Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146608.roa
File: AS146608.roa (raw, json)
Hash identifier: hkoYonpQv2MHtpFmKaaslltXrrrSDf+B2RbhXVKxqVo=
Subject key identifier: 85:85:4D:EE:D4:D3:9F:45:AE:0C:02:64:34:4F:9B:4D:C5:AC:F3:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0CC18B64969FC1F62738D58D31DEF67BD2E2AC97
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146608.roa
Signing time: Fri 22 May 2026 01:50:18 +0000
ROA not before: Fri 22 May 2026 01:45:18 +0000
ROA not after: Fri 21 May 2027 01:50:18 +0000
asID: 146608
IP address blocks: 240a:af76::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c1:8b:64:96:9f:c1:f6:27:38:d5:8d:31:de:f6:7b:d2:e2:ac:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:18 2026 GMT
Not After : May 21 01:50:18 2027 GMT
Subject: CN=85854DEED4D39F45AE0C0264344F9B4DC5ACF3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:ba:c5:7b:f7:bb:05:be:6f:60:f4:c2:9b:
2f:af:47:27:b2:ab:df:76:5f:4c:ce:65:ed:06:7f:
1d:d2:2c:71:56:56:34:1d:72:25:dc:54:6c:7d:07:
a4:5a:bc:f9:1a:63:e2:01:3a:0d:de:b3:e3:81:97:
76:cc:81:cf:9e:33:cb:81:c4:c0:58:dd:c9:4a:a2:
a7:e9:5a:5c:64:cc:cf:ae:09:94:32:f1:97:28:fb:
19:b4:b5:55:e6:1d:d1:6c:57:fc:49:0a:7e:f5:12:
93:6d:4f:f8:3e:6e:40:2f:48:df:cd:fa:81:35:d6:
af:d6:e1:05:c9:d6:8a:97:56:dc:46:2d:8f:0e:aa:
7b:61:6f:e4:2f:ef:b7:92:80:3f:62:44:ba:24:b9:
d1:85:3c:5a:90:b4:1a:ed:bf:65:df:d8:64:22:a8:
c8:87:d0:48:57:f2:d2:5c:59:3e:8f:b1:eb:e1:65:
32:17:7c:54:dc:b9:26:c9:6a:5a:f5:e9:b6:4c:24:
b2:86:96:aa:73:bb:a6:3e:11:43:c5:d4:92:1c:54:
3a:50:cf:53:b4:5e:57:7f:36:57:31:ad:bc:c2:f2:
6b:16:bc:e3:0e:35:71:b4:35:49:82:01:45:d3:31:
08:2f:be:d0:b4:16:c6:e4:e8:ba:71:f1:15:18:87:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:85:4D:EE:D4:D3:9F:45:AE:0C:02:64:34:4F:9B:4D:C5:AC:F3:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146608.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af76::/32
Signature Algorithm: sha256WithRSAEncryption
30:03:c1:eb:68:6b:a1:90:63:0e:7e:66:46:d5:c2:68:30:21:
ba:51:98:8d:76:a1:c3:d1:00:9a:64:3d:e8:e3:02:30:c0:fc:
6f:bb:5a:81:ca:a5:f2:bc:21:68:b1:a4:7d:73:ab:20:55:33:
9e:71:27:b4:b0:44:e6:8c:08:43:50:6d:57:4f:47:7e:a9:08:
13:00:77:84:02:64:94:74:7d:dc:c9:c8:d5:2a:a8:a7:e1:9f:
a2:80:83:b2:4a:d3:a1:cb:2c:10:3e:8d:8a:2d:f6:4b:10:68:
34:7c:ff:aa:07:c9:c9:c9:d0:d1:15:5b:88:3c:83:37:7b:8f:
86:ab:1d:55:66:62:1b:c1:dc:85:50:9d:c2:16:f8:a6:bf:8b:
34:a7:0f:b3:34:1f:61:9d:b2:25:35:2e:de:42:26:56:15:87:
dc:19:29:51:78:cf:02:49:e7:92:fb:89:b4:69:bd:82:db:26:
f1:cc:67:59:e7:c8:23:8f:49:c9:ee:a3:ed:13:26:58:d8:43:
e4:1a:16:df:96:f0:cb:bf:a0:5a:c3:52:32:a1:50:cd:26:58:
6a:51:3c:48:06:7d:90:29:39:17:67:42:d4:dc:2a:2e:b5:35:
48:41:b3:f5:d8:af:a2:e7:07:01:2e:cf:e6:9c:cb:d2:36:af:
49:65:dc:b9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDMGLZJafwfYnONWNMd72e9LirJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MThaFw0yNzA1MjEwMTUwMThaMDMxMTAvBgNV
BAMTKDg1ODU0REVFRDREMzlGNDVBRTBDMDI2NDM0NEY5QjREQzVBQ0YzRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63LrFe/e7Bb5vYPTCmy+vRyey
q992X0zOZe0Gfx3SLHFWVjQdciXcVGx9B6RavPkaY+IBOg3es+OBl3bMgc+eM8uB
xMBY3clKoqfpWlxkzM+uCZQy8Zco+xm0tVXmHdFsV/xJCn71EpNtT/g+bkAvSN/N
+oE11q/W4QXJ1oqXVtxGLY8Oqnthb+Qv77eSgD9iRLokudGFPFqQtBrtv2Xf2GQi
qMiH0EhX8tJcWT6PsevhZTIXfFTcuSbJalr16bZMJLKGlqpzu6Y+EUPF1JIcVDpQ
z1O0Xld/NlcxrbzC8msWvOMONXG0NUmCAUXTMQgvvtC0Fsbk6Lpx8RUYh1BfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUhYVN7tTTn0WuDAJkNE+bTcWs89kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjA4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvdjANBgkqhkiG9w0BAQsFAAOCAQEAMAPB
62hroZBjDn5mRtXCaDAhulGYjXahw9EAmmQ96OMCMMD8b7tagcql8rwhaLGkfXOr
IFUznnEntLBE5owIQ1BtV09HfqkIEwB3hAJklHR93MnI1Sqop+GfooCDskrTocss
ED6Nii32SxBoNHz/qgfJycnQ0RVbiDyDN3uPhqsdVWZiG8HchVCdwhb4pr+LNKcP
szQfYZ2yJTUu3kImVhWH3BkpUXjPAknnkvuJtGm9gtsm8cxnWefII49Jye6j7RMm
WNhD5BoW35bwy7+gWsNSMqFQzSZYalE8SAZ9kCk5F2dC1NwqLrU1SEGz9divoucH
AS7P5pzL0javSWXcuQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:30 2026 by rpki-client