Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146687.roa
File: AS146687.roa (raw, json)
Hash identifier: /zzngr/HI7EdtjzpLffprpRgnI6/Y5YSV+Pby1LyUHk=
Subject key identifier: 70:47:7F:62:43:56:5B:99:0B:B7:36:CB:99:90:BB:02:8D:BE:01:90
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2DB09FB5990201F9AC211B00A14C6555509C908B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146687.roa
Signing time: Fri 22 May 2026 02:48:05 +0000
ROA not before: Fri 22 May 2026 02:43:05 +0000
ROA not after: Fri 21 May 2027 02:48:05 +0000
asID: 146687
IP address blocks: 240a:afc5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b0:9f:b5:99:02:01:f9:ac:21:1b:00:a1:4c:65:55:50:9c:90:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:05 2026 GMT
Not After : May 21 02:48:05 2027 GMT
Subject: CN=70477F6243565B990BB736CB9990BB028DBE0190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:5a:5b:74:82:4b:d7:c7:64:63:4d:1d:f9:
4d:25:c6:12:59:b5:46:4e:fc:0d:7b:95:f1:e1:c3:
cb:9f:91:aa:78:6b:23:7a:29:93:a0:d5:c1:b2:a4:
cc:1d:2d:33:99:8a:72:95:0a:fe:50:d2:e6:32:e8:
7c:af:77:3b:70:c6:7a:55:07:06:8d:59:d9:bd:7b:
15:14:29:32:ce:aa:07:10:b5:7a:7b:be:de:e6:c5:
8f:d1:44:c0:31:4b:b9:72:fc:29:50:78:bf:b6:fb:
e0:65:8c:24:90:61:ba:a4:18:31:10:e9:37:fa:6b:
d1:cb:1c:f0:44:e8:4a:7a:12:6a:6d:cb:be:8c:36:
a1:ae:fc:3f:18:2a:65:fd:83:6c:dc:81:e4:ea:4e:
a3:08:f2:c5:8b:4a:ec:21:2d:c0:0c:8e:0f:b6:38:
bf:ea:1e:ac:57:bd:20:d4:56:e8:c0:24:66:63:f8:
14:0f:a0:50:cd:b1:dc:8b:f2:eb:88:42:b1:cb:2e:
af:81:65:03:7f:bd:00:bb:e7:09:a8:67:13:a2:b9:
b9:8d:81:12:44:fc:1b:cb:8f:e9:ed:fc:15:f1:f1:
3d:8e:be:04:b2:6a:53:e4:3a:a2:fe:38:3e:5f:0a:
ea:cd:07:d4:9f:c1:03:e8:72:27:fc:d7:6d:7a:b4:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:47:7F:62:43:56:5B:99:0B:B7:36:CB:99:90:BB:02:8D:BE:01:90
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146687.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afc5::/32
Signature Algorithm: sha256WithRSAEncryption
81:50:16:46:c8:08:9c:8b:69:bf:8a:c1:96:7a:31:13:66:7e:
6c:a9:c6:4e:f4:bb:ec:8f:f2:97:dc:0c:65:a7:d7:8d:96:06:
58:8b:b1:35:2c:84:64:17:78:c6:dc:65:ab:fd:44:c3:62:8b:
b3:10:06:0c:db:73:3a:14:c8:34:e0:1e:cd:97:6c:90:0c:82:
56:ce:35:62:09:a6:9f:71:7d:b9:d5:14:b1:37:8c:7c:dc:6c:
37:8e:97:12:33:0a:3c:d3:a8:f1:23:3a:f3:31:4c:61:3a:7e:
2c:21:51:7d:c2:bb:64:39:d6:6b:e9:a1:9f:68:00:ae:ac:b0:
09:72:2e:42:8c:f8:fb:9a:ff:6d:18:fc:df:9b:dc:1e:7b:86:
c2:fc:bc:07:e6:e1:5e:78:7e:84:33:fd:4c:dd:eb:36:33:51:
94:90:8a:fb:08:09:b3:d6:5b:e6:fa:d1:ae:87:e5:8a:6d:a9:
7c:52:7e:bb:7e:a1:b4:c2:35:1a:c6:46:92:82:3b:72:60:55:
bc:2b:6b:b5:c7:02:1f:f8:e4:1f:fe:d5:60:c9:f5:dd:a6:7f:
66:a5:7a:bd:70:9d:8b:92:85:38:70:92:9e:c9:a2:36:60:d0:
6f:32:00:5e:da:4e:fb:5f:7f:7f:d8:58:d7:9c:e3:5b:17:4a:
9b:8d:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:17 2026 by rpki-client