Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146059.roa
File: AS146059.roa (raw, json)
Hash identifier: Cyg4RxFNgH8PYZ8oEBZOUvFgH7SxdiXahEaCMLTRj5U=
Subject key identifier: 82:ED:53:DC:10:92:7E:D3:98:E1:22:85:5F:28:1C:AE:C6:17:CB:44
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 55732BFC45F8A238569E054F2C20EAFEF2D6CFDB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146059.roa
Signing time: Fri 22 May 2026 07:32:10 +0000
ROA not before: Fri 22 May 2026 07:27:10 +0000
ROA not after: Fri 21 May 2027 07:32:10 +0000
asID: 146059
IP address blocks: 240a:ad51::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:73:2b:fc:45:f8:a2:38:56:9e:05:4f:2c:20:ea:fe:f2:d6:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:10 2026 GMT
Not After : May 21 07:32:10 2027 GMT
Subject: CN=82ED53DC10927ED398E122855F281CAEC617CB44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:1f:eb:22:40:01:12:58:dc:32:17:53:64:
75:60:6b:97:d0:a9:bb:88:d0:01:97:9a:f2:cf:e9:
7e:0b:43:af:45:23:e2:eb:9c:f9:54:72:fb:7a:0e:
f2:3e:55:56:34:2b:c6:fd:4b:15:6e:3f:f3:55:8e:
59:1a:5a:85:a5:75:0a:0c:ae:40:92:0a:3b:dd:bb:
48:1f:84:1a:e4:e9:5e:5f:01:4f:2d:7f:4a:0d:89:
16:92:f4:ff:86:3f:8f:17:96:78:5c:c2:f1:42:e6:
11:70:72:92:61:8b:9a:e6:ca:68:38:a4:2e:cd:5e:
9c:cb:9c:48:36:26:dd:6d:b2:93:53:f5:7a:84:34:
2c:69:c2:ff:57:c2:c1:28:2c:b4:00:6e:ec:84:e8:
fd:59:e0:e7:f1:5b:b2:6b:6b:90:86:c1:8f:8b:93:
96:b6:13:4c:8f:20:40:1e:8e:92:c2:ba:5f:a9:85:
4f:47:d2:3a:c3:56:df:34:ba:cd:53:bf:e2:da:58:
f0:c9:61:cc:c5:7a:cd:14:e0:c9:29:19:82:e4:66:
5d:31:ae:20:cf:53:34:39:90:ac:7e:ee:ef:eb:68:
d4:71:a4:48:e6:78:ee:41:e3:9b:d4:a4:93:c7:20:
f2:84:97:aa:a2:47:96:64:8f:d8:80:4b:d3:e9:33:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:ED:53:DC:10:92:7E:D3:98:E1:22:85:5F:28:1C:AE:C6:17:CB:44
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad51::/32
Signature Algorithm: sha256WithRSAEncryption
58:1d:fe:7a:57:05:e2:7c:5c:bd:14:b9:76:7d:ae:e7:a8:78:
41:12:fd:b6:5e:82:aa:87:88:be:fb:f7:e8:eb:ba:1f:23:be:
0b:87:36:43:ea:0c:42:ac:6d:01:5a:81:83:02:ca:bc:d6:9e:
49:d4:07:ce:02:3c:df:7d:cf:d9:d3:fc:14:cb:d4:f6:d6:1d:
fc:d4:26:33:8d:29:86:64:42:69:b4:be:25:0b:61:e2:1b:d4:
11:3f:2c:2e:37:4b:0e:c6:81:f0:1a:55:bd:49:a0:17:13:40:
d7:51:08:b6:43:1c:b4:bd:1d:c3:c7:20:ac:45:63:1a:f8:fc:
e6:92:88:e2:27:8d:7c:26:33:0f:6d:9a:96:32:d2:cf:54:b6:
5f:e5:d9:47:fd:10:7e:32:10:7a:f3:30:cc:07:41:2c:51:b8:
21:67:d8:29:d7:f7:77:9b:68:cd:8f:4a:80:1a:a4:a1:a0:f5:
30:f0:92:d4:7b:b4:83:6b:59:36:51:e5:51:73:e5:03:ef:39:
66:c7:51:54:6f:c5:72:57:38:8e:91:78:69:43:15:82:27:3c:
67:dd:01:1d:d5:9e:5a:75:5c:e3:19:96:53:f8:6b:8d:9d:f9:
20:7c:3c:65:12:75:24:0d:83:81:d8:b8:47:44:eb:c9:40:b1:
5a:24:89:cb
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVXMr/EX4ojhWngVPLCDq/vLWz9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MTBaFw0yNzA1MjEwNzMyMTBaMDMxMTAvBgNV
BAMTKDgyRUQ1M0RDMTA5MjdFRDM5OEUxMjI4NTVGMjgxQ0FFQzYxN0NCNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm9x/rIkABEljcMhdTZHVga5fQ
qbuI0AGXmvLP6X4LQ69FI+LrnPlUcvt6DvI+VVY0K8b9SxVuP/NVjlkaWoWldQoM
rkCSCjvdu0gfhBrk6V5fAU8tf0oNiRaS9P+GP48XlnhcwvFC5hFwcpJhi5rmymg4
pC7NXpzLnEg2Jt1tspNT9XqENCxpwv9XwsEoLLQAbuyE6P1Z4OfxW7Jra5CGwY+L
k5a2E0yPIEAejpLCul+phU9H0jrDVt80us1Tv+LaWPDJYczFes0U4MkpGYLkZl0x
riDPUzQ5kKx+7u/raNRxpEjmeO5B45vUpJPHIPKEl6qiR5Zkj9iAS9PpMxvRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUgu1T3BCSftOY4SKFXygcrsYXy0QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MDU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtUTANBgkqhkiG9w0BAQsFAAOCAQEAWB3+
elcF4nxcvRS5dn2u56h4QRL9tl6CqoeIvvv36Ou6HyO+C4c2Q+oMQqxtAVqBgwLK
vNaeSdQHzgI8333P2dP8FMvU9tYd/NQmM40phmRCabS+JQth4hvUET8sLjdLDsaB
8BpVvUmgFxNA11EItkMctL0dw8cgrEVjGvj85pKI4ieNfCYzD22aljLSz1S2X+XZ
R/0QfjIQevMwzAdBLFG4IWfYKdf3d5tozY9KgBqkoaD1MPCS1Hu0g2tZNlHlUXPl
A+85ZsdRVG/Fclc4jpF4aUMVgic8Z90BHdWeWnVc4xmWU/hrjZ35IHw8ZRJ1JA2D
gdi4R0TryUCxWiSJyw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:40 2026 by rpki-client