Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146737.roa
File: AS146737.roa (raw, json)
Hash identifier: a6hs/31PcxRvlBf4jPGyrdtOkB+M3K781ovYV41Hq7Q=
Subject key identifier: 9B:1B:D0:59:E0:F2:4D:E8:5F:39:9D:37:89:1F:88:AB:72:69:BD:C2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3CB5C07FB65AB61A518F8F1CC277B9138BE888F2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146737.roa
Signing time: Fri 22 May 2026 07:25:03 +0000
ROA not before: Fri 22 May 2026 07:20:03 +0000
ROA not after: Fri 21 May 2027 07:25:03 +0000
asID: 146737
IP address blocks: 240a:aff7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b5:c0:7f:b6:5a:b6:1a:51:8f:8f:1c:c2:77:b9:13:8b:e8:88:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:03 2026 GMT
Not After : May 21 07:25:03 2027 GMT
Subject: CN=9B1BD059E0F24DE85F399D37891F88AB7269BDC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:bb:3c:d0:49:8b:05:35:92:ab:a0:0c:35:
fb:c2:a2:f4:51:46:d2:db:ce:85:85:5d:37:58:a3:
f2:26:e1:25:62:29:33:7a:d6:e7:72:c5:56:0a:b7:
a3:72:71:22:4f:98:a6:4f:e2:77:0a:00:fd:93:0e:
cd:da:98:23:9b:4b:19:71:e9:db:40:4f:7e:72:c3:
30:5c:c3:9d:c6:dd:42:db:47:ce:28:1c:4f:66:d7:
34:0a:d4:fe:d5:ed:1f:36:a6:d0:c2:1c:9a:3d:57:
90:28:b4:41:f5:cd:81:a4:47:60:d4:07:98:09:6a:
44:a1:21:c7:bf:fd:99:66:05:8b:87:3e:d1:19:46:
e7:bc:11:9b:f8:15:cd:30:dc:c6:c3:6f:36:80:b0:
7e:73:5d:9a:5d:11:4e:e3:e8:a0:5b:8e:60:f3:00:
65:d1:89:92:b3:71:d8:c4:3a:07:4d:d7:13:65:d8:
77:95:79:07:9f:e9:2f:ee:9b:ac:7d:b6:00:14:e5:
bc:84:f7:2f:48:7f:a6:ae:a3:f8:a3:9c:d8:7b:3e:
b3:44:f8:e3:6e:02:ff:3f:97:04:92:0b:58:10:56:
60:17:93:c2:6c:5f:94:41:8d:8c:48:db:e8:7b:06:
bf:7d:e5:e4:83:39:44:ed:f4:51:35:3e:2e:04:1d:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1B:D0:59:E0:F2:4D:E8:5F:39:9D:37:89:1F:88:AB:72:69:BD:C2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aff7::/32
Signature Algorithm: sha256WithRSAEncryption
16:12:6e:2f:ef:11:6f:ed:5f:87:60:0d:57:ee:54:83:42:1f:
b5:b9:c8:7d:79:e2:d2:27:1f:7d:9b:a8:25:53:38:ca:0c:5a:
73:5e:77:00:e9:5f:b3:56:8c:44:8f:2e:df:b9:7b:24:8f:97:
cb:be:73:ca:58:98:71:36:72:d0:df:08:ca:77:06:b3:14:36:
79:60:e5:79:8a:95:d9:ed:92:ce:11:aa:e2:a6:43:f4:17:10:
8a:1b:f9:07:4c:83:60:2f:95:ce:9e:12:cc:44:97:01:f5:36:
7f:c3:d8:cf:f8:99:73:6a:fe:94:0e:63:70:a1:e7:78:64:8f:
a5:0c:ac:22:93:24:54:d3:86:91:81:39:8b:9c:12:e5:11:c1:
23:cb:33:7a:76:0a:68:1d:ea:9f:7e:06:b7:e6:17:e4:6c:9e:
d0:2e:5e:31:a8:f8:aa:1c:77:6f:c0:02:00:ef:c1:43:11:64:
d0:04:7b:ca:4a:75:af:04:4a:c6:81:aa:f7:33:5a:54:3d:57:
61:c8:56:43:5d:65:91:5d:f0:d8:c4:b4:c0:12:26:da:c0:7a:
c2:0e:3b:1c:76:4a:f6:53:95:ef:d3:e1:a5:c4:66:72:cb:21:
59:29:65:e1:68:5e:eb:c2:2b:10:d3:0f:88:cd:e9:c9:4e:b6:
20:16:5f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:25 2026 by rpki-client