Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146695.roa
File: AS146695.roa (raw, json)
Hash identifier: o/5Atp3SyKt9RBFtHS24HZC7RjBjhyrC+OTAmc0Pbqc=
Subject key identifier: D7:C0:C2:4A:85:C6:C7:AB:5B:33:E4:DA:30:A6:C0:CA:76:61:BA:46
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 17C3E3EA807BCB681E13005E1595068795B00264
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146695.roa
Signing time: Mon 25 May 2026 01:38:06 +0000
ROA not before: Mon 25 May 2026 01:33:06 +0000
ROA not after: Mon 24 May 2027 01:38:06 +0000
asID: 146695
IP address blocks: 240a:afcd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c3:e3:ea:80:7b:cb:68:1e:13:00:5e:15:95:06:87:95:b0:02:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:06 2026 GMT
Not After : May 24 01:38:06 2027 GMT
Subject: CN=D7C0C24A85C6C7AB5B33E4DA30A6C0CA7661BA46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:83:4c:72:12:a4:1f:11:a4:48:21:a5:37:
37:a9:4c:87:e6:eb:44:a7:69:bb:40:1b:89:5b:c1:
8a:6c:67:fd:00:1e:de:2e:fa:bf:9c:59:e2:52:c2:
4f:7e:f0:a0:9e:44:5d:b1:fc:3b:0a:b4:fd:cf:0c:
50:a0:ff:97:98:87:50:03:8b:15:aa:bb:e7:98:87:
10:d7:57:4f:32:42:3c:88:62:26:14:c0:85:c8:f4:
e0:bc:94:f5:18:f0:ac:08:31:4d:59:ee:d3:e2:45:
bd:7c:73:6e:1b:05:8a:68:49:a4:9a:d4:24:cb:bf:
fc:57:fa:34:b2:66:b3:3a:da:bd:57:ef:d3:3f:8a:
b9:ce:96:58:89:49:4a:3c:08:6e:ba:9e:a8:d9:16:
07:af:c4:e7:fb:02:1d:c2:73:91:0d:7a:8e:37:77:
31:cf:01:21:1c:67:7d:9c:29:9b:be:2f:3b:fd:05:
29:28:9c:5c:55:ea:13:9d:a8:a9:67:0b:8e:54:dd:
ff:87:03:9b:6c:6c:82:cc:61:c7:00:d7:fc:44:de:
1d:04:55:82:f4:cb:25:49:8e:cd:4e:e1:d6:07:15:
d2:5f:2b:74:ce:b3:0b:2e:82:70:6a:8e:d2:08:57:
6c:8c:97:cd:a8:cc:e1:a8:b8:56:6f:e3:6d:b6:a5:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:C2:4A:85:C6:C7:AB:5B:33:E4:DA:30:A6:C0:CA:76:61:BA:46
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146695.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afcd::/32
Signature Algorithm: sha256WithRSAEncryption
10:f3:34:ec:ce:7e:68:5d:e7:10:d5:74:6a:3e:e3:c1:e7:ab:
b8:06:8a:91:e7:b3:e5:9d:23:90:ca:02:e4:ca:c8:65:26:bb:
3b:b1:a9:ed:df:74:ee:70:2a:27:03:2b:df:9b:72:21:83:75:
02:3f:b8:1b:39:b9:8a:b6:a8:fa:91:8e:62:58:24:e4:9f:d4:
d2:b2:ea:2b:07:56:38:43:31:22:0c:94:58:c5:5b:93:1f:b6:
6e:37:a4:3c:24:5d:ea:02:8d:95:be:a5:d4:b3:4b:49:b8:b9:
7b:8c:20:9a:0c:a9:5b:bf:45:79:31:e4:eb:f8:00:7d:4f:a2:
f2:d6:97:af:4b:bc:25:41:a4:a1:0d:39:81:5a:a4:c4:61:b4:
d5:7e:e4:7a:5e:37:2e:0e:6e:7d:3b:1c:c5:69:f2:2e:3f:19:
c2:8f:98:b3:4f:f6:e8:73:0b:0d:fa:3d:9e:6b:59:75:bc:5c:
17:9c:bb:78:1a:f0:e7:fc:fc:ba:e8:a1:1c:59:7e:5a:11:61:
be:b2:46:c8:01:79:0a:51:85:43:da:b6:28:09:e2:21:a3:c4:
b8:7c:5a:ca:97:24:d9:fb:4d:2b:09:1a:ac:a5:32:55:46:e5:
42:f9:50:73:26:4f:df:34:7a:ce:bd:8c:ae:91:89:0d:78:91:
5c:fd:c2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client