Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146670.roa
File: AS146670.roa (raw, json)
Hash identifier: 7+ZKKpHRoebCbW2EsTfxa5uNMEgQ7gdGJ10MIHawSxo=
Subject key identifier: 62:2A:D4:FF:26:92:C0:A2:F6:8F:0C:72:FE:B2:C9:E3:C4:A1:70:8F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 13EB3173574F45C631C64CC37FEB19C7975AC3CB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146670.roa
Signing time: Fri 22 May 2026 02:47:53 +0000
ROA not before: Fri 22 May 2026 02:42:53 +0000
ROA not after: Fri 21 May 2027 02:47:53 +0000
asID: 146670
IP address blocks: 240a:afb4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:eb:31:73:57:4f:45:c6:31:c6:4c:c3:7f:eb:19:c7:97:5a:c3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:53 2026 GMT
Not After : May 21 02:47:53 2027 GMT
Subject: CN=622AD4FF2692C0A2F68F0C72FEB2C9E3C4A1708F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:c1:a9:86:70:d0:bc:f9:e5:e9:27:84:06:
f2:24:d2:0f:65:3e:0c:9a:00:94:ca:9f:f2:46:cd:
c4:c9:2f:df:12:79:9a:95:eb:c5:1a:90:26:00:15:
fa:79:6d:de:79:0d:5a:c7:bb:da:09:d6:51:d4:7e:
df:ec:c1:7f:2e:d7:8b:54:e6:26:e4:b4:a6:85:bf:
24:57:ad:6a:27:f4:0e:76:66:53:5c:d5:bf:83:02:
49:26:e6:4e:c9:4a:22:72:db:64:bf:ed:9b:f9:2d:
94:41:89:4a:91:6b:37:eb:64:e9:6f:c5:de:2c:a5:
ec:9b:52:b6:47:56:b5:4a:cb:2a:49:60:2b:aa:f9:
ac:2b:ed:33:a6:e3:bf:95:b7:17:87:0c:a9:fb:b9:
96:8f:a3:37:a3:32:d2:af:67:7e:f2:ec:9e:81:e4:
b5:44:ae:1c:7d:a7:7b:55:f6:e8:cd:e1:a5:bb:56:
da:1a:c6:85:5d:3e:d3:4e:a0:6f:43:ac:1d:c3:38:
65:1e:fa:d4:07:b7:96:0f:f5:59:b1:e5:65:ce:05:
4a:d5:3d:a0:de:4e:4e:0f:e3:ac:ee:eb:ac:6b:1a:
88:21:67:a0:b2:09:a4:e1:f9:77:57:12:b9:e0:01:
3f:17:cb:b7:3f:56:bb:45:2c:23:6d:c0:b5:9a:b3:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:D4:FF:26:92:C0:A2:F6:8F:0C:72:FE:B2:C9:E3:C4:A1:70:8F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146670.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afb4::/32
Signature Algorithm: sha256WithRSAEncryption
4e:51:3c:a3:8b:4b:c5:63:e8:c7:97:aa:3c:40:99:77:b7:a1:
b1:7e:3d:d5:dd:88:39:ca:11:2d:7f:63:6b:89:ba:f8:c6:50:
37:00:7c:34:6a:6a:68:bb:9e:53:b8:eb:fc:0c:77:d3:7a:fe:
42:62:d7:4f:03:58:ff:02:96:46:0a:95:5a:06:eb:9b:c9:79:
10:0f:c3:8e:47:97:1e:48:36:4e:a5:4c:44:34:7c:85:ec:1d:
66:84:c0:dd:10:ff:b1:e4:45:d0:ab:7c:47:38:5d:ef:83:f8:
67:b0:91:4c:b0:28:21:cc:df:e5:59:ab:b2:89:54:00:de:5f:
4e:b6:0b:55:48:9f:1b:71:d2:3a:c6:c6:70:27:32:cc:ba:b3:
9e:7b:24:fd:8f:ee:ea:52:83:39:aa:42:dd:60:cb:c5:03:c9:
f5:25:f0:65:7f:e3:b9:48:5d:16:29:0b:6c:ed:82:0c:55:4b:
25:46:55:9e:57:ea:68:2a:d7:04:8b:b8:41:98:90:60:f6:0e:
1c:2b:60:49:0f:29:54:ca:23:4b:40:f7:b2:43:61:ca:76:b5:
d2:82:ee:1a:46:42:e4:5a:53:49:bf:0a:22:3b:92:66:80:9b:
36:2b:48:8f:15:68:37:b0:a7:13:db:87:70:6f:a3:fc:d9:d5:
47:24:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:23 2026 by rpki-client