Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146704.roa
File: AS146704.roa (raw, json)
Hash identifier: 6oC8vtItsEZlNFecy2awf7nslIbvo032y3Ns6RAU3hM=
Subject key identifier: 5F:62:AF:05:C5:F4:1D:E6:62:11:93:C8:9F:71:80:04:11:3C:2D:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5727AA92D19F33F5187A499E5E3DB85A4A547E2A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146704.roa
Signing time: Fri 22 May 2026 06:46:04 +0000
ROA not before: Fri 22 May 2026 06:41:04 +0000
ROA not after: Fri 21 May 2027 06:46:04 +0000
asID: 146704
IP address blocks: 240a:afd6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:27:aa:92:d1:9f:33:f5:18:7a:49:9e:5e:3d:b8:5a:4a:54:7e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:04 2026 GMT
Not After : May 21 06:46:04 2027 GMT
Subject: CN=5F62AF05C5F41DE6621193C89F718004113C2D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:f5:13:2f:aa:5a:55:2c:b5:4d:f5:ea:44:
70:bf:c4:c6:95:4a:5a:be:bd:ab:2e:a6:df:92:48:
b0:91:16:c3:eb:49:5f:ef:bf:85:4e:ac:6f:cf:5f:
16:17:e9:63:f6:45:0a:3d:21:c3:5e:42:13:ed:73:
8f:9a:5d:a3:b6:e0:2d:cb:ea:05:87:72:ac:2e:b2:
0a:99:27:9b:59:26:e5:31:f7:db:cb:d6:0a:b0:20:
b3:5d:dd:55:aa:f0:28:f2:e3:98:77:0f:41:23:ca:
ee:a9:1d:26:0a:bb:b5:9e:09:d3:de:9d:a4:8b:3d:
df:41:c6:88:3c:2b:00:98:e8:9f:8f:30:b4:1a:e4:
d6:c7:9e:b2:ee:52:6f:ce:59:3f:a8:58:38:98:18:
88:39:76:5d:d9:06:1b:ce:a4:7b:cd:20:79:ab:b9:
cb:b1:31:6a:d3:84:45:d7:60:fc:45:62:b9:08:46:
d7:02:95:de:d8:45:10:a4:da:99:f2:c9:55:b1:36:
0d:0c:2e:d5:c2:e8:c1:4f:75:ed:b6:fe:f4:49:fd:
72:91:de:dd:97:04:db:9a:51:a7:3e:3f:1e:bd:d1:
2e:96:4c:a3:4e:15:00:03:d5:e8:bb:e7:82:56:d3:
56:3b:77:b0:73:66:7f:4d:c0:7e:37:9f:88:2e:23:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:AF:05:C5:F4:1D:E6:62:11:93:C8:9F:71:80:04:11:3C:2D:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afd6::/32
Signature Algorithm: sha256WithRSAEncryption
97:ff:6d:bf:ce:d6:10:ef:28:b3:27:e5:39:26:a1:1c:6b:47:
85:af:ef:11:a9:af:0e:be:4c:f0:90:59:8e:89:05:09:7b:05:
a1:10:82:be:ac:68:ee:fd:7b:77:bf:f7:a3:21:2b:f7:e9:05:
9c:fd:d8:5f:93:cf:62:03:0d:78:91:b7:d5:c9:32:b2:d4:c1:
95:4e:cd:03:67:7b:d2:15:16:96:ae:74:f0:2a:83:5d:0d:24:
43:2e:53:57:ea:7d:ca:34:bf:bb:33:11:f8:4d:d5:83:c8:98:
64:ac:8a:a2:af:94:a6:31:6d:c6:be:10:32:d5:03:c8:1f:69:
d2:64:e1:9f:ad:48:95:c0:c5:f4:41:ac:f0:dc:51:33:db:39:
cf:b0:54:53:15:6b:a9:39:e5:ef:84:44:45:21:2e:55:ed:e8:
73:e3:4e:09:90:3a:a4:30:1b:5b:cd:86:65:6e:b3:49:db:74:
fa:8c:83:2a:48:d2:74:94:6b:7f:54:7d:17:ff:b9:91:40:55:
42:1c:dd:29:f6:9a:1e:66:a4:ea:46:49:82:d0:ea:7c:a4:84:
1a:af:5c:f1:ce:cf:91:21:9e:68:a5:71:79:cd:14:6c:72:ba:
43:8f:89:b0:88:89:02:17:43:7c:ca:ad:b5:33:90:d3:b9:79:
ad:22:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:59 2026 by rpki-client