Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146676.roa
File: AS146676.roa (raw, json)
Hash identifier: PV5CyMoYQoGp8mw20pWeOmgftOyLsBi+/Jwa3LfYJic=
Subject key identifier: CB:DD:9A:95:61:32:25:AD:08:F3:3B:B0:E8:F1:59:F1:1B:B4:0B:82
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1AF0C105CE776B98B65A73A6E64365E535318825
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146676.roa
Signing time: Fri 22 May 2026 07:24:26 +0000
ROA not before: Fri 22 May 2026 07:19:26 +0000
ROA not after: Fri 21 May 2027 07:24:26 +0000
asID: 146676
IP address blocks: 240a:afba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f0:c1:05:ce:77:6b:98:b6:5a:73:a6:e6:43:65:e5:35:31:88:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:26 2026 GMT
Not After : May 21 07:24:26 2027 GMT
Subject: CN=CBDD9A95613225AD08F33BB0E8F159F11BB40B82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:aa:c5:ea:d8:05:a8:73:65:59:66:e1:75:
23:21:31:ba:09:9d:0e:c2:d8:2f:0d:80:cb:35:e0:
db:aa:ea:71:a6:68:26:cd:f4:c3:73:e2:15:c8:a0:
b5:0c:62:d5:20:de:a8:59:85:2c:d3:0f:60:88:6a:
c8:b0:dc:84:08:72:76:ab:c9:e7:41:ef:2a:78:62:
3c:00:ed:5e:97:3c:32:87:9e:60:39:1a:3e:57:90:
81:23:12:92:fc:83:81:8c:2b:3b:e4:c7:d6:c4:e8:
1f:ae:fe:2e:e5:de:d7:f5:3c:ed:60:ca:59:2b:1a:
18:03:fc:30:52:0f:73:45:fb:4d:64:4a:ca:0f:e7:
1f:46:eb:df:e0:da:83:59:91:4b:b5:db:27:b0:35:
5e:81:dc:9f:7a:12:8b:f1:c9:be:75:bc:18:cc:b3:
a6:02:82:4e:f1:d8:f0:30:c1:5f:64:b8:88:1b:24:
55:31:d1:93:52:74:f3:bf:ea:0a:dd:56:30:c1:68:
6f:bd:b1:04:7a:58:79:e3:32:f1:24:ba:6a:9c:c1:
66:30:36:dc:e9:d5:e2:a7:c4:f5:b0:12:2d:d1:b1:
94:67:09:ff:b9:e9:ae:a0:2a:b1:40:51:f0:ce:cb:
c3:f1:f6:5c:ce:ee:08:2b:5e:46:e3:a6:8f:b0:a4:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:9A:95:61:32:25:AD:08:F3:3B:B0:E8:F1:59:F1:1B:B4:0B:82
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afba::/32
Signature Algorithm: sha256WithRSAEncryption
6d:d7:f0:aa:55:f6:07:d5:34:5c:d7:8a:5b:c4:2d:e2:02:f7:
66:50:21:a9:9a:b0:7a:81:b2:af:1c:a0:9c:97:41:9e:f0:91:
aa:07:6d:26:8f:38:8c:b0:31:f4:4d:df:16:a2:e1:3d:c0:b2:
9c:78:0f:6b:bf:35:18:b0:c0:4b:43:d3:0b:50:5b:14:b9:96:
b4:f0:e6:41:d3:b3:ec:57:a2:e1:3e:e7:62:7f:90:9c:dd:f9:
83:c3:ee:f7:32:ed:9b:b1:6d:a6:5a:f3:e4:34:e8:2b:12:79:
ed:a0:2b:a7:22:c5:ab:98:fa:6e:54:ee:a8:a6:f1:a5:5b:f1:
f2:0b:9d:3c:10:95:f5:53:0c:d6:5f:80:da:80:27:45:c1:f6:
5c:f7:de:ec:b2:0d:48:9f:65:e5:be:50:2a:39:4b:63:25:dd:
81:d3:58:48:f6:93:22:61:31:ad:46:d5:4d:64:11:8c:57:6c:
21:05:49:68:fe:d6:6e:2d:96:df:62:00:a0:4e:a7:4f:ff:0a:
95:28:6c:c0:a4:6d:da:84:94:04:b9:a6:a6:2a:80:5e:cb:15:
9a:be:d8:38:49:6c:da:87:21:6d:cf:e6:2c:1e:97:27:c9:ce:
0b:df:80:2f:51:e2:49:44:cf:b8:f0:a0:41:fe:48:d1:c2:26:
7e:fb:dc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:52 2026 by rpki-client