Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146621.roa
File: AS146621.roa (raw, json)
Hash identifier: KwfcqdmWTKjpwWE6inJRjJAApJTk/ffRSw1nj3VT6n0=
Subject key identifier: 99:15:37:BF:3B:F0:7C:AC:D6:72:45:6C:1D:91:9B:1A:73:72:3D:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5F584F318AF5B40C83FD5A0EDD80E2799A255542
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146621.roa
Signing time: Mon 25 May 2026 01:38:38 +0000
ROA not before: Mon 25 May 2026 01:33:38 +0000
ROA not after: Mon 24 May 2027 01:38:38 +0000
asID: 146621
IP address blocks: 240a:af83::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:58:4f:31:8a:f5:b4:0c:83:fd:5a:0e:dd:80:e2:79:9a:25:55:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:38 2026 GMT
Not After : May 24 01:38:38 2027 GMT
Subject: CN=991537BF3BF07CACD672456C1D919B1A73723D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:e2:46:1a:01:5c:23:8a:51:b9:0e:8b:1b:
bc:4a:cb:12:70:34:21:bd:0c:0f:5e:6f:a4:df:ce:
ca:cb:1d:bd:82:39:ca:8f:df:31:58:fb:ce:cd:17:
1e:88:5a:dd:1a:3b:c5:1a:98:bb:3c:8a:5b:0f:a4:
49:9a:05:80:97:9d:17:cc:7e:0f:e2:00:31:be:fe:
84:d0:a7:17:43:2c:ac:e0:d4:d5:0c:60:54:da:a6:
d4:d0:9d:66:4a:da:a8:e7:46:53:82:51:55:95:95:
07:40:59:71:40:6f:9b:18:f9:aa:4d:92:ac:8e:57:
67:16:e0:47:4e:69:68:23:25:03:b0:38:c8:b6:2b:
7e:80:ad:7d:a8:6d:50:b3:03:71:7f:f4:c0:dd:6b:
19:d4:84:4b:72:19:61:35:56:95:43:ea:15:1d:68:
40:93:b3:1b:2e:68:8f:21:0c:de:e5:11:b4:76:42:
d7:55:54:24:eb:55:8f:5a:c3:b2:a6:b3:fc:55:a1:
7f:ec:32:20:15:12:e9:80:9d:1d:36:84:34:45:22:
5e:cd:3d:b0:c7:49:21:32:6b:14:f0:f0:71:7e:11:
ee:e0:60:a1:46:ba:58:88:2f:84:a6:a4:69:76:dc:
6b:52:7e:28:0d:e8:61:1e:f5:51:24:66:4e:73:7a:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:37:BF:3B:F0:7C:AC:D6:72:45:6C:1D:91:9B:1A:73:72:3D:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146621.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af83::/32
Signature Algorithm: sha256WithRSAEncryption
2b:8e:45:e0:b1:00:3b:77:66:77:9b:e8:f4:31:64:38:05:86:
7a:02:8f:08:70:93:c3:09:5f:16:cf:30:d9:67:5e:6a:cf:34:
12:77:2c:f3:a3:7b:a8:48:83:47:ed:93:77:77:75:e3:67:39:
89:3c:01:df:02:23:19:f9:10:35:89:d6:1a:82:10:0e:12:18:
0b:3b:ae:e1:73:9c:a3:fd:9d:f9:e2:9c:df:44:1b:d4:bb:01:
2f:8b:ec:29:da:26:22:b9:f1:35:0d:01:39:0d:be:c9:42:b1:
e5:88:37:f8:88:46:db:78:c7:2d:74:22:79:b5:c8:7a:c5:d6:
19:3a:29:9b:df:25:f0:16:04:59:2b:75:f6:f7:cf:3b:06:dd:
7e:e1:54:f1:3d:c4:80:3e:b2:04:69:2f:ce:a0:4e:49:79:8f:
2e:4c:fe:38:b0:cd:0a:0f:bc:8f:86:93:3b:16:71:7d:34:4e:
e4:6f:e9:68:a8:f3:01:1a:16:18:11:8c:ba:37:1a:96:4a:11:
00:a6:71:4d:13:a6:8a:d5:9b:85:25:7b:fc:c1:6f:05:c2:34:
fe:b2:c3:03:e5:ae:5b:83:4e:33:73:df:9b:d9:98:31:af:3c:
80:69:36:2d:e8:83:fc:0c:ad:21:1b:9c:35:21:6f:5d:0f:81:
e4:44:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:52 2026 by rpki-client