Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146638.roa
File: AS146638.roa (raw, json)
Hash identifier: 0g+xXpyrYYYIsIs56kVUHfl0i+dy4rMjDQZnVBuWWlA=
Subject key identifier: D2:F8:FD:EA:E4:27:A3:70:1E:F7:93:4C:0F:16:FA:5A:9A:22:87:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4278162837BE683B8514CA197E60DDAAEA7A7B84
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146638.roa
Signing time: Fri 22 May 2026 06:05:16 +0000
ROA not before: Fri 22 May 2026 06:00:16 +0000
ROA not after: Fri 21 May 2027 06:05:16 +0000
asID: 146638
IP address blocks: 240a:af94::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:78:16:28:37:be:68:3b:85:14:ca:19:7e:60:dd:aa:ea:7a:7b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:16 2026 GMT
Not After : May 21 06:05:16 2027 GMT
Subject: CN=D2F8FDEAE427A3701EF7934C0F16FA5A9A2287AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:74:b6:34:45:76:7a:80:cc:10:56:22:31:
25:9e:0b:35:63:05:05:ea:ff:ad:9c:83:09:58:ef:
1e:14:99:6b:c0:26:1b:8e:5f:cb:f3:c4:a2:ac:92:
75:e0:10:e1:d6:55:7a:22:54:2c:bb:e0:7f:be:c5:
df:0f:e0:9e:f6:12:f3:e3:d4:80:01:77:ae:0b:b0:
50:34:d9:09:e6:e7:1a:14:76:1e:17:23:26:28:f6:
4f:46:c0:68:4a:73:6a:50:10:65:53:0d:7a:eb:db:
78:e9:3c:54:49:93:7a:f5:b1:cd:34:3d:d2:b2:68:
e0:20:28:fd:a6:92:14:03:b6:f1:5c:1e:92:7d:d8:
a4:16:aa:94:82:2d:2c:b4:09:2e:4e:7a:9a:eb:16:
03:5d:de:52:0a:03:62:26:cc:91:cc:32:ab:6a:a0:
d5:91:9b:c3:74:76:fa:13:c9:e9:b5:c9:7a:60:7e:
5a:d2:44:90:37:b7:69:a4:2d:e0:69:10:dd:c0:f5:
30:7a:04:87:81:08:6b:45:b0:82:de:eb:08:cb:5a:
2a:29:5a:28:32:e5:72:ae:f0:76:1f:09:74:57:95:
55:50:1b:ef:51:0f:a3:71:e7:25:d2:69:56:0a:94:
b2:75:72:8a:b5:0e:9b:66:99:bb:a1:a1:8c:75:bd:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:FD:EA:E4:27:A3:70:1E:F7:93:4C:0F:16:FA:5A:9A:22:87:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af94::/32
Signature Algorithm: sha256WithRSAEncryption
14:c5:f0:e0:4d:c8:86:bc:d8:00:8d:8e:cd:50:94:fd:47:83:
2f:76:55:76:2a:8f:c4:39:81:50:ef:e9:ba:1b:22:21:46:5c:
c9:fc:eb:7b:5d:1e:82:e0:64:46:79:5e:b9:f2:7d:8c:0e:6c:
73:0e:aa:27:81:84:55:be:eb:aa:7a:5e:72:23:f5:2b:0d:27:
d2:32:52:1d:cb:03:aa:25:87:ea:be:40:20:9b:10:72:18:6c:
f6:90:4e:5f:ef:b5:f2:ce:75:cb:d9:a7:8e:b5:ca:71:e9:93:
e6:63:4b:72:fe:d0:8f:7f:67:05:6f:67:a8:e6:9a:11:73:b5:
a5:4a:2b:6a:58:48:ec:59:bd:ea:d6:92:9e:9b:b8:4d:5e:14:
d3:37:02:3b:16:ac:f1:51:44:cc:5a:b9:fd:49:84:77:16:16:
1b:3a:51:dd:53:72:e3:aa:02:aa:13:af:ff:3e:49:d8:c2:fc:
e8:54:3d:8d:2a:fe:b4:38:88:eb:16:d4:cd:08:b0:f1:54:25:
ff:d1:4e:c7:ff:60:d4:05:77:4f:d8:c9:a8:8d:f7:b0:dc:67:
14:36:90:5d:f9:ae:bc:76:1d:8d:75:39:41:f3:ef:e5:84:5b:
fc:4c:6e:be:af:97:81:02:07:3a:be:20:00:a1:dc:03:7c:75:
c1:0e:f5:4a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQngWKDe+aDuFFMoZfmDdqup6e4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMTZaFw0yNzA1MjEwNjA1MTZaMDMxMTAvBgNV
BAMTKEQyRjhGREVBRTQyN0EzNzAxRUY3OTM0QzBGMTZGQTVBOUEyMjg3QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmp3S2NEV2eoDMEFYiMSWeCzVj
BQXq/62cgwlY7x4UmWvAJhuOX8vzxKKsknXgEOHWVXoiVCy74H++xd8P4J72EvPj
1IABd64LsFA02Qnm5xoUdh4XIyYo9k9GwGhKc2pQEGVTDXrr23jpPFRJk3r1sc00
PdKyaOAgKP2mkhQDtvFcHpJ92KQWqpSCLSy0CS5OeprrFgNd3lIKA2ImzJHMMqtq
oNWRm8N0dvoTyem1yXpgflrSRJA3t2mkLeBpEN3A9TB6BIeBCGtFsILe6wjLWiop
Wigy5XKu8HYfCXRXlVVQG+9RD6Nx5yXSaVYKlLJ1coq1DptmmbuhoYx1vbHPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU0vj96uQno3Ae95NMDxb6Wpoih6owHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvlDANBgkqhkiG9w0BAQsFAAOCAQEAFMXw
4E3IhrzYAI2OzVCU/UeDL3ZVdiqPxDmBUO/puhsiIUZcyfzre10eguBkRnleufJ9
jA5scw6qJ4GEVb7rqnpeciP1Kw0n0jJSHcsDqiWH6r5AIJsQchhs9pBOX++18s51
y9mnjrXKcemT5mNLcv7Qj39nBW9nqOaaEXO1pUoralhI7Fm96taSnpu4TV4U0zcC
Oxas8VFEzFq5/UmEdxYWGzpR3VNy46oCqhOv/z5J2ML86FQ9jSr+tDiI6xbUzQiw
8VQl/9FOx/9g1AV3T9jJqI33sNxnFDaQXfmuvHYdjXU5QfPv5YRb/Exuvq+XgQIH
Or4gAKHcA3x1wQ71Sg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:51 2026 by rpki-client