Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146667.roa
File: AS146667.roa (raw, json)
Hash identifier: BNgQN4cpi7gTmmX+6JWd0Zfs7GWdY/4gxS6mJUTA8zM=
Subject key identifier: CB:FB:6E:85:63:E6:AA:50:A0:FC:E2:5E:F2:D7:23:91:A0:CB:17:04
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D34C6055441FD40D49DFDBAD96B0E39C7B6B870
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146667.roa
Signing time: Mon 25 May 2026 06:28:09 +0000
ROA not before: Mon 25 May 2026 06:23:09 +0000
ROA not after: Mon 24 May 2027 06:28:09 +0000
asID: 146667
IP address blocks: 240a:afb1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:34:c6:05:54:41:fd:40:d4:9d:fd:ba:d9:6b:0e:39:c7:b6:b8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:09 2026 GMT
Not After : May 24 06:28:09 2027 GMT
Subject: CN=CBFB6E8563E6AA50A0FCE25EF2D72391A0CB1704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:3f:9a:cc:65:fc:2e:de:f3:50:ab:e9:a9:
04:ca:58:55:ad:3b:e8:d2:ab:d3:76:8a:f7:ac:27:
6f:23:d4:77:1f:7f:63:68:fd:c5:8e:e5:d9:bb:b8:
82:04:ca:e5:05:79:e0:3f:92:40:26:46:0d:d3:f6:
a1:e9:59:23:33:bc:74:9d:5d:7c:03:8a:e7:e9:9b:
ab:57:9c:c5:3c:16:10:fa:c5:db:7c:27:8d:be:0e:
50:4b:ae:2a:b1:9c:60:54:31:4e:f4:d1:a9:ac:79:
08:1b:8d:85:e8:53:26:74:ef:01:4f:03:5c:ec:dc:
ad:c5:a2:07:44:80:4c:d5:dd:09:74:55:a5:03:86:
63:25:ed:ad:5c:91:68:36:61:ae:09:d9:f1:69:a6:
c4:09:a3:53:14:65:d5:2b:c5:a9:c3:c9:11:69:83:
9b:31:9a:b9:e7:5f:e4:80:c8:02:03:75:6c:8e:ef:
07:39:67:8a:d9:04:d0:e1:7d:05:87:8f:5b:91:a7:
ab:80:ee:cd:52:a4:3d:80:aa:10:a9:fe:9c:53:79:
f5:d1:09:4c:eb:73:04:0d:05:4d:b6:ac:7a:5c:4e:
86:9f:7b:8e:16:3b:26:3d:aa:99:cc:0c:1a:12:11:
b2:26:4b:28:5c:fd:c2:d5:f1:ac:bb:61:e4:a2:9a:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FB:6E:85:63:E6:AA:50:A0:FC:E2:5E:F2:D7:23:91:A0:CB:17:04
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146667.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afb1::/32
Signature Algorithm: sha256WithRSAEncryption
79:62:96:b6:94:5b:49:c4:ba:71:79:89:7a:a5:7b:60:19:51:
97:cf:5f:d0:2d:01:0e:9e:c6:f2:81:bd:77:c5:38:f0:fd:a2:
b3:98:40:c3:c7:e6:eb:4f:92:fb:9d:3a:f3:c3:9c:53:ff:07:
01:1c:5f:75:c5:cb:15:0f:9c:82:66:4d:a6:1c:df:ad:52:99:
6c:f5:d5:20:2b:b2:46:e4:81:ad:51:7e:fb:6d:c9:6e:db:af:
57:11:46:b1:0c:15:d8:ad:64:aa:e5:ef:b1:e8:0a:7d:7b:16:
b5:56:ca:a6:6b:b0:60:bb:aa:0e:30:a0:8e:bb:95:0d:dc:9c:
8c:74:b6:70:09:8a:2a:60:e9:fe:4e:c5:59:db:76:15:ac:a2:
46:09:cf:48:fd:f2:1b:cb:80:25:a5:d6:b3:50:60:dc:8b:be:
15:04:4d:fb:90:35:0a:a8:0d:64:32:16:13:73:5c:da:dd:b2:
f4:ae:cc:f5:0e:44:09:3d:4d:df:cf:e6:bb:87:ea:a0:c5:b1:
aa:7f:6d:51:65:c4:cd:25:38:c0:db:fc:e6:0b:11:4c:ea:7d:
00:7d:92:e0:de:42:4c:f4:1c:77:13:c5:e7:25:75:36:f3:46:
27:04:77:94:6f:de:e2:e7:c4:5a:81:91:fe:75:a8:9a:e3:c9:
d9:07:a7:f9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbTTGBVRB/UDUnf262WsOOce2uHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMDlaFw0yNzA1MjQwNjI4MDlaMDMxMTAvBgNV
BAMTKENCRkI2RTg1NjNFNkFBNTBBMEZDRTI1RUYyRDcyMzkxQTBDQjE3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rj+azGX8Lt7zUKvpqQTKWFWt
O+jSq9N2ivesJ28j1Hcff2No/cWO5dm7uIIEyuUFeeA/kkAmRg3T9qHpWSMzvHSd
XXwDiufpm6tXnMU8FhD6xdt8J42+DlBLriqxnGBUMU700amseQgbjYXoUyZ07wFP
A1zs3K3FogdEgEzV3Ql0VaUDhmMl7a1ckWg2Ya4J2fFppsQJo1MUZdUrxanDyRFp
g5sxmrnnX+SAyAIDdWyO7wc5Z4rZBNDhfQWHj1uRp6uA7s1SpD2AqhCp/pxTefXR
CUzrcwQNBU22rHpcToafe44WOyY9qpnMDBoSEbImSyhc/cLV8ay7YeSimvObAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUy/tuhWPmqlCg/OJe8tcjkaDLFwQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvsTANBgkqhkiG9w0BAQsFAAOCAQEAeWKW
tpRbScS6cXmJeqV7YBlRl89f0C0BDp7G8oG9d8U48P2is5hAw8fm60+S+50688Oc
U/8HARxfdcXLFQ+cgmZNphzfrVKZbPXVICuyRuSBrVF++23JbtuvVxFGsQwV2K1k
quXvsegKfXsWtVbKpmuwYLuqDjCgjruVDdycjHS2cAmKKmDp/k7FWdt2FayiRgnP
SP3yG8uAJaXWs1Bg3Iu+FQRN+5A1CqgNZDIWE3Nc2t2y9K7M9Q5ECT1N38/mu4fq
oMWxqn9tUWXEzSU4wNv85gsRTOp9AH2S4N5CTPQcdxPF5yV1NvNGJwR3lG/e4ufE
WoGR/nWomuPJ2Qen+Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:50 2026 by rpki-client