Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146674.roa
File: AS146674.roa (raw, json)
Hash identifier: iV+q/zA6y/D321zRPiioNJt2gW3U5Ln7xLo0DQe6RQI=
Subject key identifier: FD:BD:84:DC:F0:E5:6E:7D:83:8D:5C:04:79:D0:36:39:72:83:53:EE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C7CA05045C0219F333E7786B09E7E88A14887C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146674.roa
Signing time: Mon 25 May 2026 02:22:26 +0000
ROA not before: Mon 25 May 2026 02:17:26 +0000
ROA not after: Mon 24 May 2027 02:22:26 +0000
asID: 146674
IP address blocks: 240a:afb8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:7c:a0:50:45:c0:21:9f:33:3e:77:86:b0:9e:7e:88:a1:48:87:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:26 2026 GMT
Not After : May 24 02:22:26 2027 GMT
Subject: CN=FDBD84DCF0E56E7D838D5C0479D03639728353EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:f7:0b:a7:28:c2:b7:d5:0f:50:e8:61:ea:
5b:21:ad:fe:34:b2:74:12:82:52:9d:b5:55:34:b1:
91:14:be:f2:82:93:88:c8:5a:79:80:73:2c:ed:ad:
17:49:10:6b:ff:40:2a:12:4a:29:ed:c1:8d:c5:ee:
a1:af:1a:14:2a:a3:ec:bc:b6:35:72:9b:06:61:85:
5a:10:b0:5f:ec:d4:36:44:08:17:bf:63:02:62:37:
a5:fe:b0:37:9e:95:29:0c:5c:be:53:f5:b1:4a:65:
21:24:2f:b6:00:3b:f8:6e:45:af:a0:5e:e5:5e:a6:
77:7d:e0:63:79:58:c6:4f:10:48:f9:15:4d:da:4f:
89:d8:2c:ba:20:76:10:bc:5c:00:1f:00:d0:8c:52:
4e:80:f4:ba:a6:c7:67:ec:29:32:dd:00:fe:7b:07:
55:98:7e:57:c7:a5:38:75:6a:3c:0b:4d:90:e9:26:
56:0c:0c:75:80:fd:3e:3d:92:1d:cc:58:e2:0e:44:
8a:9d:c7:20:a4:5b:25:e9:bc:fe:07:39:91:32:1b:
f5:28:36:7b:55:4a:39:6f:25:41:ce:bc:9b:48:78:
05:87:52:8c:b7:10:4f:c3:5e:d1:a3:22:9a:7d:7c:
66:dd:a6:4d:24:76:cb:71:1c:4e:06:01:4c:a1:69:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:84:DC:F0:E5:6E:7D:83:8D:5C:04:79:D0:36:39:72:83:53:EE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146674.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afb8::/32
Signature Algorithm: sha256WithRSAEncryption
6e:a8:09:21:09:70:45:f5:5c:41:ef:90:01:38:fd:0f:a6:88:
4d:e3:5c:bb:57:ac:4f:26:49:38:d5:88:6f:41:3a:82:5c:bd:
79:ea:fe:9d:d3:05:86:a6:bc:92:b8:57:c4:1b:f5:00:34:3c:
37:50:1d:1b:79:b6:26:e4:cd:be:b8:93:44:ab:3b:ed:81:59:
5e:19:88:cd:7a:be:e6:20:54:6f:d0:8b:1c:9b:c7:11:5a:b4:
44:47:c8:60:3f:89:17:9c:7b:81:dd:61:c9:5a:fb:b4:52:e2:
87:d7:92:9d:cb:24:a0:2a:a1:8c:33:45:03:5d:e5:ec:55:d6:
c2:e0:90:84:a2:d7:fe:e2:c6:4d:c8:5a:81:df:cc:d5:28:e9:
ee:54:c9:ca:4a:0b:f6:08:dc:96:b3:67:8c:85:51:43:b2:d7:
a8:d8:0f:da:50:71:e9:e9:70:83:2e:70:e2:4f:da:ac:77:3f:
fb:9a:9d:8b:0b:ea:5b:17:a3:6a:79:78:c7:6f:8a:b0:f0:7d:
89:67:74:72:cb:5e:57:44:51:83:95:b0:8e:60:96:59:7e:1c:
3b:47:ea:84:2c:13:e1:08:d4:b0:6d:04:a1:cb:59:dc:e9:b1:
13:bc:1e:a7:01:03:41:b3:90:c8:dd:aa:b9:6b:2b:1c:00:8a:
ed:23:cb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client