Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146652.roa
File: AS146652.roa (raw, json)
Hash identifier: bhDa50yNas/cbmQfSSTjZpHaJ1GhfqB4ZERUor/Z1D4=
Subject key identifier: CA:0D:1D:6A:4F:0D:C9:3E:0B:94:DC:BF:E0:62:AF:67:05:F1:3E:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0CF8438E61B46AE990CC948DFB8025BCF03AE039
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146652.roa
Signing time: Fri 22 May 2026 07:24:33 +0000
ROA not before: Fri 22 May 2026 07:19:33 +0000
ROA not after: Fri 21 May 2027 07:24:33 +0000
asID: 146652
IP address blocks: 240a:afa2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f8:43:8e:61:b4:6a:e9:90:cc:94:8d:fb:80:25:bc:f0:3a:e0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:33 2026 GMT
Not After : May 21 07:24:33 2027 GMT
Subject: CN=CA0D1D6A4F0DC93E0B94DCBFE062AF6705F13E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:66:89:e9:09:1b:fa:61:d0:0d:97:73:4d:
2d:b4:b0:fc:c0:82:4d:36:e5:37:fd:c3:85:8f:5e:
e4:78:b9:96:34:70:38:1d:9b:04:81:66:d6:6f:bf:
08:a7:b9:ab:6b:47:a9:15:09:bf:f1:08:ab:17:de:
f4:c5:7e:1d:f5:7d:6c:d4:58:bb:30:de:27:99:1b:
d5:07:1d:03:01:cc:66:ab:a3:db:2b:b2:80:71:de:
26:8a:c8:91:0d:b5:29:2d:fd:c0:ce:02:c6:1e:11:
a5:41:89:2a:a2:33:6f:d8:3b:25:31:a7:c5:f5:88:
c6:ba:f3:f8:37:a0:79:34:c6:7e:d6:90:55:f0:47:
bd:ef:1e:26:93:e1:6a:71:73:00:69:78:dc:54:5d:
ae:88:7f:51:d5:35:17:e5:d2:a7:dd:d1:de:cc:de:
ac:c3:3b:0b:66:44:6a:2d:2d:9f:0b:28:8a:64:04:
76:00:23:6e:3b:15:b8:88:a6:6b:aa:cb:4c:77:e0:
26:ec:76:85:82:8d:9b:dc:b4:ca:0f:33:6e:86:33:
98:f2:4c:80:f3:fd:4f:8b:97:39:8d:93:9b:46:ac:
8e:ab:c8:ae:73:46:68:0a:aa:21:13:4a:c8:27:d1:
c4:fa:af:06:2a:a0:99:eb:86:80:b0:66:e2:5f:cb:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0D:1D:6A:4F:0D:C9:3E:0B:94:DC:BF:E0:62:AF:67:05:F1:3E:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146652.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afa2::/32
Signature Algorithm: sha256WithRSAEncryption
b8:ff:3a:e8:68:cb:03:34:75:39:83:b6:a3:04:4e:d7:6c:4a:
15:a3:24:41:01:4e:70:e6:72:bf:63:b0:54:a3:10:fa:a7:a8:
1d:68:98:14:53:04:d8:d0:6d:9c:37:1e:bb:98:db:8d:85:94:
51:51:f7:12:15:ea:aa:11:83:17:4f:1a:de:2e:09:08:04:ac:
68:dd:ce:b6:3d:7c:61:57:34:68:96:d2:80:99:33:48:3c:36:
18:ed:f1:76:03:17:51:0a:a1:5b:8e:89:30:f8:7d:24:45:1e:
92:86:e4:cc:a0:06:96:d1:07:5f:ca:c0:4c:3a:4c:7b:e6:15:
dc:4d:6f:ff:82:a2:41:06:d9:35:1a:69:e8:98:d7:46:5e:3c:
49:44:37:1f:c5:4f:95:ef:d0:83:89:21:6f:27:92:e3:88:7c:
e2:c8:e5:ce:3f:63:0b:b8:10:54:5b:94:43:4b:1e:c9:64:2e:
81:f3:0e:2d:f4:f2:48:e6:78:e4:13:ba:7a:fb:8b:ab:7c:31:
7d:b2:c0:03:6f:d8:6a:00:ea:15:19:eb:11:5c:8f:74:fb:59:
b4:b2:7b:3b:09:9a:25:37:88:7d:43:93:f1:a9:ec:4a:1c:6b:
73:f7:5c:76:6b:ff:c3:f1:74:91:67:5c:e9:88:24:34:a0:52:
1a:be:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:36 2026 by rpki-client