Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146634.roa
File: AS146634.roa (raw, json)
Hash identifier: wceKlXowtImFpL6fYGv40eSi6nYojL8iW7jiuht9jkU=
Subject key identifier: 90:A7:2B:F8:9C:47:58:1C:C9:67:43:19:4A:6E:C9:4C:98:A9:80:60
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 751393C8545BA0DC7D6E191CB0C545B16BC41BC4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146634.roa
Signing time: Mon 25 May 2026 01:51:06 +0000
ROA not before: Mon 25 May 2026 01:46:06 +0000
ROA not after: Mon 24 May 2027 01:51:06 +0000
asID: 146634
IP address blocks: 240a:af90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:13:93:c8:54:5b:a0:dc:7d:6e:19:1c:b0:c5:45:b1:6b:c4:1b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:06 2026 GMT
Not After : May 24 01:51:06 2027 GMT
Subject: CN=90A72BF89C47581CC96743194A6EC94C98A98060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:04:d6:0f:28:b9:7f:6e:de:0f:c5:29:c8:
5c:cd:e0:ba:f9:76:33:ba:23:0b:c6:b6:01:12:9a:
2f:72:38:d7:e3:12:af:34:3f:ec:51:46:f0:1c:b4:
2b:49:64:66:1f:fc:34:ae:d5:9b:26:10:c3:ba:1c:
16:8b:76:b5:1b:70:40:67:72:7f:b0:da:95:03:94:
d6:ad:b9:3b:7e:4b:db:5a:58:05:e1:b4:75:63:7e:
d4:72:d2:4e:b5:3b:64:f5:33:3d:38:22:30:30:48:
12:8f:f9:d8:75:e1:e2:81:ea:0d:ac:2a:37:65:b5:
ca:35:61:52:27:fa:92:bf:7c:b6:9a:f8:d5:72:9f:
09:fc:ce:22:53:7d:39:00:31:65:2f:71:53:dd:2d:
bc:13:5e:6c:13:c4:cc:bb:f2:6b:7c:61:fe:44:21:
52:11:95:cc:db:76:82:94:81:d2:55:7f:e7:07:3b:
8c:bf:7d:16:36:5f:bf:da:68:91:33:f6:71:a2:7b:
e9:d8:53:56:df:7b:37:0a:2b:61:2a:bf:58:01:03:
d6:35:4f:97:60:ef:fc:c4:29:ac:85:94:37:27:0e:
c0:f0:b7:8d:a1:ff:6e:5d:f6:21:6a:d1:76:e4:0a:
bc:80:4c:49:e6:a7:03:6a:24:0e:33:f2:90:29:aa:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A7:2B:F8:9C:47:58:1C:C9:67:43:19:4A:6E:C9:4C:98:A9:80:60
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af90::/32
Signature Algorithm: sha256WithRSAEncryption
41:65:2c:4c:df:b3:cd:ee:eb:a9:02:99:31:ea:11:9c:d9:a3:
58:24:c8:5e:01:3d:f9:9e:6b:8e:ec:e2:47:da:5d:a8:cd:45:
57:6e:a7:26:eb:53:8e:a6:7d:4a:d1:e3:39:cb:d4:1f:b9:ed:
7c:ff:5c:4b:a8:88:a6:7e:87:a4:ba:58:4a:db:01:6a:0f:79:
ed:9a:73:07:60:09:62:cc:ae:cf:11:18:08:1a:06:cd:37:68:
c9:5d:4f:be:94:60:ba:8c:83:d7:98:8b:a7:c6:fb:14:bd:0e:
c0:e8:9f:f4:7b:b8:f3:1b:49:85:74:95:f8:cb:94:57:2a:7e:
9f:5a:a2:83:9f:15:9e:43:e5:48:39:86:0b:55:e0:65:d7:da:
84:00:0a:04:9c:90:9c:c3:b6:d1:4a:5f:98:63:bd:be:0a:a6:
37:32:f2:33:51:10:94:51:8c:ed:4b:7b:f5:e9:b5:e7:98:90:
14:58:a4:53:fd:f1:17:e0:31:ae:54:66:da:63:1e:ae:f2:a4:
4a:43:1f:89:a1:55:96:7a:18:a2:dc:ef:d4:ad:a2:d1:7a:37:
2b:e3:5e:2a:18:62:29:fc:5e:4f:d5:9f:2b:24:3e:03:9e:27:
e8:d7:b2:23:5a:3d:94:4a:77:f9:92:40:24:a9:f9:4d:fe:1e:
cf:de:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:14:41 2026 by rpki-client