Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146591.roa
File: AS146591.roa (raw, json)
Hash identifier: 1bvGop7kCvzpSgbNvxiaIMGDq9Y09kKM6CHa1ysiptA=
Subject key identifier: 11:42:B4:B2:C4:7E:A9:08:BB:AA:7F:3A:23:9D:1B:FA:DF:B4:47:4E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31DC689BE805C2F5F4A860E47CF58CFA15EB8A3F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146591.roa
Signing time: Mon 25 May 2026 01:20:22 +0000
ROA not before: Mon 25 May 2026 01:15:22 +0000
ROA not after: Mon 24 May 2027 01:20:22 +0000
asID: 146591
IP address blocks: 240a:af65::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:dc:68:9b:e8:05:c2:f5:f4:a8:60:e4:7c:f5:8c:fa:15:eb:8a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:22 2026 GMT
Not After : May 24 01:20:22 2027 GMT
Subject: CN=1142B4B2C47EA908BBAA7F3A239D1BFADFB4474E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:d4:25:e2:bc:0e:d6:7f:36:ef:98:d6:b9:
fe:0c:2d:26:85:87:5d:94:78:3f:34:07:5e:dd:1a:
a4:94:43:d7:90:b8:02:de:4a:a5:5a:aa:20:7d:d8:
45:c5:43:c1:c8:04:95:bf:df:20:82:25:65:46:b2:
49:41:cb:58:bb:c5:eb:29:ab:d1:12:3a:2f:83:9f:
13:44:3a:a2:80:92:26:ff:f4:6c:ff:c4:42:c4:16:
43:14:a3:54:d8:59:2a:61:bf:f2:d8:9a:fb:92:c8:
20:17:5b:52:90:07:4b:ff:3b:4a:bb:df:f9:c7:86:
48:8c:61:c0:b9:bf:34:81:2d:16:17:9e:3a:e2:de:
d0:79:5f:24:4a:0c:05:62:0f:8e:de:d8:61:8a:39:
79:14:d4:30:5c:bc:26:30:60:34:18:14:47:94:dd:
f1:cf:66:cf:57:cb:c4:67:c7:f3:ee:a3:77:6f:59:
c1:72:3b:84:01:d5:04:de:66:99:3b:2e:4c:3b:96:
89:5d:25:b9:87:59:53:68:c0:42:32:b6:d3:19:a6:
94:b3:05:1a:55:33:77:aa:84:de:dc:20:08:e6:19:
e9:08:55:2a:a7:62:b3:94:3e:fe:ef:01:ba:eb:0c:
10:c5:45:b3:cc:f9:6d:f3:37:5e:fb:6e:d6:37:ea:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:42:B4:B2:C4:7E:A9:08:BB:AA:7F:3A:23:9D:1B:FA:DF:B4:47:4E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146591.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af65::/32
Signature Algorithm: sha256WithRSAEncryption
21:c3:a7:86:e2:70:5c:fe:48:55:e3:07:90:46:f2:1b:1b:85:
e1:d8:e9:a0:ca:a6:d3:90:16:c8:ce:e7:47:d5:ec:4a:2d:3d:
ec:38:ad:93:e9:51:46:4a:66:d3:f9:1f:cc:7f:cc:01:8c:89:
ef:56:30:03:b5:a4:37:5e:05:51:d4:0a:c1:bb:ce:56:d6:d9:
cf:f4:25:df:ae:4f:9e:b7:3f:77:ff:16:02:4e:14:a6:73:07:
02:f4:08:1c:0c:72:9a:c7:51:2d:47:58:d9:f6:f2:ee:77:d6:
42:e9:1c:92:f9:fa:0a:ab:0b:3c:20:c3:9c:a4:61:5b:f0:52:
f6:54:17:45:9b:20:1e:ab:09:eb:6c:5f:93:13:e0:c1:3e:6e:
ea:5e:ac:34:8a:05:57:f1:d8:c0:ee:32:8f:1c:b6:c2:e5:e0:
98:ca:78:99:7d:9d:39:c0:6f:5d:a9:29:21:6b:17:c3:88:6b:
75:f9:b1:7e:f1:6c:18:b8:75:09:b5:c5:0a:a6:fa:e1:02:12:
90:b1:dc:39:f8:91:95:35:37:7c:a2:a1:cf:d8:04:a0:db:2a:
7f:95:9e:fb:7b:7b:27:c5:c0:4f:b9:5e:03:76:94:e3:74:89:
07:bf:fc:d3:0d:6d:22:dc:4f:4e:5b:1b:dd:ef:1b:e2:ab:7d:
d7:cb:47:a9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMdxom+gFwvX0qGDkfPWM+hXrij8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MjJaFw0yNzA1MjQwMTIwMjJaMDMxMTAvBgNV
BAMTKDExNDJCNEIyQzQ3RUE5MDhCQkFBN0YzQTIzOUQxQkZBREZCNDQ3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTYNQl4rwO1n8275jWuf4MLSaF
h12UeD80B17dGqSUQ9eQuALeSqVaqiB92EXFQ8HIBJW/3yCCJWVGsklBy1i7xesp
q9ESOi+DnxNEOqKAkib/9Gz/xELEFkMUo1TYWSphv/LYmvuSyCAXW1KQB0v/O0q7
3/nHhkiMYcC5vzSBLRYXnjri3tB5XyRKDAViD47e2GGKOXkU1DBcvCYwYDQYFEeU
3fHPZs9Xy8Rnx/Puo3dvWcFyO4QB1QTeZpk7Lkw7loldJbmHWVNowEIyttMZppSz
BRpVM3eqhN7cIAjmGekIVSqnYrOUPv7vAbrrDBDFRbPM+W3zN177btY36v/pAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUEUK0ssR+qQi7qn86I50b+t+0R04wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvZTANBgkqhkiG9w0BAQsFAAOCAQEAIcOn
huJwXP5IVeMHkEbyGxuF4djpoMqm05AWyM7nR9XsSi097Ditk+lRRkpm0/kfzH/M
AYyJ71YwA7WkN14FUdQKwbvOVtbZz/Ql365Pnrc/d/8WAk4UpnMHAvQIHAxymsdR
LUdY2fby7nfWQukckvn6CqsLPCDDnKRhW/BS9lQXRZsgHqsJ62xfkxPgwT5u6l6s
NIoFV/HYwO4yjxy2wuXgmMp4mX2dOcBvXakpIWsXw4hrdfmxfvFsGLh1CbXFCqb6
4QISkLHcOfiRlTU3fKKhz9gEoNsqf5We+3t7J8XAT7leA3aU43SJB7/80w1tItxP
Tlsb3e8b4qt918tHqQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client