Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146725.roa
File: AS146725.roa (raw, json)
Hash identifier: c4J7qHvfX9sQ0jPIEA1geYvUkEkWm7s3Qoc//8vn7fU=
Subject key identifier: 94:E9:F1:79:D8:E5:0F:DC:6B:9A:F1:45:4A:8F:94:95:72:84:FE:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3CF0678C887033387508B7B0FC8FF4E709FAD10C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146725.roa
Signing time: Mon 25 May 2026 01:51:07 +0000
ROA not before: Mon 25 May 2026 01:46:07 +0000
ROA not after: Mon 24 May 2027 01:51:07 +0000
asID: 146725
IP address blocks: 240a:afeb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f0:67:8c:88:70:33:38:75:08:b7:b0:fc:8f:f4:e7:09:fa:d1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:07 2026 GMT
Not After : May 24 01:51:07 2027 GMT
Subject: CN=94E9F179D8E50FDC6B9AF1454A8F94957284FE24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:db:bb:77:89:b8:9a:f8:cd:bf:f9:81:8d:
a5:ad:3c:34:90:4b:07:1a:f9:f2:ab:c2:6c:70:a9:
35:eb:7c:e9:83:da:15:2b:7e:40:c1:90:63:86:c2:
88:53:3e:6f:82:4f:95:90:0f:c7:03:47:14:75:7d:
1e:f5:74:4b:3b:e4:19:ec:11:10:09:39:b3:a2:1e:
b8:d5:61:02:0e:fb:54:9d:42:38:e7:e7:79:d6:a5:
fc:d6:c7:62:dc:2a:ba:46:42:1b:2f:01:0e:13:f9:
67:3b:6e:70:38:40:6c:30:e2:95:c5:64:1c:e8:bf:
64:74:19:35:93:7a:2a:6e:bd:d6:96:27:d3:36:23:
d7:ec:d4:e3:82:dc:94:99:6f:73:6b:53:94:2b:2c:
b0:bc:03:cf:c6:b4:6e:19:1e:61:56:4b:be:ee:a1:
04:d2:30:df:62:9f:62:27:d9:40:fb:39:af:b4:d1:
a3:14:0d:bd:8f:89:39:69:02:76:55:14:15:1f:55:
9b:40:40:27:f5:22:cb:49:10:22:73:8f:c8:22:8f:
eb:56:29:6d:a9:48:c9:7f:2c:17:58:dc:e2:84:20:
f8:29:76:68:ef:68:c0:82:e1:9e:de:c4:76:a6:6c:
73:db:a0:0c:52:71:40:f8:67:5c:03:ab:b7:30:28:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E9:F1:79:D8:E5:0F:DC:6B:9A:F1:45:4A:8F:94:95:72:84:FE:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146725.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afeb::/32
Signature Algorithm: sha256WithRSAEncryption
20:51:49:55:9b:7c:40:73:8a:b3:2b:f7:01:24:05:65:4e:47:
65:17:48:8f:45:f4:bc:ab:f5:6f:5c:59:2d:a2:04:8f:25:5e:
c2:50:bc:34:fb:92:c6:02:b5:4b:ef:db:f2:d2:3d:52:fa:ad:
5a:de:d3:f6:12:d7:51:3a:db:25:6a:da:5d:17:d6:27:b1:e9:
3e:82:f7:61:77:e8:2a:21:bb:49:5a:01:6a:fd:89:af:74:7f:
26:03:8f:9b:90:93:62:bb:aa:f7:67:be:e8:b2:fe:a2:0b:81:
50:56:67:e9:2a:19:69:54:63:d3:e5:9d:37:ed:80:56:fb:47:
53:1b:73:d4:12:d6:e5:d7:da:ac:2f:0a:eb:96:9e:54:6e:46:
1f:7a:de:cf:ea:8b:60:d3:d2:9f:13:01:19:7f:dc:9c:ac:a1:
44:46:91:3a:bb:4b:ce:e4:05:5d:c1:5e:62:dd:5c:88:24:1f:
97:ff:50:cc:d8:83:b9:5d:05:fa:aa:c4:80:12:e8:1c:cd:41:
04:62:89:c9:ec:b3:f7:54:1a:ec:35:64:3b:23:13:2d:10:c9:
94:df:8b:0a:63:40:21:47:aa:05:bc:d4:30:7d:6a:19:71:a8:
05:30:d4:ae:68:16:c0:1e:1a:6d:1e:d1:c1:90:c4:d5:c3:d2:
20:b6:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:47 2026 by rpki-client