Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146633.roa
File: AS146633.roa (raw, json)
Hash identifier: hf4zRksWcNAo7UrjCbHXi92ATpAtZNY0zcAboxJXFuQ=
Subject key identifier: 27:FA:48:89:4F:3E:FE:7A:BB:59:C4:C7:60:F9:9D:3B:BC:65:65:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 59FB09EDE0BB5FAB95B26D5256B5EBEDBD6AB2B5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146633.roa
Signing time: Mon 25 May 2026 01:20:09 +0000
ROA not before: Mon 25 May 2026 01:15:09 +0000
ROA not after: Mon 24 May 2027 01:20:09 +0000
asID: 146633
IP address blocks: 240a:af8f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fb:09:ed:e0:bb:5f:ab:95:b2:6d:52:56:b5:eb:ed:bd:6a:b2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:09 2026 GMT
Not After : May 24 01:20:09 2027 GMT
Subject: CN=27FA48894F3EFE7ABB59C4C760F99D3BBC65656E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:fc:22:5f:c2:e7:27:20:64:e7:4e:b6:d2:
75:7b:bd:99:e9:3b:ab:74:06:e2:8f:91:c5:85:54:
c0:e5:ff:7a:dd:81:fc:b2:d4:06:d3:5b:84:d3:68:
7b:94:2a:49:d2:f7:01:cc:38:29:16:c4:83:61:44:
31:2e:ec:1a:42:2c:bd:1d:bf:5a:49:e7:ce:3e:32:
54:90:98:94:4a:37:e1:6a:da:c0:14:f1:a2:36:05:
a7:a1:7a:25:bb:f5:bb:c5:b3:36:96:b5:1e:27:ed:
0a:c6:f4:c3:f0:9b:48:8f:1e:6a:c1:87:6f:f7:b6:
89:cf:a1:9b:aa:11:db:0b:c7:48:1c:c8:1c:b8:97:
92:8f:1e:65:37:b9:d9:6f:2f:3d:b7:bd:38:85:49:
eb:70:de:06:52:13:80:32:1a:c4:28:23:88:73:ae:
ae:6c:fc:6c:93:2c:76:ce:f3:43:d8:1b:6c:bc:89:
35:a3:e3:c0:a9:5a:c3:f1:fe:fb:c8:8a:b0:e4:9f:
52:85:86:e6:70:c4:f5:eb:96:ff:7f:b1:85:13:66:
c9:f0:b1:bc:de:4b:ea:f1:5b:47:8a:5d:9d:db:83:
fe:96:63:57:d2:de:1c:3a:91:31:6c:fb:3c:ad:08:
68:b8:72:03:2a:0c:5a:a2:fe:ff:0d:d8:2d:47:a4:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FA:48:89:4F:3E:FE:7A:BB:59:C4:C7:60:F9:9D:3B:BC:65:65:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af8f::/32
Signature Algorithm: sha256WithRSAEncryption
aa:d5:6d:71:ba:58:10:29:60:32:df:90:80:43:6d:9b:49:a8:
f7:ba:7c:da:88:13:4c:56:58:b5:eb:32:22:dd:41:6b:29:40:
ce:cc:4d:fe:d7:50:97:e5:da:e5:4e:de:d6:66:ab:af:7e:4d:
91:4e:92:24:3c:84:7f:89:c3:64:7f:26:f7:87:55:26:de:63:
2f:6e:28:b4:1d:89:b3:e2:bf:3f:6d:7a:6e:0f:69:d1:ea:d4:
b6:8e:a8:36:86:18:86:80:54:ef:e1:97:00:bd:2a:e9:c8:85:
a6:93:f7:a6:8b:e5:aa:52:3b:e9:c2:72:98:e4:7a:d0:73:f8:
f3:d2:2e:0d:e7:72:8a:e4:f2:4a:3b:d9:43:55:f7:42:3d:53:
35:5e:45:e7:7f:a2:17:9c:e1:3d:a9:8c:c5:7d:40:ee:7e:4b:
fa:0c:60:2e:1f:84:e1:07:ea:89:18:89:8c:53:b3:c0:2e:8c:
d1:8f:6b:7a:df:8d:1a:d1:b9:4f:a2:bc:2a:f6:41:77:04:9c:
6a:7b:8f:d9:5e:99:45:a6:47:87:ff:2a:11:8b:70:d2:c0:e3:
84:5b:9c:fc:4f:c5:68:ed:2d:0c:f1:5f:41:94:28:19:6b:2e:
5c:04:29:57:4d:95:f9:6a:80:b1:12:03:e8:7c:f4:d6:3a:43:
22:f9:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:11 2026 by rpki-client