Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146578.roa
File: AS146578.roa (raw, json)
Hash identifier: jYHBEGaDCANeElTA/nsO2Fn9Pqjmb+/QKojjDo0HAZ8=
Subject key identifier: D5:76:12:C9:1F:90:6B:88:3E:3A:04:C6:BB:C7:77:26:3C:0E:48:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 62A8D502396846AC4DCA388578B2B3D8FFC984AC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146578.roa
Signing time: Mon 25 May 2026 02:22:30 +0000
ROA not before: Mon 25 May 2026 02:17:30 +0000
ROA not after: Mon 24 May 2027 02:22:30 +0000
asID: 146578
IP address blocks: 240a:af58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a8:d5:02:39:68:46:ac:4d:ca:38:85:78:b2:b3:d8:ff:c9:84:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:30 2026 GMT
Not After : May 24 02:22:30 2027 GMT
Subject: CN=D57612C91F906B883E3A04C6BBC777263C0E488B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:c4:63:20:d5:33:3f:f7:0d:83:96:d7:27:
3f:93:ba:5a:1d:ef:c2:d5:b9:ef:cc:03:1b:c4:4e:
c6:c1:bf:49:7b:b1:db:15:36:b4:e2:7b:f3:03:07:
ba:90:b5:05:81:77:44:13:84:62:d4:9d:f6:99:d3:
cf:22:e8:5d:cf:30:21:70:1f:2b:b2:99:22:35:31:
c5:7b:6f:3d:94:e5:89:f6:47:2b:b6:fa:b1:1d:d1:
73:41:40:cc:e5:25:95:78:a6:48:7c:ce:0a:32:40:
ea:a9:0b:87:e4:14:a0:f7:4f:47:4d:5d:4e:64:92:
20:50:a4:0c:09:48:ab:cf:9e:f0:0a:36:38:44:60:
ec:c4:0c:98:12:88:66:99:c4:a2:65:eb:46:6f:d3:
d8:fe:92:89:cb:51:23:48:f5:ff:c5:9f:a5:a7:21:
47:77:a2:4a:d2:a6:5f:ab:52:19:cf:fa:5c:2f:39:
12:6f:d9:bc:0f:83:36:d3:ba:ee:56:75:20:56:31:
ee:a1:bb:11:79:c5:1d:3a:c1:06:16:bb:b5:b7:1a:
a4:a3:c6:eb:c1:a0:38:e8:d8:63:bb:20:04:88:88:
e3:de:be:b2:cb:17:d3:d0:89:21:75:d2:33:03:5d:
fe:15:6a:55:2e:b2:7b:99:20:64:04:45:b1:55:84:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:76:12:C9:1F:90:6B:88:3E:3A:04:C6:BB:C7:77:26:3C:0E:48:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146578.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af58::/32
Signature Algorithm: sha256WithRSAEncryption
0f:b6:52:8b:87:f4:d1:73:0a:b9:8b:22:80:21:7a:36:fe:2f:
83:ab:70:af:ae:f4:bf:08:d1:54:6d:6e:0b:ce:dd:c7:eb:56:
29:7b:ff:8a:9c:d7:44:90:8a:b8:52:85:70:f4:14:2b:34:c6:
4a:72:bb:50:0e:bb:21:0e:8f:b4:ea:43:54:eb:a4:6b:25:8a:
22:40:74:e9:70:b6:13:2f:7b:f5:40:4f:e9:18:02:cf:23:6f:
f5:c1:7e:c4:b6:b5:20:69:04:78:80:98:19:e4:3a:78:b9:7e:
2a:57:72:1f:15:53:31:66:41:b1:9a:3f:0d:3e:54:8f:a7:63:
5b:47:e7:59:78:c1:48:0a:98:ea:e6:4c:64:9a:95:c7:eb:b0:
e1:25:42:f1:46:f0:e8:7b:a6:75:6d:fe:2d:32:ee:95:5f:e5:
16:d9:75:12:2b:c2:dc:85:e9:3e:85:88:0a:44:0f:8a:52:bc:
0f:4e:00:0a:6d:05:bc:c9:d0:6a:19:61:03:48:e5:ce:e0:d4:
c7:2a:a4:cb:e5:4e:6a:b4:11:5f:65:cb:9b:50:ae:39:a3:1d:
28:10:d4:7a:d8:44:a2:09:f0:a8:71:02:5c:c9:16:3b:71:dc:
d3:f2:2f:6d:ab:90:d8:01:04:bb:2b:41:1a:69:61:08:99:2c:
9d:4b:4c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:19 2026 by rpki-client