Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146624.roa
File: AS146624.roa (raw, json)
Hash identifier: TTdse+0AVvIxwMLl1AwFgegPsib0xPUQEwtbN1DI+O8=
Subject key identifier: 52:C0:12:0E:32:34:A1:4F:42:F4:5D:E0:79:E0:AF:51:0B:50:B1:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 130B85D1DD49AD58D8D1316E1F561C870776310D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146624.roa
Signing time: Fri 22 May 2026 07:32:20 +0000
ROA not before: Fri 22 May 2026 07:27:20 +0000
ROA not after: Fri 21 May 2027 07:32:20 +0000
asID: 146624
IP address blocks: 240a:af86::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:0b:85:d1:dd:49:ad:58:d8:d1:31:6e:1f:56:1c:87:07:76:31:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:20 2026 GMT
Not After : May 21 07:32:20 2027 GMT
Subject: CN=52C0120E3234A14F42F45DE079E0AF510B50B12B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:a3:ef:58:5c:fc:f3:d4:dd:fa:c5:30:60:
5f:70:3b:3e:1e:58:d9:80:02:79:50:d0:aa:c3:83:
4a:88:25:08:13:82:ce:14:4c:f6:3c:fc:b6:81:86:
74:7c:6f:a6:3c:26:d4:f1:60:41:51:a5:68:fe:a6:
7d:42:6c:28:e6:7b:87:04:90:a8:65:02:ca:ef:08:
4d:b8:c2:10:dc:82:bf:f3:67:29:d8:a3:a0:31:b6:
ee:dc:e1:89:14:4f:80:3d:23:f5:f3:aa:35:00:29:
a7:27:c2:e5:05:95:6c:bd:f1:d8:e6:fe:22:ff:53:
1d:f9:21:c8:82:e6:e7:d8:c3:3b:f6:22:1c:03:3a:
59:42:08:ad:41:57:3c:62:3b:f7:08:ea:2c:29:8c:
cf:e8:e6:1c:d7:26:4f:5d:4c:33:da:7f:65:64:a3:
13:d3:bb:f5:91:dd:3d:fd:ec:f7:47:e6:8a:aa:04:
cc:0f:2c:11:62:67:c2:3e:0e:dc:74:bc:97:83:49:
2c:11:c0:7a:3a:db:7c:4f:18:17:ce:73:29:82:2c:
b1:ae:f0:9a:97:68:82:01:9c:7c:8f:49:cd:d5:1c:
bd:ea:41:20:01:69:aa:a1:f2:12:28:cc:8f:f0:7e:
9b:4e:8f:95:20:0c:d9:99:07:1c:e0:11:78:c4:fc:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C0:12:0E:32:34:A1:4F:42:F4:5D:E0:79:E0:AF:51:0B:50:B1:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146624.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af86::/32
Signature Algorithm: sha256WithRSAEncryption
74:26:b8:08:3b:3d:87:ad:02:06:a7:16:a9:03:d0:9f:3b:b5:
8e:19:41:5f:25:38:53:86:48:3c:e9:32:e7:25:b1:77:29:79:
9f:74:51:b4:b7:0b:85:de:e0:9a:87:51:fa:40:fc:c5:44:6a:
91:f0:0b:4b:c9:43:65:59:47:49:62:95:53:5c:40:c3:fa:c0:
c0:a7:e2:ba:ad:dc:9f:ca:c0:12:e8:99:f4:f1:9e:17:a3:04:
f5:3a:ac:45:b7:69:18:4b:15:d1:b1:e6:e7:48:2b:bb:15:8b:
90:8e:cb:aa:db:cc:b5:91:c3:55:ba:8b:b3:49:d1:13:14:dc:
c3:a1:e4:b1:78:b8:ad:60:52:4a:77:3a:f2:1b:25:53:b9:c5:
11:a5:cc:d9:52:6a:9d:e2:b7:10:75:17:f7:b6:8f:56:82:64:
bf:5a:f2:af:4f:c5:00:aa:9f:25:b3:f8:71:cb:73:17:9d:18:
ab:03:bd:c8:1b:7b:57:a0:08:e1:b5:fd:36:d3:bd:40:ce:f4:
a1:ff:a2:24:c0:f7:50:b4:76:0c:6a:c0:b3:ac:8b:bf:b9:22:
b7:7a:e0:45:5c:8e:5c:57:00:c8:91:81:97:c4:e7:f8:61:79:
30:d8:6d:51:3d:05:66:0d:ef:8c:e1:b2:14:18:59:34:ed:71:
93:80:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:46 2026 by rpki-client