Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146605.roa
File: AS146605.roa (raw, json)
Hash identifier: 9Qxa9/RQmlCgxZjT01NYSmuRNt0kdqekGCYHd7cLIHM=
Subject key identifier: 71:2B:6A:4A:05:73:37:F1:2C:1D:62:77:8C:53:65:30:EE:EA:79:26
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 117773AAE8B22A3C2526D8E7855EEF12D043EF23
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146605.roa
Signing time: Fri 22 May 2026 06:46:33 +0000
ROA not before: Fri 22 May 2026 06:41:33 +0000
ROA not after: Fri 21 May 2027 06:46:33 +0000
asID: 146605
IP address blocks: 240a:af73::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:77:73:aa:e8:b2:2a:3c:25:26:d8:e7:85:5e:ef:12:d0:43:ef:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:33 2026 GMT
Not After : May 21 06:46:33 2027 GMT
Subject: CN=712B6A4A057337F12C1D62778C536530EEEA7926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:bb:8d:71:f0:80:cd:24:ac:8f:22:c9:25:
5b:9d:38:f5:87:25:bb:39:c1:04:9e:85:3e:30:95:
8a:b9:da:a9:43:10:dc:a1:ef:8f:3b:14:78:84:af:
23:98:e0:df:1c:9d:0c:46:d1:5f:a3:86:46:9c:a5:
a0:c6:8c:37:b3:f5:ed:28:74:29:1b:ee:5a:32:97:
81:11:f5:6e:1d:21:a7:d8:f5:58:32:1d:d3:c9:27:
15:b7:14:8f:d0:2e:b0:9d:d9:9a:66:df:5e:e9:53:
72:e0:b4:df:27:cd:8a:3a:44:3b:da:f2:2b:ab:6e:
ec:96:2f:0a:be:6d:c6:8f:87:49:da:24:94:83:1a:
c1:8e:20:86:d0:e6:83:85:7c:de:87:ef:41:78:40:
a3:95:5e:9c:d6:10:df:62:37:1a:6d:90:e7:ae:43:
28:87:27:b2:5d:29:af:6e:99:10:be:5a:48:dc:10:
6a:50:b6:7a:14:10:dd:69:bc:02:e7:9e:69:ac:f2:
cf:5a:0d:95:86:ee:41:96:d6:44:5e:95:9a:49:b2:
1c:c6:9f:b9:e6:08:a9:70:e0:f5:f2:28:34:a3:b2:
2e:cd:94:c2:bc:f3:74:e4:53:e9:6c:dd:b5:db:58:
a0:fb:62:f3:a7:ec:73:f8:e9:d3:d7:09:f3:5f:04:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2B:6A:4A:05:73:37:F1:2C:1D:62:77:8C:53:65:30:EE:EA:79:26
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af73::/32
Signature Algorithm: sha256WithRSAEncryption
a9:52:e0:95:e1:fa:90:3d:1e:e6:dc:53:ae:45:d7:19:7b:11:
79:aa:8c:2c:8d:c2:28:11:05:d9:ae:16:57:ed:b1:0c:aa:a1:
a1:b4:51:86:61:bd:76:8c:71:04:0d:bc:31:21:4c:eb:ab:9e:
d0:36:9d:f7:b7:eb:c0:a6:89:10:ea:fb:f1:1b:41:85:9e:47:
38:a7:9b:03:eb:15:05:75:7f:65:db:12:ee:d4:ff:ed:bd:ee:
a3:51:be:6c:49:0a:e5:7c:53:61:e0:a0:92:31:6a:e2:43:e6:
61:7a:a2:93:01:5f:9c:bb:14:17:2a:6a:4a:81:ba:1a:30:aa:
75:e7:7f:07:2c:37:bc:07:a2:e9:5a:b3:57:0b:16:39:53:02:
76:a0:40:de:83:e9:cf:08:dc:f1:68:e6:dd:89:46:8d:ab:7d:
d3:ab:ed:86:49:6b:be:a1:43:e2:c7:ff:84:ac:12:d2:64:31:
70:3e:bc:b8:1c:ce:a7:5a:4d:d3:b6:82:2b:98:a0:43:ea:60:
e7:ed:ea:f4:8e:b6:24:b8:22:58:38:09:4b:41:a2:e6:cd:6d:
30:b8:d2:20:43:5c:7e:2c:10:1d:0f:22:5c:ba:7c:74:a2:d9:
a7:d9:fc:01:f0:92:5b:56:82:41:7b:df:7e:c8:b3:03:17:3f:
5a:03:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:54 2026 by rpki-client