e0:dd:51:90:16:3d:e3:5d:f3:a5:90:
83:7b:23:54:de:70:9b:ef:75:54:9f:13:46:51:3f:
e1:3f:96:66:bf:ce:c7:08:c5:81:a9:ba:26:eb:60:
bd:6b:4e:b2:19:68:af:44:a0:a9:4d:5f:74:ce:24:
cc:8e:a3:49:16:5a:99:2a:1e:be:e1:b4:a7:67:24:
8c:89:dc:b7:58:54:4d:e4:f6:87:03:68:c2:04:fb:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:5C:EA:FF:5F:A4:95:22:E4:0B:20:6B:81:2F:4F:B0:61:AE:BC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146558.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af44::/32
Signature Algorithm: sha256WithRSAEncryption
0f:29:2b:f6:6d:b1:20:da:3c:57:56:a6:1f:3c:9f:63:6e:24:
90:d2:30:8a:02:a1:b9:8a:83:b3:65:0b:65:85:48:84:a1:37:
4a:df:42:48:d5:be:a5:90:60:42:57:84:fb:2f:93:3b:4a:c7:
ad:e9:56:93:28:ae:fe:d4:04:64:b0:93:2a:44:8a:35:23:c6:
44:6d:d5:ef:3a:51:be:6c:94:94:b6:5b:e2:30:a0:f2:d5:64:
80:51:b1:fe:b0:d3:64:88:10:e3:62:af:2f:62:22:63:d8:a9:
79:5a:ad:14:72:3a:19:eb:6c:11:65:8a:1c:6f:c4:2b:2f:5a:
90:17:db:f3:83:e7:66:98:13:eb:f4:88:ce:ab:4f:27:90:2a:
a1:58:ba:50:f3:16:ed:35:e2:71:e8:f0:78:40:b3:8d:56:f4:
9a:65:52:58:fc:5e:11:94:da:58:fd:ea:44:0c:26:4b:b3:60:
34:49:7e:e2:b6:24:43:8e:ca:f5:c0:c3:ee:2a:46:a7:74:34:
fd:5f:8a:2b:56:8d:59:9a:a5:d2:3f:3d:2d:b1:d3:04:e7:0b:
90:ae:59:99:9e:c7:d8:1d:bd:32:fb:2c:64:72:0b:58:69:ad:
e9:8e:11:9d:cb:18:85:01:a0:d1:06:d2:b8:45:d2:c7:e8:bc:
41:ce:88:f8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUU1L6/9APaI3GkALWM5QZBNNaRCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3MzdaFw0yNzA1MjUwNjEyMzdaMDMxMTAvBgNV
BAMTKDNDOEQ1Q0VBRkY1RkE0OTUyMkU0MEIyMDZCODEyRjRGQjA2MUFFQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4EBlyzcW0SHMaW7l5L4JeXkpU
ca/MSJAKPiSrhUP2bMqpb8BJDY4VyR51i39zWrn+p9AqYSjMC3Vo9FVamN6HCwzR
3SbxY9ydMEzY38Rmq6CJo+9I3vB0YAj9g6yxezjQC2WzUfjlkGCosDRCHy98Z1PN
dWajwXVw/nANgh2kXio7ccb6RfRaFlxfMmV12Wi3eO48tXhYrxlKKJbXvksWVTj8
N05uKG3g3VGQFj3jXfOlkIN7I1TecJvvdVSfE0ZRP+E/lma/zscIxYGpuibrYL1r
TrIZaK9EoKlNX3TOJMyOo0kWWpkqHr7htKdnJIyJ3LdYVE3k9ocDaMIE+5MbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUPI1c6v9fpJUi5Asga4EvT7BhrrwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvRDANBgkqhkiG9w0BAQsFAAOCAQEADykr
9m2xINo8V1amHzyfY24kkNIwigKhuYqDs2ULZYVIhKE3St9CSNW+pZBgQleE+y+T
O0rHrelWkyiu/tQEZLCTKkSKNSPGRG3V7zpRvmyUlLZb4jCg8tVkgFGx/rDTZIgQ
42KvL2IiY9ipeVqtFHI6GetsEWWKHG/EKy9akBfb84PnZpgT6/SIzqtPJ5AqoVi6
UPMW7TXicejweECzjVb0mmVSWPxeEZTaWP3qRAwmS7NgNEl+4rYkQ47K9cDD7ipG
p3Q0/V+KK1aNWZql0j89LbHTBOcLkK5ZmZ7H2B29MvssZHILWGmt6Y4RncsYhQGg
0QbSuEXSx+i8Qc6I+A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client