Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146572.roa
File: AS146572.roa (raw, json)
Hash identifier: Pck6i/q2mD8s5eIg0GblMXigKVaMiiJkIcsi5PhSyiY=
Subject key identifier: 1C:86:44:06:54:4D:0C:34:C5:E6:31:D9:5E:1D:DD:78:0D:84:89:43
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E52C2E1E319E52D8A34F77A1687F01BC2399B73
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146572.roa
Signing time: Fri 22 May 2026 06:27:51 +0000
ROA not before: Fri 22 May 2026 06:22:51 +0000
ROA not after: Fri 21 May 2027 06:27:51 +0000
asID: 146572
IP address blocks: 240a:af52::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:52:c2:e1:e3:19:e5:2d:8a:34:f7:7a:16:87:f0:1b:c2:39:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:51 2026 GMT
Not After : May 21 06:27:51 2027 GMT
Subject: CN=1C864406544D0C34C5E631D95E1DDD780D848943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:52:3f:bb:75:76:49:41:b8:15:7a:65:db:
ef:30:37:b6:67:7f:f6:b4:56:c6:7d:39:82:68:61:
9b:ca:45:a3:94:14:03:11:57:58:92:7a:d6:16:78:
30:89:35:4f:a3:1c:dc:3c:19:ee:5b:46:07:d3:92:
2d:44:7f:21:92:0b:19:f8:5b:9e:a3:98:42:7f:aa:
03:53:01:7a:04:04:98:f2:7a:d7:f7:06:87:af:aa:
8b:fc:ec:9b:b3:c8:b6:aa:3d:0c:8e:b6:9b:ae:ac:
f3:a9:92:eb:b9:09:c5:98:6b:6c:6a:f5:45:ec:6f:
33:5a:c8:45:0d:84:ec:38:90:72:65:33:b2:84:07:
69:79:4f:87:f7:62:39:21:1e:f6:3d:61:96:1e:e5:
b3:ba:d1:d7:fb:da:04:02:35:32:fd:dc:1b:c4:0f:
31:df:04:dd:e4:af:45:88:b4:bf:8e:f4:24:14:69:
35:f3:4f:ad:cf:58:ee:58:64:e5:74:e4:14:29:d8:
76:95:83:ba:0a:63:89:22:2b:5f:b7:08:9d:3c:78:
98:19:f0:61:4a:3d:4e:70:41:de:0b:19:55:71:1f:
b6:ba:a7:5e:09:b8:1f:fe:7b:bb:88:18:1b:f8:bc:
65:63:c0:c6:1b:00:2f:af:a9:b3:66:05:f1:49:f8:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:86:44:06:54:4D:0C:34:C5:E6:31:D9:5E:1D:DD:78:0D:84:89:43
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146572.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af52::/32
Signature Algorithm: sha256WithRSAEncryption
2b:5b:2a:dc:5e:9d:42:c5:45:d5:07:0f:83:a5:6f:e5:1b:fc:
03:4d:76:a9:c1:3b:50:b4:1e:41:3a:e3:71:b0:43:7a:c8:14:
10:f7:27:fe:ee:29:88:3e:95:62:98:b4:ef:9f:c9:e6:5f:a6:
82:0b:5e:78:c1:17:35:c3:e8:e8:fc:35:87:a9:18:c6:4c:dd:
1d:41:f5:c2:0c:67:de:88:59:3f:c6:f4:3f:ea:f2:33:bd:b8:
7b:e2:32:ff:2e:07:e2:3d:92:5f:49:ab:42:d9:d4:2a:8c:f8:
58:b8:18:a7:bf:82:f3:31:0e:98:e8:7d:d7:00:6f:59:0d:12:
cb:d5:3c:f6:e2:0e:37:25:c6:e1:17:94:a2:ab:4a:28:7a:9d:
9e:0d:f8:79:99:01:3c:3a:67:89:2d:3c:94:ac:60:c1:d7:9c:
f9:3f:e9:be:91:03:0f:b7:b8:9c:da:02:4f:8d:d3:63:9e:ca:
2a:e1:61:d6:76:5b:6d:fa:61:01:5c:d7:2e:bb:76:13:16:00:
b3:ff:9a:13:5f:4b:95:bb:db:3d:a6:81:c5:e0:e8:43:78:7c:
a9:9d:ae:f1:97:78:c1:9b:6f:3d:2a:f7:ef:78:a8:28:54:04:
b9:54:66:5a:66:80:34:97:35:aa:02:0e:d2:f1:b8:b9:cb:5e:
d1:7b:3e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:02 2026 by rpki-client