Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146718.roa
File: AS146718.roa (raw, json)
Hash identifier: F7ASIOmNzfxIsfqhPo9vA7v06R0n3G4s1sYbtF5y0OE=
Subject key identifier: 24:9D:36:7C:9B:39:72:C1:A0:2F:B3:94:FE:43:FC:BA:EA:DD:EC:DB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46FF1F1DBC0515763E6383D413C04F730D39A117
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146718.roa
Signing time: Fri 22 May 2026 04:08:34 +0000
ROA not before: Fri 22 May 2026 04:03:34 +0000
ROA not after: Fri 21 May 2027 04:08:34 +0000
asID: 146718
IP address blocks: 240a:afe4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ff:1f:1d:bc:05:15:76:3e:63:83:d4:13:c0:4f:73:0d:39:a1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:34 2026 GMT
Not After : May 21 04:08:34 2027 GMT
Subject: CN=249D367C9B3972C1A02FB394FE43FCBAEADDECDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:06:cf:17:2f:e4:77:89:9f:0a:9f:f1:15:
55:3a:43:4a:36:b7:05:d7:0c:74:f1:aa:e2:49:5e:
74:62:da:57:7d:6f:08:a0:5d:51:d1:6f:99:0a:56:
96:59:6c:3f:66:e6:ca:7d:9a:3a:0c:c4:f3:87:2f:
d7:22:80:72:1a:51:0c:9e:ba:95:17:8b:30:43:d2:
0e:1c:47:33:42:09:ba:e7:b9:96:05:bb:58:7e:b7:
a1:af:1e:fe:55:c3:4f:3b:f0:41:fd:d1:91:60:2a:
4d:d3:59:c5:fb:70:69:94:9e:0b:99:d2:24:29:a5:
ea:68:b9:90:62:67:f1:2a:63:94:fd:69:02:07:91:
09:09:84:28:b1:8a:64:dd:f8:d2:9e:51:a3:89:af:
75:c7:a6:0e:92:53:41:56:51:29:ef:07:75:9d:88:
76:9a:8a:d3:ec:4e:ef:21:9e:98:b6:7a:f7:45:b7:
7e:d3:1f:d3:c6:99:5c:74:9f:46:b0:2a:d1:ed:57:
8a:22:25:8c:25:59:32:31:e9:a9:20:12:57:da:96:
95:fd:4a:3c:23:b7:1a:4f:73:67:07:86:b2:33:d2:
18:16:0c:3c:fd:5f:38:71:3c:93:c4:62:0f:aa:ae:
52:64:bd:8b:01:b4:a1:b1:d9:4c:0c:f9:f5:05:5d:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9D:36:7C:9B:39:72:C1:A0:2F:B3:94:FE:43:FC:BA:EA:DD:EC:DB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afe4::/32
Signature Algorithm: sha256WithRSAEncryption
ba:7d:c9:9a:2e:d2:94:78:54:60:04:40:3f:c1:81:f5:8d:b6:
dd:42:14:93:80:87:96:5d:6c:17:88:73:45:be:74:c4:af:70:
a5:77:fe:33:46:4e:14:a5:81:f1:f2:e2:85:17:5e:50:32:74:
47:7c:3b:b8:d4:d8:44:b1:85:8c:e8:77:06:54:a3:bd:e6:84:
4e:13:4e:17:10:01:e5:09:bb:de:eb:15:ca:e7:3c:07:6f:88:
cf:40:8c:b5:aa:d8:63:d3:32:e5:00:80:55:38:a6:8a:7a:de:
0d:d1:5a:fd:e5:cb:a3:b4:f1:e3:e9:ce:61:9c:93:40:8a:36:
04:71:af:81:f6:2c:b9:ab:00:a2:27:14:51:8e:c2:e5:f7:88:
fc:99:1a:8e:34:f4:87:70:7e:94:3f:d1:5b:fc:86:71:06:2c:
bd:1f:0c:45:96:bd:87:34:c5:e5:47:03:de:9d:bc:7f:a8:fe:
97:f4:8c:0d:16:76:27:6a:ce:d9:0d:8f:01:c3:16:0b:4f:2f:
00:52:0e:ed:48:b0:ad:0b:75:01:09:dd:27:db:52:c9:9e:84:
4b:e4:62:e8:ee:5e:a0:d2:27:b6:cf:e4:8b:ac:83:5c:a0:ab:
87:4f:3e:d1:a8:c5:ee:6d:1c:b2:5e:04:9b:d6:34:cd:ea:21:
a0:07:cb:a7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURv8fHbwFFXY+Y4PUE8BPcw05oRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMzRaFw0yNzA1MjEwNDA4MzRaMDMxMTAvBgNV
BAMTKDI0OUQzNjdDOUIzOTcyQzFBMDJGQjM5NEZFNDNGQ0JBRUFEREVDREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQwbPFy/kd4mfCp/xFVU6Q0o2
twXXDHTxquJJXnRi2ld9bwigXVHRb5kKVpZZbD9m5sp9mjoMxPOHL9cigHIaUQye
upUXizBD0g4cRzNCCbrnuZYFu1h+t6GvHv5Vw0878EH90ZFgKk3TWcX7cGmUnguZ
0iQppepouZBiZ/EqY5T9aQIHkQkJhCiximTd+NKeUaOJr3XHpg6SU0FWUSnvB3Wd
iHaaitPsTu8hnpi2evdFt37TH9PGmVx0n0awKtHtV4oiJYwlWTIx6akgElfalpX9
SjwjtxpPc2cHhrIz0hgWDDz9XzhxPJPEYg+qrlJkvYsBtKGx2UwM+fUFXXIvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJJ02fJs5csGgL7OU/kP8uurd7NswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NzE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqv5DANBgkqhkiG9w0BAQsFAAOCAQEAun3J
mi7SlHhUYARAP8GB9Y223UIUk4CHll1sF4hzRb50xK9wpXf+M0ZOFKWB8fLihRde
UDJ0R3w7uNTYRLGFjOh3BlSjveaEThNOFxAB5Qm73usVyuc8B2+Iz0CMtarYY9My
5QCAVTiminreDdFa/eXLo7Tx4+nOYZyTQIo2BHGvgfYsuasAoicUUY7C5feI/Jka
jjT0h3B+lD/RW/yGcQYsvR8MRZa9hzTF5UcD3p28f6j+l/SMDRZ2J2rO2Q2PAcMW
C08vAFIO7UiwrQt1AQndJ9tSyZ6ES+Ri6O5eoNInts/ki6yDXKCrh08+0ajF7m0c
sl4Em9Y0zeohoAfLpw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:52 2026 by rpki-client