Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146613.roa
File: AS146613.roa (raw, json)
Hash identifier: 8QvyE0BgzEhi1/ucV5Vq2kYoXXV3jasTda8eFTaIKRo=
Subject key identifier: 9D:AF:1B:E7:C6:F8:4D:83:A6:9F:81:BB:90:6E:4A:CC:2C:23:47:C2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 599F91D94D52FC020C09A5A96F7ACF388987AEDE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146613.roa
Signing time: Fri 22 May 2026 06:58:37 +0000
ROA not before: Fri 22 May 2026 06:53:37 +0000
ROA not after: Fri 21 May 2027 06:58:37 +0000
asID: 146613
IP address blocks: 240a:af7b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9f:91:d9:4d:52:fc:02:0c:09:a5:a9:6f:7a:cf:38:89:87:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:37 2026 GMT
Not After : May 21 06:58:37 2027 GMT
Subject: CN=9DAF1BE7C6F84D83A69F81BB906E4ACC2C2347C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:61:18:8c:f4:78:55:ba:ae:f7:1d:b0:e2:a8:
bd:21:79:cc:ce:7c:24:83:e9:27:56:2c:ac:a1:93:
a7:12:3f:23:4b:8a:8d:87:8f:15:ca:cd:67:75:8f:
82:39:9c:59:cf:2a:6e:c5:20:b2:c8:9b:64:50:bf:
28:b3:05:f5:c3:ee:6d:d3:4b:b8:18:de:9a:eb:80:
a1:8a:59:67:f9:df:18:c2:73:94:e6:cd:8a:a7:18:
6a:22:db:fd:d3:41:a9:fe:52:cf:a3:fd:51:1e:e0:
19:6d:70:7f:70:7f:c8:c4:77:f7:84:46:53:9d:c0:
24:3a:b3:90:60:de:02:3b:3b:3f:ba:a1:ba:0a:26:
3d:8d:2b:8a:cc:d8:47:8a:24:d1:63:37:4b:53:ae:
26:9b:ae:77:63:ab:b9:23:54:dc:98:e0:64:5f:8b:
f4:93:63:02:4b:9e:32:c3:d6:ff:81:73:e5:da:bd:
83:64:72:55:7b:27:87:82:4b:72:8d:db:b6:cc:4c:
77:c6:20:85:ed:2a:c7:33:61:b5:84:80:28:ba:1c:
d1:75:95:53:12:68:96:ec:2b:2d:d5:8c:3b:1e:fc:
cd:62:e0:bc:fb:d8:97:82:86:95:5f:9e:93:9e:09:
83:cd:47:e7:1a:88:c2:cf:70:24:67:a5:e8:89:fc:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:1B:E7:C6:F8:4D:83:A6:9F:81:BB:90:6E:4A:CC:2C:23:47:C2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146613.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af7b::/32
Signature Algorithm: sha256WithRSAEncryption
15:0a:f5:01:2a:dc:19:df:4b:e3:09:c0:01:f2:c8:20:85:20:
fc:e1:85:e6:b5:ef:b1:04:10:09:1f:ed:6c:16:ce:f2:82:18:
ec:1a:e7:9e:a0:f4:ca:0d:e0:3c:6c:13:a3:1e:41:0d:ec:51:
8c:d9:4e:6d:20:10:df:d3:fb:29:25:ae:b5:e3:15:77:07:a9:
ef:77:6d:b6:37:84:8a:74:09:ba:71:9d:1c:81:29:28:e3:7e:
13:1f:80:d4:75:df:04:48:e2:b2:04:33:79:81:e2:c8:11:6e:
b5:b6:13:14:54:9a:f2:5a:be:71:b7:8d:ae:58:93:c1:c8:bc:
6f:31:23:ee:be:95:ac:d4:c0:2b:c3:02:bc:03:7f:48:fe:ca:
40:3b:72:78:6d:82:68:d4:50:cd:4f:54:3f:36:50:dc:a5:bf:
da:db:e8:6d:43:dd:c5:57:ce:41:7b:40:1d:57:8e:e2:b7:29:
fb:9e:44:c4:3b:15:f6:98:c0:ef:af:73:f8:a7:98:70:16:cd:
2f:d0:93:87:97:01:89:31:8a:f3:25:28:a3:e8:8c:1b:76:c9:
d7:8c:f2:8c:54:5e:a7:8f:c0:98:40:cc:c2:fe:81:00:41:6b:
3d:9e:24:d6:fe:60:58:ec:10:23:34:d1:6f:ed:a4:2d:40:ec:
05:23:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:09 2026 by rpki-client