Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146039.roa
File: AS146039.roa (raw, json)
Hash identifier: kuXYGRDrZ0ulmGKtIu8P+78mOBSlUeDgt06xWyBgu40=
Subject key identifier: 5C:5B:90:D7:A8:6A:1C:E3:F5:BB:E7:27:23:50:C5:7C:1C:75:02:EA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 239CFC6E16A0CFF65F0A088E1A83F75FBB70683E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146039.roa
Signing time: Mon 25 May 2026 02:22:45 +0000
ROA not before: Mon 25 May 2026 02:17:45 +0000
ROA not after: Mon 24 May 2027 02:22:45 +0000
asID: 146039
IP address blocks: 240a:ad3d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9c:fc:6e:16:a0:cf:f6:5f:0a:08:8e:1a:83:f7:5f:bb:70:68:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:45 2026 GMT
Not After : May 24 02:22:45 2027 GMT
Subject: CN=5C5B90D7A86A1CE3F5BBE7272350C57C1C7502EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:cd:93:b7:60:c9:c6:83:bc:5f:fc:82:79:
39:70:8e:54:6e:8f:12:fc:62:3a:78:2e:b2:0e:9c:
5b:db:3b:ef:52:99:dc:10:c1:99:b8:ee:02:64:4c:
94:e9:da:d1:6e:5c:cc:e0:7e:30:de:2b:9f:37:b1:
1b:91:e0:70:14:75:8d:fe:1a:14:66:be:f7:a5:e8:
19:02:6a:50:83:da:bc:49:21:16:e5:97:b9:8d:b5:
bf:25:02:fd:7b:58:0e:fd:15:e5:cf:f3:2f:c9:14:
8b:3c:48:79:df:99:f5:b1:db:c8:6d:a4:73:7c:a8:
7d:66:31:2d:38:22:4e:1b:4b:95:fa:47:8e:95:b0:
35:74:e3:c3:05:a2:0d:e6:98:cc:31:62:f4:a2:29:
be:04:ea:1f:f5:ae:0c:af:72:3c:ba:d9:12:70:4a:
58:22:d0:19:1f:1d:dc:69:e2:a1:6f:7a:88:40:e6:
f5:1b:eb:1f:10:a4:fb:a5:6c:1f:32:10:73:38:23:
28:a2:3c:71:d8:9b:62:2a:e2:70:44:c4:d6:50:fe:
03:7a:4a:47:68:24:0d:37:ce:01:2a:a9:1f:1a:20:
3d:66:50:da:56:b0:b4:d3:87:de:54:11:88:b3:60:
fe:05:69:90:51:b6:0d:1e:b1:d2:36:f1:93:0f:12:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:90:D7:A8:6A:1C:E3:F5:BB:E7:27:23:50:C5:7C:1C:75:02:EA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad3d::/32
Signature Algorithm: sha256WithRSAEncryption
6f:bf:73:e1:94:05:5d:9a:e5:f5:da:b3:42:23:53:07:37:e1:
b3:60:52:3b:1e:7f:3b:f7:f2:b6:b4:3b:11:ff:fc:dc:be:2b:
48:89:dc:19:69:14:16:95:77:67:9a:d4:89:2b:30:81:97:2d:
1e:94:91:46:a1:f9:83:14:ea:b2:4c:be:82:8e:c7:08:78:e7:
23:54:13:32:17:a6:92:34:a8:d5:dc:ec:20:2e:49:a5:55:80:
76:2a:a1:79:36:e9:b8:20:e4:3a:21:33:71:22:ec:23:ea:4c:
83:90:04:a2:fb:46:0d:7e:d7:03:de:08:e5:d1:b9:ce:52:86:
c1:fc:fd:65:3c:b9:15:ba:06:84:a0:6a:a4:a0:b9:71:e5:0f:
83:70:b4:81:ef:c8:df:c2:86:52:53:54:1b:eb:ed:1b:26:05:
99:7b:ef:d6:5a:4f:d8:93:cb:c3:00:5b:11:e4:bd:db:0d:65:
a7:1f:05:ee:9c:4c:d7:53:11:dc:6f:b8:6e:7d:1f:b8:2e:08:
8f:df:63:d2:98:b1:95:f9:f7:50:94:cf:a1:e9:9c:fb:82:9a:
fb:1c:e3:cc:aa:95:7e:a0:1c:6a:87:50:74:7a:72:1b:ba:d4:
14:b9:35:ff:20:f6:0d:ce:81:6d:4c:c8:09:8e:d4:75:67:3d:
6d:9f:19:d7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUI5z8bhagz/ZfCgiOGoP3X7twaD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3NDVaFw0yNzA1MjQwMjIyNDVaMDMxMTAvBgNV
BAMTKDVDNUI5MEQ3QTg2QTFDRTNGNUJCRTcyNzIzNTBDNTdDMUM3NTAyRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu7M2Tt2DJxoO8X/yCeTlwjlRu
jxL8Yjp4LrIOnFvbO+9SmdwQwZm47gJkTJTp2tFuXMzgfjDeK583sRuR4HAUdY3+
GhRmvvel6BkCalCD2rxJIRbll7mNtb8lAv17WA79FeXP8y/JFIs8SHnfmfWx28ht
pHN8qH1mMS04Ik4bS5X6R46VsDV048MFog3mmMwxYvSiKb4E6h/1rgyvcjy62RJw
Slgi0BkfHdxp4qFveohA5vUb6x8QpPulbB8yEHM4IyiiPHHYm2Iq4nBExNZQ/gN6
SkdoJA03zgEqqR8aID1mUNpWsLTTh95UEYizYP4FaZBRtg0esdI28ZMPEiOvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUXFuQ16hqHOP1u+cnI1DFfBx1AuowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtPTANBgkqhkiG9w0BAQsFAAOCAQEAb79z
4ZQFXZrl9dqzQiNTBzfhs2BSOx5/O/fytrQ7Ef/83L4rSIncGWkUFpV3Z5rUiSsw
gZctHpSRRqH5gxTqsky+go7HCHjnI1QTMhemkjSo1dzsIC5JpVWAdiqheTbpuCDk
OiEzcSLsI+pMg5AEovtGDX7XA94I5dG5zlKGwfz9ZTy5FboGhKBqpKC5ceUPg3C0
ge/I38KGUlNUG+vtGyYFmXvv1lpP2JPLwwBbEeS92w1lpx8F7pxM11MR3G+4bn0f
uC4Ij99j0pixlfn3UJTPoemc+4Ka+xzjzKqVfqAcaodQdHpyG7rUFLk1/yD2Dc6B
bUzICY7UdWc9bZ8Z1w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:16 2026 by rpki-client