Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146580.roa
File: AS146580.roa (raw, json)
Hash identifier: Tfxz+R1T+83heDAlhR8NBotP5gFmtqi88ruIX1guaZU=
Subject key identifier: C7:1D:6D:77:4F:21:8D:0D:01:F4:70:34:BF:06:15:82:E9:61:49:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6039DBFB7DDB3927ABABA68B065B06C0219BEAFD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146580.roa
Signing time: Fri 22 May 2026 06:46:16 +0000
ROA not before: Fri 22 May 2026 06:41:16 +0000
ROA not after: Fri 21 May 2027 06:46:16 +0000
asID: 146580
IP address blocks: 240a:af5a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:39:db:fb:7d:db:39:27:ab:ab:a6:8b:06:5b:06:c0:21:9b:ea:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:16 2026 GMT
Not After : May 21 06:46:16 2027 GMT
Subject: CN=C71D6D774F218D0D01F47034BF061582E9614939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:e0:1c:0a:2d:39:96:3e:1c:9c:ae:60:23:
ff:05:a9:37:a2:cd:f9:9c:87:05:cc:93:a5:5a:59:
a8:f2:60:a3:6a:fc:5c:3e:48:7f:d9:e0:50:cb:fd:
ec:32:0b:d8:32:57:eb:b2:ec:87:43:70:ef:8b:1c:
ce:7a:12:d1:10:83:ea:b7:d1:8e:dd:ab:11:3f:89:
87:dc:b6:3d:ee:ca:43:34:8b:5f:cd:bb:8b:e9:fc:
2f:de:4b:25:56:7d:d7:5e:72:5f:60:e0:5c:bb:78:
6a:67:a5:9a:07:4a:20:4a:53:c1:38:24:72:76:41:
db:de:90:f8:90:b7:5e:85:69:c5:5b:e0:d2:a1:fd:
44:63:a1:13:0b:df:3b:09:43:9a:4a:f4:45:f5:97:
4b:b4:58:55:1e:0b:6e:30:6d:28:e4:05:2a:58:32:
68:3d:36:01:fe:c2:30:0d:6b:9a:ce:17:53:f4:71:
52:5c:cb:06:57:98:16:52:02:04:39:8e:1f:fa:fe:
70:9c:10:be:2b:a6:2d:4a:d4:a0:27:7e:d8:08:f7:
72:6f:f5:1b:fb:58:6d:dc:c1:df:13:fe:db:06:59:
66:f3:46:09:9e:b5:4b:27:6d:4c:ae:11:9e:6d:c3:
47:28:1e:94:f9:b8:98:86:cc:54:a3:ee:c5:7f:6c:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1D:6D:77:4F:21:8D:0D:01:F4:70:34:BF:06:15:82:E9:61:49:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af5a::/32
Signature Algorithm: sha256WithRSAEncryption
3c:6b:6d:f0:3a:23:f8:27:0a:85:7e:d2:ee:db:26:14:44:c2:
9d:6e:5f:ce:97:10:3e:2e:7a:d6:dc:4f:00:16:1d:59:46:ac:
22:f5:c4:e7:03:ff:e3:7a:67:4b:d0:25:2d:6e:c9:d3:ce:58:
ca:6f:45:a7:00:fc:8b:c3:84:69:da:d4:3a:f6:b1:46:8b:f2:
64:5a:c0:82:a8:c4:76:02:e3:6d:2a:70:dc:e3:fb:8a:2e:0d:
a4:3d:08:ae:d4:c5:c0:a8:d6:d8:cd:bc:bc:5a:19:25:c5:aa:
33:d8:7c:5e:ba:58:ca:e0:a4:b0:2b:f8:49:52:13:d6:91:5a:
da:76:64:e0:1b:92:18:e4:fe:ca:64:16:37:6b:ec:bd:28:80:
2a:03:db:5c:9b:13:d8:48:8e:76:a0:b3:29:a3:db:cc:69:f7:
d1:7b:11:19:7b:b1:5a:10:fb:e0:46:fc:cd:b1:1b:cd:c4:e8:
96:b7:40:85:9d:8c:22:43:13:55:3d:95:7c:1b:f6:32:6a:08:
ef:aa:5a:6c:5c:7c:1e:1c:0f:3a:c6:5d:04:45:ac:10:45:04:
21:4e:12:b1:c7:25:0f:9d:27:e6:82:ac:1b:63:a7:20:4c:af:
33:02:26:c5:84:a2:23:31:fa:24:f6:31:a1:c7:b0:97:c6:e2:
13:c9:98:82
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYDnb+33bOSerq6aLBlsGwCGb6v0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTZaFw0yNzA1MjEwNjQ2MTZaMDMxMTAvBgNV
BAMTKEM3MUQ2RDc3NEYyMThEMEQwMUY0NzAzNEJGMDYxNTgyRTk2MTQ5MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb++AcCi05lj4cnK5gI/8FqTei
zfmchwXMk6VaWajyYKNq/Fw+SH/Z4FDL/ewyC9gyV+uy7IdDcO+LHM56EtEQg+q3
0Y7dqxE/iYfctj3uykM0i1/Nu4vp/C/eSyVWfddecl9g4Fy7eGpnpZoHSiBKU8E4
JHJ2QdvekPiQt16FacVb4NKh/URjoRML3zsJQ5pK9EX1l0u0WFUeC24wbSjkBSpY
Mmg9NgH+wjANa5rOF1P0cVJcywZXmBZSAgQ5jh/6/nCcEL4rpi1K1KAnftgI93Jv
9Rv7WG3cwd8T/tsGWWbzRgmetUsnbUyuEZ5tw0coHpT5uJiGzFSj7sV/bCBLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUxx1td08hjQ0B9HA0vwYVgulhSTkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvWjANBgkqhkiG9w0BAQsFAAOCAQEAPGtt
8Doj+CcKhX7S7tsmFETCnW5fzpcQPi561txPABYdWUasIvXE5wP/43pnS9AlLW7J
085Yym9FpwD8i8OEadrUOvaxRovyZFrAgqjEdgLjbSpw3OP7ii4NpD0IrtTFwKjW
2M28vFoZJcWqM9h8XrpYyuCksCv4SVIT1pFa2nZk4BuSGOT+ymQWN2vsvSiAKgPb
XJsT2EiOdqCzKaPbzGn30XsRGXuxWhD74Eb8zbEbzcTolrdAhZ2MIkMTVT2VfBv2
MmoI76pabFx8HhwPOsZdBEWsEEUEIU4SscclD50n5oKsG2OnIEyvMwImxYSiIzH6
JPYxocewl8biE8mYgg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:43 2026 by rpki-client