Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146735.roa
File: AS146735.roa (raw, json)
Hash identifier: vmzLjkvmd8lmJwqL+q3fQ9idG/MQw/1SF0p61j6hBeU=
Subject key identifier: 70:24:87:03:F4:1C:D5:44:56:D2:8F:2F:A6:2A:92:78:C2:ED:60:A3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 562963C7EEC6047ED0A0FB733FD9F6A8C6172200
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146735.roa
Signing time: Mon 25 May 2026 03:19:28 +0000
ROA not before: Mon 25 May 2026 03:14:28 +0000
ROA not after: Mon 24 May 2027 03:19:28 +0000
asID: 146735
IP address blocks: 240a:aff5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:29:63:c7:ee:c6:04:7e:d0:a0:fb:73:3f:d9:f6:a8:c6:17:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:28 2026 GMT
Not After : May 24 03:19:28 2027 GMT
Subject: CN=70248703F41CD54456D28F2FA62A9278C2ED60A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:04:64:30:b9:dc:90:4b:7f:e0:fd:bf:f6:
f6:8c:80:58:a4:f3:e3:bd:42:7d:97:0f:30:09:56:
d4:a4:f2:61:09:67:ac:ea:df:e4:af:cf:a8:8f:17:
e3:3c:f9:8e:2c:04:40:b2:a6:b4:78:ac:2e:0a:e5:
76:b5:94:08:f9:22:2d:9c:4f:92:e5:ea:95:b9:5c:
d7:63:fa:77:4c:cc:87:81:4e:c0:eb:7c:3a:95:91:
aa:01:e9:04:25:36:65:60:95:b4:c1:d4:2e:46:b8:
75:f5:03:fb:28:61:fb:ef:17:b1:f6:78:81:f3:39:
93:1d:ae:cf:9c:0a:27:6a:17:1a:d4:36:ca:83:4f:
2c:4b:fe:0e:8b:10:c2:d8:da:c3:b9:3a:8e:b4:e3:
de:76:ab:62:53:d2:86:5a:45:b0:c7:57:9d:29:c0:
30:00:ee:21:9e:17:be:83:e3:57:e0:6c:50:e7:62:
50:2e:f4:c1:5f:df:d7:f3:db:55:a7:48:50:ce:aa:
81:f7:35:c6:aa:de:95:99:45:7f:32:0b:f9:9d:1d:
08:90:df:a3:63:89:22:16:5e:ca:46:90:e4:64:1e:
63:a5:76:99:21:8d:0b:df:75:1a:96:6c:ce:10:c1:
1a:7c:9a:05:82:b5:04:45:a0:c2:8b:d0:b5:0b:cf:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:87:03:F4:1C:D5:44:56:D2:8F:2F:A6:2A:92:78:C2:ED:60:A3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aff5::/32
Signature Algorithm: sha256WithRSAEncryption
21:88:b9:6b:af:37:0e:9b:c5:26:ba:5f:35:f4:fe:73:1e:8f:
04:96:01:e2:b4:ac:11:a0:dc:cd:cc:c4:36:5e:94:ce:9c:e0:
a4:09:57:3a:fc:76:83:fa:3e:c9:e2:d9:9d:09:11:62:46:65:
9c:6e:17:dc:0f:d0:97:71:0f:2b:75:43:35:b6:31:76:15:77:
6c:dc:af:a5:8f:75:d3:df:36:3b:b2:b4:1d:a1:cf:98:ac:20:
7f:92:fb:99:8b:40:0c:e1:58:80:bf:92:08:29:b9:b1:bd:c1:
36:0e:a5:60:0c:1e:b0:de:52:41:5c:37:30:ea:10:95:e9:a8:
e4:a1:cc:6b:78:56:ba:e5:b6:9a:b2:32:7b:02:15:7b:29:1c:
f5:eb:9f:1f:fe:79:df:bb:d3:35:a0:54:94:a7:6b:e0:86:61:
a2:ca:26:53:42:49:35:b5:eb:8c:92:2d:8a:ad:de:45:fb:01:
4d:11:da:28:51:82:a9:c3:a6:d6:d2:11:7c:a1:4e:50:6e:bc:
9c:b4:b0:76:59:12:b5:75:5e:78:e6:57:04:8e:21:f2:1a:eb:
70:58:ee:a7:2c:0a:99:69:b4:c3:a9:81:58:18:66:4b:75:0a:
10:99:a7:a0:87:5e:de:6e:15:cf:e0:ce:b1:10:34:35:d6:df:
13:2c:b6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:51 2026 by rpki-client