Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146700.roa
File: AS146700.roa (raw, json)
Hash identifier: hBX6edoqH1yAuF595H9pgiP0L7BuOkMFWafls99zmHQ=
Subject key identifier: 69:8E:1B:6D:CF:9E:17:F3:0C:BB:5F:19:3A:97:7E:65:AC:62:D5:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7DDDE37078ED993E533D21A16F71861C2DE14C60
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146700.roa
Signing time: Tue 26 May 2026 08:52:50 +0000
ROA not before: Tue 26 May 2026 08:47:50 +0000
ROA not after: Tue 25 May 2027 08:52:50 +0000
asID: 146700
IP address blocks: 240a:afd2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:dd:e3:70:78:ed:99:3e:53:3d:21:a1:6f:71:86:1c:2d:e1:4c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:50 2026 GMT
Not After : May 25 08:52:50 2027 GMT
Subject: CN=698E1B6DCF9E17F30CBB5F193A977E65AC62D508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:4f:56:d5:f2:e9:67:ff:5c:3f:08:15:82:
ab:ad:a6:5a:6d:17:03:66:e6:9f:c9:66:92:89:99:
ae:2a:e0:99:27:5e:b6:dd:56:6e:5c:0e:6e:f4:72:
5b:9d:83:11:2e:e9:33:86:87:f4:b8:82:54:43:c7:
3f:e8:1c:ed:dc:ee:17:01:9c:e5:2a:a9:1c:1e:83:
a6:12:65:49:31:56:31:0e:0d:d0:f4:af:e0:43:13:
4c:66:4e:16:10:2d:63:5b:b0:f0:ce:88:e9:21:4b:
a8:e2:4e:19:bd:85:22:12:2f:61:00:49:cd:f0:a3:
3b:0a:ab:1f:67:45:72:95:f6:7f:b3:65:19:50:6d:
7e:c6:b7:fe:f9:6a:91:ec:5f:4b:fd:80:2a:eb:49:
2b:23:d2:a6:68:fd:fe:11:7f:5c:dc:2b:df:2e:f4:
60:b2:7a:60:d6:31:70:8f:64:23:2a:d7:52:dc:86:
18:27:4a:d3:05:e6:f1:5b:7f:81:9d:2b:b9:57:57:
29:0e:31:e7:30:81:99:08:b0:55:89:db:83:4a:6c:
23:b8:f6:c5:a9:24:45:87:91:2a:e7:1a:e8:1b:a2:
2a:c8:7c:42:f9:9f:d6:8f:38:3b:11:b6:95:83:42:
3c:a8:aa:f1:79:ac:0a:fd:5f:7a:34:d3:9a:54:5a:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:1B:6D:CF:9E:17:F3:0C:BB:5F:19:3A:97:7E:65:AC:62:D5:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146700.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afd2::/32
Signature Algorithm: sha256WithRSAEncryption
26:75:fe:2d:c9:f9:33:b6:da:a9:64:17:65:48:0c:40:97:12:
05:ac:80:92:0b:9c:c5:40:df:18:33:a1:96:9d:d1:d3:4f:2a:
03:c9:6e:98:69:31:6a:c6:81:90:cb:c7:9f:4f:34:0f:c8:51:
d4:68:10:52:4e:45:29:63:1e:a2:63:4c:e0:bf:f9:1f:44:5f:
aa:1b:4a:e2:df:49:1c:e0:90:bb:41:d5:12:36:14:7b:da:9b:
fd:83:b9:ef:dd:2f:a0:4d:93:0e:c2:ac:6b:4e:c0:6a:41:7f:
82:65:6a:db:bb:51:32:c7:cd:26:f8:df:a9:a8:0d:78:d9:f0:
f4:e9:70:9b:cb:36:fa:5c:75:85:af:77:e3:88:07:56:af:02:
3c:38:52:55:77:77:f6:8c:4e:5b:61:5c:3a:aa:82:a5:ef:eb:
8e:11:86:9a:8d:41:ad:35:01:af:84:44:49:78:6e:41:e9:70:
84:5c:c0:3b:57:3c:a5:06:73:39:55:69:6c:61:ed:04:0c:6d:
4a:d7:73:b5:82:01:d7:47:b5:26:27:cc:ef:68:45:50:f2:1d:
6f:c3:a3:ff:4d:b7:26:10:df:06:1f:3f:b0:5b:e2:7c:af:29:
25:67:71:02:82:cb:7f:60:25:53:2a:fe:92:1b:4f:48:45:fd:
2b:ba:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:45 2026 by rpki-client