Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146138.roa
File: AS146138.roa (raw, json)
Hash identifier: Y59ylT3hDTESYHQFlBk/GNRLU1mqSIG1Dtg0NF2OEL0=
Subject key identifier: 0C:D0:F8:8A:71:0E:2C:1C:F9:6B:BE:CD:0D:8B:38:A2:6F:F2:92:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43FD34074DDE7E121623F8746800C5DDFEA03613
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146138.roa
Signing time: Fri 22 May 2026 01:50:23 +0000
ROA not before: Fri 22 May 2026 01:45:23 +0000
ROA not after: Fri 21 May 2027 01:50:23 +0000
asID: 146138
IP address blocks: 240a:ada0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:fd:34:07:4d:de:7e:12:16:23:f8:74:68:00:c5:dd:fe:a0:36:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:23 2026 GMT
Not After : May 21 01:50:23 2027 GMT
Subject: CN=0CD0F88A710E2C1CF96BBECD0D8B38A26FF292C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:4d:92:ce:61:d1:4c:e6:2e:1a:56:ae:5f:
b2:93:1c:3d:af:53:49:e6:66:85:97:60:2f:1a:13:
f8:27:a9:60:29:3f:78:ca:4f:b4:0e:57:9e:cb:65:
20:cc:3a:c5:36:3e:7d:a6:aa:31:d8:22:1f:f4:57:
6f:78:d1:04:56:8c:42:68:ba:43:ab:4a:5a:f9:a6:
5b:45:23:d8:86:9f:9f:3d:f9:e3:fd:5c:e5:b3:a0:
08:ef:74:3c:e4:28:f9:dd:57:6b:c0:4e:62:11:8b:
e8:70:d7:ca:48:22:37:26:e2:69:51:f9:1c:ce:7e:
80:15:16:0a:0c:29:75:2d:cd:aa:b3:e8:69:05:88:
fc:37:14:5e:bf:f8:c8:34:15:25:24:13:84:d3:e3:
7b:c2:b5:a2:62:e3:e6:b9:a8:51:82:3c:86:f3:c4:
4c:5a:5e:4e:6a:c4:38:90:65:0d:2b:0b:2b:88:52:
d9:fb:3d:2d:b8:55:35:2c:f3:9d:44:75:93:d6:6a:
bf:77:5c:0c:ef:a9:ce:8c:5f:ea:62:50:4e:e6:3b:
0f:57:9a:fd:95:62:7f:50:3e:27:32:69:e4:6b:92:
12:a2:f2:7f:72:e3:59:2f:1c:e7:3b:e3:e9:44:b2:
c6:a4:62:c5:cc:48:ce:3d:32:13:b8:88:9c:5b:56:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:F8:8A:71:0E:2C:1C:F9:6B:BE:CD:0D:8B:38:A2:6F:F2:92:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ada0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:fc:48:e9:f3:b1:a0:f0:70:8a:1a:3c:89:5f:21:9a:2d:70:
bf:45:4d:fd:97:37:ef:30:da:2b:82:c8:5d:ca:c7:23:5d:01:
4d:28:04:f0:37:c5:96:aa:bb:2f:a5:1f:2f:b5:90:83:71:38:
e1:48:9b:34:9c:e3:2b:f3:53:b5:99:e5:b8:1b:62:87:a8:1c:
2e:00:4a:0e:b1:05:c0:bb:72:6a:cd:77:50:ab:fe:76:83:7d:
a2:c6:22:aa:33:24:2d:9f:64:66:c5:de:b4:47:30:1f:36:46:
96:f5:94:dc:85:d7:81:eb:d6:ec:2e:df:a5:2d:38:6a:cf:53:
ba:00:50:c4:fb:f9:2d:02:02:ea:cf:e5:93:f4:b4:c0:ce:68:
70:13:f1:21:c8:ba:3e:b7:18:dc:c0:ec:b9:36:b3:00:8c:7c:
c0:af:4f:3c:28:39:dc:4e:d9:4b:2d:17:f2:37:72:7b:b9:c0:
35:b0:48:94:21:73:c8:dc:f6:e9:4a:98:34:a7:3f:bb:ad:00:
ae:b9:51:71:e5:a7:fb:22:60:af:6f:0b:aa:25:0f:00:42:a8:
9d:43:37:0b:32:87:65:ed:a0:0c:6b:37:d6:3a:65:3e:6d:88:
98:de:52:f7:34:b5:43:89:0d:86:6a:39:da:22:4b:85:af:74:
2e:8d:f0:ac
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQ/00B03efhIWI/h0aADF3f6gNhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MjNaFw0yNzA1MjEwMTUwMjNaMDMxMTAvBgNV
BAMTKDBDRDBGODhBNzEwRTJDMUNGOTZCQkVDRDBEOEIzOEEyNkZGMjkyQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeSE2SzmHRTOYuGlauX7KTHD2v
U0nmZoWXYC8aE/gnqWApP3jKT7QOV57LZSDMOsU2Pn2mqjHYIh/0V2940QRWjEJo
ukOrSlr5pltFI9iGn589+eP9XOWzoAjvdDzkKPndV2vATmIRi+hw18pIIjcm4mlR
+RzOfoAVFgoMKXUtzaqz6GkFiPw3FF6/+Mg0FSUkE4TT43vCtaJi4+a5qFGCPIbz
xExaXk5qxDiQZQ0rCyuIUtn7PS24VTUs851EdZPWar93XAzvqc6MX+piUE7mOw9X
mv2VYn9QPicyaeRrkhKi8n9y41kvHOc74+lEssakYsXMSM49MhO4iJxbVm/JAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUDND4inEOLBz5a77NDYs4om/yksgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtoDANBgkqhkiG9w0BAQsFAAOCAQEAC/xI
6fOxoPBwiho8iV8hmi1wv0VN/Zc37zDaK4LIXcrHI10BTSgE8DfFlqq7L6UfL7WQ
g3E44UibNJzjK/NTtZnluBtih6gcLgBKDrEFwLtyas13UKv+doN9osYiqjMkLZ9k
ZsXetEcwHzZGlvWU3IXXgevW7C7fpS04as9TugBQxPv5LQIC6s/lk/S0wM5ocBPx
Ici6PrcY3MDsuTazAIx8wK9PPCg53E7ZSy0X8jdye7nANbBIlCFzyNz26UqYNKc/
u60ArrlRceWn+yJgr28LqiUPAEKonUM3CzKHZe2gDGs31jplPm2ImN5S9zS1Q4kN
hmo52iJLha90Lo3wrA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:55 2026 by rpki-client