Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146014.roa
File: AS146014.roa (raw, json)
Hash identifier: EVs+16B7y7ncYYvYjMj3VV7rq9wZOtUjx8oCE2IbIP4=
Subject key identifier: 3B:DB:68:9E:1E:C8:81:68:84:B1:29:1F:20:78:52:84:FF:EC:AF:F4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 165216D36DF48DF48ABB104B924458B25B57DD8C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146014.roa
Signing time: Mon 25 May 2026 01:51:04 +0000
ROA not before: Mon 25 May 2026 01:46:04 +0000
ROA not after: Mon 24 May 2027 01:51:04 +0000
asID: 146014
IP address blocks: 240a:ad24::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:52:16:d3:6d:f4:8d:f4:8a:bb:10:4b:92:44:58:b2:5b:57:dd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:04 2026 GMT
Not After : May 24 01:51:04 2027 GMT
Subject: CN=3BDB689E1EC8816884B1291F20785284FFECAFF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:8e:0a:98:31:81:f0:f9:8b:05:05:63:57:
d9:17:c5:69:9a:77:b4:31:9f:b3:e4:0e:44:7b:5c:
3f:a4:f7:28:65:32:31:72:58:fd:fa:d1:1c:3d:b4:
5f:a5:92:8f:58:fb:77:8c:21:23:d4:bd:ea:e1:7b:
e0:33:e0:4b:e9:a5:b7:5e:d9:c6:0c:c7:00:fc:33:
14:e5:5e:e8:b1:c3:1b:f2:2c:54:5c:e1:28:28:73:
81:35:16:88:d3:bf:10:04:f5:f5:22:ff:66:40:42:
f3:11:fc:00:e5:7c:85:a2:b4:b9:31:3e:bd:d4:54:
b0:36:7b:02:94:34:86:c6:28:d9:b4:f4:f0:92:d5:
a2:06:19:bd:c1:9f:41:0d:b9:c8:68:ae:16:a4:fb:
91:45:90:ed:7a:63:21:99:20:bd:df:e8:f8:5f:a2:
fb:27:b6:df:76:10:a1:68:05:1b:8b:b2:92:63:23:
1c:68:d2:bd:29:f1:01:f3:6f:38:1a:a5:b1:83:46:
35:1c:a0:e4:98:fe:7e:69:56:eb:cc:4e:60:2c:90:
2c:4b:de:f8:2a:c6:13:5b:cd:2b:34:9a:7d:38:24:
b8:20:15:d5:e8:d6:57:16:cf:6d:b0:da:37:4f:3f:
3e:ed:e8:b0:be:4d:10:4e:39:80:58:5e:e1:ff:2e:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DB:68:9E:1E:C8:81:68:84:B1:29:1F:20:78:52:84:FF:EC:AF:F4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146014.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad24::/32
Signature Algorithm: sha256WithRSAEncryption
71:f6:08:70:b7:f4:26:08:81:ca:4b:0d:f6:77:8c:e3:1f:09:
29:0b:08:cd:3e:67:1b:72:3b:38:c3:ff:73:0a:45:9c:8e:ba:
b4:0e:09:e6:8c:55:44:45:ab:0a:e2:a4:68:c9:a5:c2:0e:dc:
73:bc:61:0d:e9:22:27:1c:fd:ab:56:02:92:0b:fd:d2:58:89:
7b:4b:1c:4d:c9:a1:42:62:bf:f9:12:30:48:2f:88:3f:ba:cb:
eb:f4:fe:06:e4:ea:9d:3a:c4:f2:1d:b0:d4:10:77:59:2f:e7:
c0:7f:17:5a:6e:83:fe:1d:88:09:ee:84:4e:d9:e7:53:3d:06:
1d:5f:36:6c:0a:64:a9:bf:8e:0f:b3:10:96:bf:a5:ad:40:47:
52:40:b1:60:16:20:dc:87:17:0f:e6:ac:eb:a6:42:9f:0b:18:
a4:b7:c5:24:ec:cd:7a:05:67:46:73:ad:b9:2f:c5:e7:67:0b:
1f:f9:35:04:8e:ac:96:9d:fa:68:e2:25:15:34:10:26:34:7f:
f9:31:a6:72:39:71:27:ec:9c:9b:2b:11:2f:40:de:c5:2e:ad:
a8:dc:58:b2:92:40:43:bc:4d:fb:e5:70:74:64:ee:0d:60:24:
b9:23:49:d4:55:e4:25:cd:26:cc:d0:b1:50:b9:b8:c6:de:60:
7c:01:58:53
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFlIW0230jfSKuxBLkkRYsltX3YwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MDRaFw0yNzA1MjQwMTUxMDRaMDMxMTAvBgNV
BAMTKDNCREI2ODlFMUVDODgxNjg4NEIxMjkxRjIwNzg1Mjg0RkZFQ0FGRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEII4KmDGB8PmLBQVjV9kXxWma
d7Qxn7PkDkR7XD+k9yhlMjFyWP360Rw9tF+lko9Y+3eMISPUverhe+Az4Evppbde
2cYMxwD8MxTlXuixwxvyLFRc4Sgoc4E1FojTvxAE9fUi/2ZAQvMR/ADlfIWitLkx
Pr3UVLA2ewKUNIbGKNm09PCS1aIGGb3Bn0ENuchorhak+5FFkO16YyGZIL3f6Phf
ovsntt92EKFoBRuLspJjIxxo0r0p8QHzbzgapbGDRjUcoOSY/n5pVuvMTmAskCxL
3vgqxhNbzSs0mn04JLggFdXo1lcWz22w2jdPPz7t6LC+TRBOOYBYXuH/LjxVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUO9tonh7IgWiEsSkfIHhShP/sr/QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtJDANBgkqhkiG9w0BAQsFAAOCAQEAcfYI
cLf0JgiByksN9neM4x8JKQsIzT5nG3I7OMP/cwpFnI66tA4J5oxVREWrCuKkaMml
wg7cc7xhDekiJxz9q1YCkgv90liJe0scTcmhQmK/+RIwSC+IP7rL6/T+BuTqnTrE
8h2w1BB3WS/nwH8XWm6D/h2ICe6ETtnnUz0GHV82bApkqb+OD7MQlr+lrUBHUkCx
YBYg3IcXD+as66ZCnwsYpLfFJOzNegVnRnOtuS/F52cLH/k1BI6slp36aOIlFTQQ
JjR/+TGmcjlxJ+ycmysRL0DexS6tqNxYspJAQ7xN++VwdGTuDWAkuSNJ1FXkJc0m
zNCxULm4xt5gfAFYUw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:53 2026 by rpki-client