Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146739.roa
File: AS146739.roa (raw, json)
Hash identifier: tAXLrHUxbz45BL5OALItfN/qmXRaxKWNby7BWa6x5YM=
Subject key identifier: C4:A7:82:6B:F9:82:91:88:2D:25:84:6F:85:0E:7A:83:8D:77:C8:9B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C711D382351CF3141878905FEEDA67FE29C6517
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146739.roa
Signing time: Mon 25 May 2026 06:28:32 +0000
ROA not before: Mon 25 May 2026 06:23:32 +0000
ROA not after: Mon 24 May 2027 06:28:32 +0000
asID: 146739
IP address blocks: 240a:aff9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:71:1d:38:23:51:cf:31:41:87:89:05:fe:ed:a6:7f:e2:9c:65:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:32 2026 GMT
Not After : May 24 06:28:32 2027 GMT
Subject: CN=C4A7826BF98291882D25846F850E7A838D77C89B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:c3:41:02:02:27:35:cb:89:90:5d:ae:87:
78:51:7b:32:40:2d:ca:eb:4c:b4:69:ba:6d:a4:e7:
db:fd:0c:7a:07:e8:d4:36:40:f4:44:71:5d:d4:2c:
7b:5f:15:7e:f7:33:88:68:ca:86:8b:35:9e:99:d7:
c1:4e:80:66:19:ec:a2:88:72:b8:d7:ce:18:68:f2:
97:1f:7d:4a:09:02:b1:1d:bc:ec:c5:c1:eb:cd:cf:
85:95:7b:99:2d:a3:c5:a5:39:7c:c8:a0:cb:28:55:
c4:d4:98:07:12:19:f4:2b:64:2f:8e:42:f6:db:40:
39:18:0e:eb:c6:54:6a:a3:cc:aa:6c:78:40:28:2b:
32:ae:a1:bd:fd:8c:0f:2b:61:08:ea:9a:dd:6e:a2:
00:73:3e:cc:89:04:06:44:ae:05:15:bb:93:31:17:
cc:e8:27:52:41:b2:ec:3e:3c:40:28:16:72:26:4c:
db:6d:ee:f3:04:3a:4e:b3:6d:e2:d2:f3:e7:52:8f:
85:f7:83:ef:ed:50:0d:da:1c:ae:e6:64:d1:ca:4b:
3a:53:4f:53:0b:15:a9:91:5d:99:e9:8d:20:a6:30:
e7:d4:25:3e:94:ef:1c:f8:e2:2b:76:c9:3c:7b:d9:
37:ba:86:2e:b0:fd:b2:3e:b9:5a:15:80:15:d7:10:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A7:82:6B:F9:82:91:88:2D:25:84:6F:85:0E:7A:83:8D:77:C8:9B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aff9::/32
Signature Algorithm: sha256WithRSAEncryption
5f:5e:1c:f1:50:b4:64:26:a6:3e:15:e0:32:b7:eb:68:35:dd:
a2:d8:71:d4:80:e7:2b:ce:1d:38:c6:88:9f:c6:12:28:4d:9c:
e7:ee:05:47:88:03:7e:52:e4:bd:ca:ac:9c:96:83:f7:46:8a:
76:03:de:ce:4a:aa:b6:89:f2:54:e9:53:a2:91:74:44:f8:6b:
7a:f2:eb:52:94:b0:5f:58:e9:7a:7c:b6:43:9e:6d:e3:e4:57:
e4:8f:26:a8:3b:6c:06:41:62:df:46:6a:6e:f9:53:b7:9e:d6:
30:df:9a:51:5e:c1:39:13:52:3c:fc:67:40:f1:19:77:cd:a0:
e6:06:3f:1d:14:85:45:07:f7:0e:01:17:03:66:f8:72:71:b3:
7b:2c:aa:f2:db:40:8c:f8:1d:07:ae:bc:60:a2:4d:e3:92:cc:
f1:27:be:4f:ab:d7:6e:b3:8b:65:a8:eb:ca:9f:6f:13:13:b6:
b6:7a:71:24:4d:2b:68:4f:9c:5d:be:d7:57:58:b6:d5:f6:f6:
88:06:f3:84:30:39:3b:21:75:fd:3b:07:23:68:c0:7a:39:25:
83:2e:32:7a:33:66:a8:9a:de:4a:29:0e:01:fa:94:0b:fa:4a:
81:05:d9:fb:df:67:9d:b8:69:58:0d:c0:4d:9e:ac:15:a5:64:
66:74:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:00 2026 by rpki-client