Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146034.roa
File: AS146034.roa (raw, json)
Hash identifier: o/lDYDWDFZ1lX4qTBJght4XUP27DWSQK9PzhQO+OsPo=
Subject key identifier: F5:96:95:17:56:F0:D2:0E:7A:6B:BF:23:9B:63:47:84:40:8F:65:F6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3811F895D43F687030035E975D62B35CE47911D3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146034.roa
Signing time: Mon 25 May 2026 03:19:07 +0000
ROA not before: Mon 25 May 2026 03:14:07 +0000
ROA not after: Mon 24 May 2027 03:19:07 +0000
asID: 146034
IP address blocks: 240a:ad38::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:11:f8:95:d4:3f:68:70:30:03:5e:97:5d:62:b3:5c:e4:79:11:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:07 2026 GMT
Not After : May 24 03:19:07 2027 GMT
Subject: CN=F596951756F0D20E7A6BBF239B634784408F65F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:14:56:1f:fd:7c:81:04:51:2b:e3:47:8c:
47:8a:b0:c2:ce:17:3c:af:ed:a4:66:bd:f0:92:df:
7b:eb:94:a7:b0:b9:d9:3a:df:04:28:11:02:62:93:
e3:70:d1:03:a3:b5:8f:3b:6e:03:f4:eb:3d:fb:01:
e1:f3:b6:97:30:fe:98:0c:0b:4a:2b:34:b3:3f:7d:
02:a2:af:4e:4b:a6:c2:a9:89:26:d7:f2:ca:44:75:
d9:6c:91:95:92:ea:6f:43:f4:5f:2d:f6:a9:e1:ec:
57:e3:70:2a:b1:15:c0:db:1c:aa:ca:bf:5e:61:b7:
72:9c:3e:2d:a7:ad:6c:e7:49:a5:3a:ab:ed:d8:c7:
68:06:66:67:5b:16:1f:6e:41:54:3e:d3:b3:82:ee:
4b:86:02:00:56:c3:ad:51:35:d6:5d:a9:1d:8e:2a:
0f:58:47:a7:a4:a3:90:5c:0b:4e:30:70:e6:4a:24:
9d:a7:82:f3:d4:c9:ba:66:fb:91:6e:ec:dd:2d:29:
23:64:b7:c0:95:62:9d:3a:8f:12:32:7d:c0:c3:8a:
19:94:e4:f2:6f:ba:e8:29:1e:12:90:9e:e6:41:4e:
63:d3:3a:41:c6:ad:ea:4e:ac:bd:0d:ba:ca:df:64:
17:ad:c1:f5:2d:90:54:d2:f1:67:b8:d1:d6:6b:97:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:96:95:17:56:F0:D2:0E:7A:6B:BF:23:9B:63:47:84:40:8F:65:F6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad38::/32
Signature Algorithm: sha256WithRSAEncryption
9e:ef:7f:38:b5:00:ef:36:bd:5f:d7:23:9f:50:ac:c3:4d:ec:
29:d6:2d:87:87:d9:51:b3:12:41:a6:ff:f0:37:e3:20:93:d2:
f3:a5:8b:2b:81:39:01:e2:24:19:0c:96:f3:3a:f2:61:b3:08:
a3:bf:d9:26:ff:c7:6d:b7:c5:9a:93:36:1e:33:59:db:b4:89:
68:4e:51:c2:b6:ac:29:66:57:30:db:dd:30:7e:c8:b1:8d:e9:
d4:86:75:de:17:5f:5b:85:1a:fe:88:66:fe:8d:2b:db:bc:d7:
61:95:8c:52:8f:6f:b3:cf:c9:55:b6:f2:7e:e2:e0:fb:d4:0a:
1f:d8:1c:23:d9:03:6e:b5:d7:e5:69:a9:86:ec:72:a7:e0:b9:
76:b2:d7:cf:7f:43:48:f7:f4:26:56:14:68:0a:a1:e4:e6:16:
fb:38:dd:09:85:f3:87:d2:d3:65:86:34:bc:ef:aa:e2:80:b6:
44:3a:3b:24:d4:d6:52:c5:e8:c9:96:1e:06:8d:b7:b3:1b:59:
f1:bd:ac:67:af:7a:1f:1d:89:e1:8d:28:94:f8:ad:d2:03:8e:
59:c1:5a:33:7c:0d:dc:ba:e4:a9:d3:d3:31:8f:28:34:1d:ea:
2d:b0:27:6f:d0:2f:b7:83:0d:06:bf:91:fc:06:1a:ca:eb:5e:
2c:2c:30:27
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOBH4ldQ/aHAwA16XXWKzXOR5EdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MDdaFw0yNzA1MjQwMzE5MDdaMDMxMTAvBgNV
BAMTKEY1OTY5NTE3NTZGMEQyMEU3QTZCQkYyMzlCNjM0Nzg0NDA4RjY1RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCimRRWH/18gQRRK+NHjEeKsMLO
Fzyv7aRmvfCS33vrlKewudk63wQoEQJik+Nw0QOjtY87bgP06z37AeHztpcw/pgM
C0orNLM/fQKir05LpsKpiSbX8spEddlskZWS6m9D9F8t9qnh7FfjcCqxFcDbHKrK
v15ht3KcPi2nrWznSaU6q+3Yx2gGZmdbFh9uQVQ+07OC7kuGAgBWw61RNdZdqR2O
Kg9YR6eko5BcC04wcOZKJJ2ngvPUybpm+5Fu7N0tKSNkt8CVYp06jxIyfcDDihmU
5PJvuugpHhKQnuZBTmPTOkHGrepOrL0NusrfZBetwfUtkFTS8We40dZrl+NfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9ZaVF1bw0g56a78jm2NHhECPZfYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtODANBgkqhkiG9w0BAQsFAAOCAQEAnu9/
OLUA7za9X9cjn1Csw03sKdYth4fZUbMSQab/8DfjIJPS86WLK4E5AeIkGQyW8zry
YbMIo7/ZJv/HbbfFmpM2HjNZ27SJaE5RwrasKWZXMNvdMH7IsY3p1IZ13hdfW4Ua
/ohm/o0r27zXYZWMUo9vs8/JVbbyfuLg+9QKH9gcI9kDbrXX5Wmphuxyp+C5drLX
z39DSPf0JlYUaAqh5OYW+zjdCYXzh9LTZYY0vO+q4oC2RDo7JNTWUsXoyZYeBo23
sxtZ8b2sZ696Hx2J4Y0olPit0gOOWcFaM3wN3LrkqdPTMY8oNB3qLbAnb9Avt4MN
Br+R/AYayuteLCwwJw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:53 2026 by rpki-client