Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146682.roa
File: AS146682.roa (raw, json)
Hash identifier: Igqbq5I4b0wYljFklscC3wWxkF3SC9MYpis8J9x7iDo=
Subject key identifier: 36:6F:2C:4C:6F:98:1F:F6:29:1A:E5:65:CB:07:C5:57:41:51:D6:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D92CA8C70CC626605DB75F90050B6DF5751B216
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146682.roa
Signing time: Mon 25 May 2026 06:28:46 +0000
ROA not before: Mon 25 May 2026 06:23:46 +0000
ROA not after: Mon 24 May 2027 06:28:46 +0000
asID: 146682
IP address blocks: 240a:afc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:92:ca:8c:70:cc:62:66:05:db:75:f9:00:50:b6:df:57:51:b2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:46 2026 GMT
Not After : May 24 06:28:46 2027 GMT
Subject: CN=366F2C4C6F981FF6291AE565CB07C5574151D61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:da:b9:0c:39:43:17:a5:55:c1:ee:98:1f:
5d:38:43:d6:59:fc:ff:77:1b:f9:b7:6d:81:e3:f8:
5f:1b:81:d2:79:77:c8:78:fd:d4:8f:ee:0a:da:ab:
e5:a5:2c:14:01:a4:b9:4f:4b:ef:75:c8:cf:63:79:
ea:9c:a4:f6:86:86:2e:08:c1:f5:0b:f8:d0:5b:74:
ef:a0:85:b5:6a:fe:06:2f:e8:04:0d:39:6e:a0:03:
7c:94:49:38:ee:a9:74:8c:c4:58:85:fa:a1:bc:92:
7f:d2:57:e8:e4:b9:14:6b:e6:09:c4:ae:fd:5a:cb:
a7:6a:6b:5c:f2:fd:e6:d7:c2:68:c7:80:a1:5d:ef:
5b:c9:cc:e8:be:06:7e:c4:6a:fe:c9:52:37:b3:4c:
d7:d0:af:4d:3c:0c:f8:16:6f:63:09:e6:48:f6:82:
39:82:e1:01:0f:f0:c3:2a:c7:b1:56:df:25:ad:d9:
b3:3a:c1:81:cb:de:07:44:51:7a:b1:b1:32:99:ea:
67:3a:4a:2d:43:87:93:04:bb:06:46:a7:1d:0a:67:
60:79:69:cb:36:0a:33:7b:3f:32:60:88:5d:f4:03:
a6:02:a7:0a:c4:e4:98:56:c3:24:58:d7:26:78:da:
7b:98:c3:aa:db:d6:bb:95:6e:04:a5:49:f8:e8:41:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:2C:4C:6F:98:1F:F6:29:1A:E5:65:CB:07:C5:57:41:51:D6:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afc0::/32
Signature Algorithm: sha256WithRSAEncryption
25:46:82:b4:82:0c:f4:8c:d3:03:bd:68:39:28:e7:e2:41:c2:
d0:f0:5e:5c:34:55:46:c8:9f:55:3d:1f:c5:8f:7d:93:bb:be:
b5:f9:ff:1e:f4:e4:30:79:77:b8:33:fa:58:f3:ad:f6:7c:c3:
dd:70:84:ac:79:85:c3:24:fb:72:be:4b:75:19:9c:2d:48:60:
ce:9e:9a:5c:9f:16:b5:48:4c:08:a9:45:7a:f2:c5:5d:3c:2a:
47:3e:b4:d2:b7:26:03:db:50:ca:22:96:b1:3e:5b:79:ee:1b:
5a:94:52:b6:4e:35:a9:f1:94:d8:55:80:e5:5b:73:85:12:5e:
b0:0a:d3:b5:3a:00:d2:29:43:e4:41:65:32:64:0a:76:fa:b4:
6b:a0:73:71:40:8a:be:ec:ea:08:cd:75:7f:99:ce:d6:3d:7f:
8d:53:86:01:1f:74:a5:58:d0:da:c1:f1:ec:08:d8:3a:b0:44:
f4:b8:55:b2:16:51:92:ea:a7:75:63:8d:0b:88:8a:34:e6:d5:
76:6b:fb:9d:e9:49:1d:93:6e:d5:ac:d4:14:0d:66:20:b2:6f:
1e:2a:c3:52:1a:f3:67:5e:3e:44:82:0a:e3:e7:74:1e:30:c9:
b2:60:1a:83:33:21:c0:00:2f:72:59:e3:10:04:0e:c0:4f:cc:
e1:8e:ca:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:48 2026 by rpki-client