Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146647.roa
File: AS146647.roa (raw, json)
Hash identifier: 4uPWcYC2HMy8kJ2S4VzJbCcrjy95Gr8hqO5OWfHMBfA=
Subject key identifier: E1:23:7A:1C:AA:84:B6:A8:0D:FB:C8:20:33:49:D3:94:9A:B3:62:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2873740361AF5ED043F583EF6905D1E19D9429FD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146647.roa
Signing time: Tue 26 May 2026 06:12:29 +0000
ROA not before: Tue 26 May 2026 06:07:29 +0000
ROA not after: Tue 25 May 2027 06:12:29 +0000
asID: 146647
IP address blocks: 240a:af9d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:73:74:03:61:af:5e:d0:43:f5:83:ef:69:05:d1:e1:9d:94:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:29 2026 GMT
Not After : May 25 06:12:29 2027 GMT
Subject: CN=E1237A1CAA84B6A80DFBC8203349D3949AB36295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:0c:8d:2d:09:d4:5c:81:94:c3:d6:d0:62:
6f:8d:68:51:fc:2b:3d:87:df:0f:c5:40:bf:93:75:
2a:e8:12:18:75:d4:c5:e6:fb:7a:b9:26:07:7e:e5:
39:1b:7a:8f:cc:49:83:cc:13:1b:0f:8b:e1:7b:a7:
10:e0:39:9d:15:63:23:6b:6d:c7:28:07:7d:31:4c:
f6:b7:ed:76:e7:90:aa:7d:8a:34:ba:30:e2:f7:da:
da:0d:8e:99:9d:f7:8c:88:d0:f3:c7:45:a3:1e:d7:
8b:58:4a:a5:f8:d5:ff:f2:fc:14:d6:38:a4:77:d3:
7c:76:b2:33:c1:84:f5:8a:b1:3b:7a:74:18:7b:7e:
54:e7:8a:e4:58:26:21:c3:b6:a9:e1:bf:33:61:ff:
6b:b4:d3:c4:4d:f9:49:de:04:ca:89:08:de:92:64:
63:6c:83:f5:13:84:fe:64:ea:d1:99:a5:cd:04:b9:
5a:71:e5:e6:ba:9f:dd:f0:c3:6e:74:4c:dd:4b:d6:
fd:3b:c3:34:5c:99:1b:2e:1a:13:40:c7:c7:41:80:
8f:a7:71:48:cd:62:21:f5:52:88:72:09:46:00:bb:
ca:01:59:c5:c3:38:60:10:d1:c4:a5:b6:1a:d3:53:
b4:cf:27:6e:1a:7c:c1:06:42:dc:a7:1f:2f:45:70:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:23:7A:1C:AA:84:B6:A8:0D:FB:C8:20:33:49:D3:94:9A:B3:62:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af9d::/32
Signature Algorithm: sha256WithRSAEncryption
19:cd:87:0f:48:ec:be:d6:51:69:ad:9d:b7:38:6b:ab:62:fb:
6b:b0:18:5c:e9:ee:41:87:3d:a8:7e:5f:b0:71:a3:0d:10:a5:
db:79:43:0e:8d:30:46:7a:e6:ed:84:85:08:c0:d1:56:6f:d4:
d6:e1:43:12:74:75:e9:71:d0:b6:25:09:b3:37:19:be:94:61:
1c:22:90:e0:10:79:f0:87:39:44:e9:78:b2:36:9c:04:05:9c:
a9:e7:0a:e5:b1:37:7c:8e:ed:c9:78:c5:5a:35:c7:0d:1e:db:
40:2c:c9:bd:c2:4f:50:69:05:7b:d5:20:70:7f:b5:c1:7d:63:
05:7e:e9:63:05:cb:d2:89:d9:e2:e9:2c:b8:cb:50:9b:49:5b:
4b:1e:86:51:a7:16:8d:2f:cd:f1:4b:98:79:43:c5:73:59:10:
56:d7:9f:7b:c0:ae:a9:db:03:a4:f0:27:06:85:0a:20:d6:4c:
e6:a7:40:dc:01:7c:16:46:4c:ac:84:60:ac:5d:e0:06:1d:32:
60:1e:35:f6:25:93:e1:2e:6d:8e:b9:e0:d5:74:12:73:25:4d:
14:a8:6a:df:fa:9d:a9:85:c5:a1:ab:f7:24:9b:65:70:17:9a:
c0:b0:10:1b:b6:49:0a:61:5f:43:8d:91:78:f6:79:e5:75:90:
cf:0d:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:47 2026 by rpki-client