Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146140.roa
File: AS146140.roa (raw, json)
Hash identifier: f3NA44Y/FkeOTj5boHsNoM+pIRJHmCPnzk/iSP47oeo=
Subject key identifier: A4:F7:19:44:01:48:E7:6F:7F:A8:F3:04:FA:8D:E3:79:3A:2F:88:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5173785FAEE3F1DF0CEE0E4A1E4D9D6A2DBD3525
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146140.roa
Signing time: Mon 25 May 2026 06:48:44 +0000
ROA not before: Mon 25 May 2026 06:43:44 +0000
ROA not after: Mon 24 May 2027 06:48:44 +0000
asID: 146140
IP address blocks: 240a:ada2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:73:78:5f:ae:e3:f1:df:0c:ee:0e:4a:1e:4d:9d:6a:2d:bd:35:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:44 2026 GMT
Not After : May 24 06:48:44 2027 GMT
Subject: CN=A4F719440148E76F7FA8F304FA8DE3793A2F8836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1a:42:3e:96:68:8d:06:d7:9a:30:50:7a:66:
9b:97:d7:40:d4:d9:62:fb:7d:44:82:fa:0b:4f:9f:
dd:e2:16:20:cc:3e:47:96:fc:ed:19:10:2a:90:44:
bf:8e:92:72:a9:0d:b6:04:6d:9d:ec:dc:bc:19:50:
dd:50:12:7e:d0:dc:24:62:21:75:e6:8e:04:b4:fe:
0b:68:e6:11:d6:97:cc:7b:3e:0f:a6:7f:e2:df:84:
40:18:7c:ab:59:85:5e:6b:ef:fc:32:7a:b6:05:31:
f3:92:58:32:f7:bb:ef:2c:97:a9:0f:0d:60:83:aa:
af:0c:79:2f:55:80:de:88:ec:7f:15:85:83:da:75:
a4:a5:19:20:f8:a3:c6:ca:55:0e:ec:8e:14:0e:df:
d2:a0:91:4d:c0:55:1e:2c:c1:0f:a6:97:ff:fe:cb:
cf:eb:fb:cd:02:6a:d6:0d:67:21:58:d0:fd:71:81:
bf:c5:7a:5d:89:bb:ea:9c:6b:d4:8f:f5:32:47:c3:
fe:9b:24:73:55:78:0f:ee:de:5e:5e:6f:e0:c0:e7:
83:26:de:c6:af:95:b7:db:9b:5a:07:54:3d:40:f1:
93:5a:ff:7c:41:f9:e4:e5:82:ac:19:ea:02:d1:47:
a8:e0:dd:b2:cc:8e:25:75:c4:e3:de:3c:8e:f7:9c:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F7:19:44:01:48:E7:6F:7F:A8:F3:04:FA:8D:E3:79:3A:2F:88:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146140.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ada2::/32
Signature Algorithm: sha256WithRSAEncryption
43:ab:b3:75:3a:aa:6c:7a:0e:60:42:30:4e:3d:50:07:09:f7:
5b:56:1e:e9:02:ae:17:1b:e0:06:a9:33:5e:45:45:f2:44:c8:
da:db:cb:e8:16:b6:d0:5f:04:d6:39:e4:88:04:6c:b7:2a:ee:
f4:e5:93:93:53:0d:42:16:8f:2b:5f:6b:3d:94:a1:95:aa:93:
30:88:b0:9d:72:3d:7a:60:ef:ed:f3:73:b8:3d:4b:0b:da:7b:
2c:e4:8c:7c:ff:87:eb:05:8e:82:9d:82:6e:6c:f0:0b:2d:7f:
45:5b:a4:01:97:fe:da:be:24:44:83:59:58:5c:49:29:56:4c:
34:a2:74:9c:9b:7b:73:cc:1e:c6:80:5c:dc:4a:d6:2e:00:7a:
6f:7b:78:3b:85:ce:d3:81:6e:6e:f6:65:09:8b:53:41:79:ab:
05:8e:91:5a:b5:20:22:48:37:a2:6e:e7:2b:e6:4f:58:06:b0:
e8:9f:3d:7a:c9:f5:50:d1:cb:9c:b8:16:75:13:99:71:a7:2b:
1b:ad:97:84:cc:7f:a6:22:d3:df:fb:eb:da:dc:29:da:8f:0c:
2c:24:07:8c:3b:df:0f:33:87:ee:db:4a:34:28:bf:1e:d8:ac:
9e:cd:53:37:88:c5:6f:eb:e6:b6:97:d1:ea:c2:5c:64:73:62:
c1:2d:af:f9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUXN4X67j8d8M7g5KHk2dai29NSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNDRaFw0yNzA1MjQwNjQ4NDRaMDMxMTAvBgNV
BAMTKEE0RjcxOTQ0MDE0OEU3NkY3RkE4RjMwNEZBOERFMzc5M0EyRjg4MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjGkI+lmiNBteaMFB6ZpuX10DU
2WL7fUSC+gtPn93iFiDMPkeW/O0ZECqQRL+OknKpDbYEbZ3s3LwZUN1QEn7Q3CRi
IXXmjgS0/gto5hHWl8x7Pg+mf+LfhEAYfKtZhV5r7/wyerYFMfOSWDL3u+8sl6kP
DWCDqq8MeS9VgN6I7H8VhYPadaSlGSD4o8bKVQ7sjhQO39KgkU3AVR4swQ+ml//+
y8/r+80CatYNZyFY0P1xgb/Fel2Ju+qca9SP9TJHw/6bJHNVeA/u3l5eb+DA54Mm
3savlbfbm1oHVD1A8ZNa/3xB+eTlgqwZ6gLRR6jg3bLMjiV1xOPePI73nMNHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUpPcZRAFI529/qPME+o3jeToviDYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtojANBgkqhkiG9w0BAQsFAAOCAQEAQ6uz
dTqqbHoOYEIwTj1QBwn3W1Ye6QKuFxvgBqkzXkVF8kTI2tvL6Ba20F8E1jnkiARs
tyru9OWTk1MNQhaPK19rPZShlaqTMIiwnXI9emDv7fNzuD1LC9p7LOSMfP+H6wWO
gp2CbmzwCy1/RVukAZf+2r4kRINZWFxJKVZMNKJ0nJt7c8wexoBc3ErWLgB6b3t4
O4XO04FubvZlCYtTQXmrBY6RWrUgIkg3om7nK+ZPWAaw6J89esn1UNHLnLgWdROZ
cacrG62XhMx/piLT3/vr2twp2o8MLCQHjDvfDzOH7ttKNCi/Htisns1TN4jFb+vm
tpfR6sJcZHNiwS2v+Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:47 2026 by rpki-client