Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146740.roa
File: AS146740.roa (raw, json)
Hash identifier: YXJ55d6eU0rrJ4YVi2PDk9Avc/5uodUfHWwLJyFNheE=
Subject key identifier: 76:16:3F:9D:37:0A:7C:1F:15:CB:D8:C8:7C:52:3E:EF:F0:1A:28:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C4D5B27272C59FF60579B5F21F4F4EFF9C55BD5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146740.roa
Signing time: Fri 22 May 2026 07:24:51 +0000
ROA not before: Fri 22 May 2026 07:19:51 +0000
ROA not after: Fri 21 May 2027 07:24:51 +0000
asID: 146740
IP address blocks: 240a:affa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4d:5b:27:27:2c:59:ff:60:57:9b:5f:21:f4:f4:ef:f9:c5:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:51 2026 GMT
Not After : May 21 07:24:51 2027 GMT
Subject: CN=76163F9D370A7C1F15CBD8C87C523EEFF01A286B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:4b:2a:f9:19:1b:78:c9:c2:81:b1:dd:b4:
42:81:bf:a4:7b:40:bf:20:3b:59:3c:dd:8b:4d:27:
6a:55:69:d0:64:62:cc:48:6a:b0:cf:f7:e5:83:07:
a9:2c:7b:bb:f8:3a:49:20:5d:8d:68:b1:41:51:38:
3f:be:c0:be:03:6e:34:a5:d6:6c:a1:9e:fc:62:0b:
fd:38:26:16:c6:d9:e4:67:78:a0:07:96:1a:b1:19:
b4:f2:39:7a:fa:50:e0:29:a4:94:18:5b:cd:74:c8:
16:36:8f:ce:f5:0a:43:54:1f:7b:09:c3:91:d1:e1:
44:6b:a3:9f:73:d9:1b:49:c6:de:7e:f1:7c:ba:04:
9d:ac:9d:8a:5c:af:4f:d6:a9:87:bd:85:20:52:c8:
9b:d3:1a:e4:c4:be:7a:a6:13:f0:13:26:b7:d3:5c:
d1:9a:ee:62:8f:3c:f4:38:77:91:c3:32:d0:ed:10:
f1:1a:3b:d5:26:f6:2d:46:57:ad:c6:1f:24:ae:6e:
28:4d:37:71:85:a4:6f:ae:43:fc:2a:55:68:7b:cd:
dc:01:65:92:94:44:1b:e6:b6:9a:93:4f:1c:ff:b8:
39:5f:f7:8f:47:a8:73:4f:3b:4e:f7:fa:68:d0:36:
55:e5:43:4c:5d:98:11:e8:44:ef:33:73:20:e3:73:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:16:3F:9D:37:0A:7C:1F:15:CB:D8:C8:7C:52:3E:EF:F0:1A:28:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146740.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:affa::/32
Signature Algorithm: sha256WithRSAEncryption
40:54:1d:be:91:d5:f9:e4:6a:7f:5a:16:ae:de:44:69:ad:bb:
9d:45:d1:5f:bc:41:c6:c8:33:16:c7:f1:c3:46:a5:59:9a:92:
27:88:1b:bf:82:81:15:61:7b:2c:2e:37:e5:62:c7:b6:0f:24:
e3:b0:93:ac:8d:94:85:30:20:ae:c1:06:31:d0:93:86:d5:57:
89:4f:02:3a:91:df:71:15:7f:28:ee:af:58:cb:ba:51:5b:bf:
16:1a:40:5a:b4:74:64:64:d1:88:b6:48:d0:49:17:0f:49:f6:
1a:29:16:6c:57:d3:6c:8c:5b:44:a4:6d:35:3b:82:dd:43:3b:
e3:ae:7c:1b:68:59:64:bd:a8:b6:66:c5:ad:64:94:b7:c7:4b:
3f:40:9d:fb:f4:20:c1:b1:86:6a:fe:dd:3f:ba:34:24:4d:9a:
a4:a9:c2:10:33:c8:41:dd:27:59:be:e4:0c:3c:cb:ce:fc:36:
b1:3e:e8:80:08:ba:1b:8a:ee:8a:84:20:95:60:55:e4:a4:8a:
b5:73:6b:d9:58:bc:4a:7b:01:77:fb:4c:52:d7:d8:30:04:b1:
e4:57:e4:88:28:86:a4:6a:07:ac:b0:2b:fc:44:09:73:e1:c7:
21:87:0e:01:2a:a6:f5:4e:19:4c:38:83:82:24:05:ab:89:1d:
16:c8:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:52 2026 by rpki-client