Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146639.roa
File: AS146639.roa (raw, json)
Hash identifier: LxLMALwhWx8VSaxFqqPZfjEc9TQ8DvG7iGHZbTyizIE=
Subject key identifier: 88:A9:08:30:FE:B9:93:AA:94:D2:D8:A6:A0:D5:C4:55:9F:0A:D1:E8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2546709ACE0063327AE73C8F5187941904DD94BA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146639.roa
Signing time: Fri 22 May 2026 06:05:33 +0000
ROA not before: Fri 22 May 2026 06:00:33 +0000
ROA not after: Fri 21 May 2027 06:05:33 +0000
asID: 146639
IP address blocks: 240a:af95::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:46:70:9a:ce:00:63:32:7a:e7:3c:8f:51:87:94:19:04:dd:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:33 2026 GMT
Not After : May 21 06:05:33 2027 GMT
Subject: CN=88A90830FEB993AA94D2D8A6A0D5C4559F0AD1E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:21:80:0e:4f:5d:65:c7:73:5c:fd:86:5f:
14:8c:2e:67:92:7b:2c:45:92:5a:32:9b:3a:16:43:
44:86:95:2b:2c:30:e3:36:5f:53:c6:fb:27:2e:3b:
04:25:72:3b:c5:cc:8e:ab:8e:62:8c:4e:28:51:73:
43:c2:4d:e9:85:6a:e0:dd:0d:f2:48:b7:75:bc:a3:
23:22:41:9a:40:fb:7d:6e:fd:6c:0d:7c:86:86:70:
da:64:fe:b5:00:10:55:aa:f6:f6:bd:a7:f9:ed:34:
c9:6a:5d:f3:e1:fe:11:4a:84:e3:b9:1f:59:0b:3c:
be:24:49:e5:27:7d:a5:92:e4:8e:16:fb:d6:88:ec:
73:97:b5:ab:de:f2:ed:a4:6f:ad:36:24:cd:79:a6:
f7:cc:c2:f0:fe:8a:6b:65:15:2f:2d:93:a4:2c:b6:
60:5b:cb:6e:71:41:6b:fd:3f:c3:16:4b:ca:fc:98:
cb:e3:d6:c8:e8:c7:b6:f3:44:e3:f0:dc:56:bc:b9:
e6:9e:9a:5d:79:d8:e3:3f:e7:de:9d:b1:02:79:64:
d4:34:79:d6:a0:32:6e:56:b6:16:9c:d7:27:02:74:
19:45:a8:35:51:70:24:4e:d0:b7:9f:a2:e9:ca:e7:
30:d4:b0:c5:ea:1d:2f:21:1c:33:0a:fd:19:18:cc:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A9:08:30:FE:B9:93:AA:94:D2:D8:A6:A0:D5:C4:55:9F:0A:D1:E8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af95::/32
Signature Algorithm: sha256WithRSAEncryption
72:1d:63:d6:08:9b:dd:ba:2c:53:32:e7:b8:ef:5b:c9:87:d3:
62:3b:e1:9c:de:4c:51:24:48:94:bd:f5:9e:cf:25:25:1b:50:
f4:f8:6f:55:5b:b5:c0:60:3c:84:41:76:67:f4:e1:0b:0d:43:
2f:b6:12:41:9f:62:4f:7e:10:38:37:eb:c4:a6:aa:4a:93:39:
34:7b:ce:63:7c:c3:43:89:6c:35:fa:2e:be:13:fe:47:6f:55:
ea:84:0a:c4:0a:67:9f:7d:9f:b1:d8:15:9c:5f:97:f3:21:16:
15:49:70:91:21:02:9f:fc:49:b3:87:20:65:33:94:f5:82:7f:
11:d5:fc:1e:69:29:54:c7:88:9c:44:b7:d9:7b:40:3b:e4:3c:
0c:54:0d:ca:4f:2c:d9:29:18:d9:48:c4:ec:8a:46:65:96:90:
a4:83:fe:c3:d9:0e:63:10:c9:bb:2d:3a:41:5b:e2:7e:b0:17:
de:a6:aa:ef:63:07:55:0d:c6:b7:ec:1c:8f:a0:a9:4e:4a:2d:
50:1f:af:f4:18:24:ee:a3:40:34:44:87:66:36:ae:f1:ee:e6:
e1:15:8a:08:fc:8a:61:dd:4c:f8:02:a9:94:f3:4a:64:24:11:
80:95:af:5e:7a:2f:14:6c:58:e1:10:0e:4e:c0:b5:82:79:07:
de:a2:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:10 2026 by rpki-client