Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146574.roa
File: AS146574.roa (raw, json)
Hash identifier: Gwd87F7qI/nJczoNX/NAcF+lEXdr0qn3iEpB68clcXE=
Subject key identifier: 1F:B6:C5:EA:4A:C0:A6:CC:05:F6:48:59:5C:2B:53:A1:F6:7C:89:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B1CB0C77E19D3CFF74F1F2405FF936DAAC34D36
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146574.roa
Signing time: Fri 22 May 2026 06:58:40 +0000
ROA not before: Fri 22 May 2026 06:53:40 +0000
ROA not after: Fri 21 May 2027 06:58:40 +0000
asID: 146574
IP address blocks: 240a:af54::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1c:b0:c7:7e:19:d3:cf:f7:4f:1f:24:05:ff:93:6d:aa:c3:4d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:40 2026 GMT
Not After : May 21 06:58:40 2027 GMT
Subject: CN=1FB6C5EA4AC0A6CC05F648595C2B53A1F67C89D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:f2:a0:c3:a4:7b:a3:80:a6:95:b5:80:1a:
74:23:96:f9:bd:f9:ac:81:36:8c:fd:2b:66:61:8e:
6b:ec:b4:15:22:b6:f5:1f:4c:39:09:f2:d4:fb:7c:
7a:2c:2b:4d:09:c3:68:83:60:47:a3:f5:cc:1c:e7:
82:c7:6b:1a:24:52:72:9a:9a:b7:6b:91:b1:b6:b9:
d6:87:15:6b:c2:6b:cc:52:3b:58:3b:ab:1c:3b:fe:
35:59:35:39:62:4b:c3:3d:4e:4b:17:e5:4d:47:f4:
89:f0:b0:50:5e:b1:4c:41:f1:ae:41:2a:78:67:1d:
71:fd:1f:20:c9:ab:2f:87:48:19:62:c0:b2:59:e5:
c8:a0:99:df:b4:2c:56:ec:c0:07:5f:4e:a2:33:c6:
3d:ef:ce:00:aa:6a:fe:a8:9a:6f:99:35:ef:8a:60:
67:a3:83:c0:54:a8:58:ff:0d:b7:7d:87:5c:22:4f:
ee:d1:6d:d4:7c:c1:f8:12:74:ab:f0:e7:d0:55:47:
f1:f4:76:7e:e1:00:08:03:4a:16:57:21:91:b6:5e:
4a:ae:6e:68:eb:1f:1a:0b:5d:74:a9:d0:a9:56:c9:
5a:cc:e7:e4:c1:19:07:19:19:64:e0:5a:b6:2e:ba:
73:ea:bc:ed:e7:43:c7:40:e2:27:e9:94:0f:36:1b:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B6:C5:EA:4A:C0:A6:CC:05:F6:48:59:5C:2B:53:A1:F6:7C:89:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146574.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af54::/32
Signature Algorithm: sha256WithRSAEncryption
76:40:d1:37:67:35:32:d3:80:13:1e:fd:05:ae:b1:09:46:b8:
7a:b4:c2:54:66:15:95:0c:43:9f:10:aa:61:b9:e4:78:34:98:
02:12:47:aa:95:4f:a5:21:8d:41:c4:70:c4:0e:37:bb:64:56:
93:da:ea:9c:62:e4:1f:a8:f8:1b:fc:7a:4f:27:ac:f9:ad:18:
d1:b8:4d:82:c1:c1:25:7e:11:c8:51:97:0a:96:9e:09:28:1b:
28:42:0d:fd:59:9f:f9:37:85:97:bc:dd:c9:d0:49:ef:e0:6c:
44:53:03:85:ab:a0:2b:d3:b8:bc:be:aa:84:57:72:d4:44:17:
ec:5b:fb:4b:91:e2:70:82:f5:6b:31:82:cc:dc:a2:fc:b2:22:
30:a2:26:9b:2d:64:d2:4f:c3:d1:bf:e8:aa:db:6d:14:76:d0:
07:32:90:c5:47:f7:ab:9d:3b:ae:8c:c6:ed:3c:a4:f6:b5:09:
8a:d0:de:22:ab:40:d8:38:c3:5e:5d:ea:31:3d:51:d7:ed:17:
2c:04:bc:ac:8f:6a:9b:09:ed:04:e8:6c:e6:e7:3d:95:62:29:
7a:d5:9e:61:b5:fa:4b:d2:ee:6b:16:ed:95:e3:53:13:fd:ca:
29:7b:13:1c:ce:94:fd:3a:3e:90:64:f8:4e:da:7c:0a:e8:3a:
d6:a7:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:53 2026 by rpki-client