Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146153.roa
File: AS146153.roa (raw, json)
Hash identifier: iSKhdWt5V+SVoLq/AeIR1vayOX9IeWKF/h9C7Slz4d4=
Subject key identifier: 9F:34:9C:52:79:4D:44:32:C9:40:D4:AF:E1:A5:10:E0:24:5C:BA:4E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 688B2DB4701F82C3C2185ACB40734FA003F9D79C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146153.roa
Signing time: Tue 26 May 2026 02:35:15 +0000
ROA not before: Tue 26 May 2026 02:30:15 +0000
ROA not after: Tue 25 May 2027 02:35:15 +0000
asID: 146153
IP address blocks: 240a:adaf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8b:2d:b4:70:1f:82:c3:c2:18:5a:cb:40:73:4f:a0:03:f9:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:15 2026 GMT
Not After : May 25 02:35:15 2027 GMT
Subject: CN=9F349C52794D4432C940D4AFE1A510E0245CBA4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:9d:d9:b9:6a:9e:e4:67:f4:57:99:3a:66:
01:d1:8a:45:64:7d:b5:19:cb:a4:bd:02:9f:03:b4:
54:48:31:ca:1a:1d:ce:34:8e:28:61:43:db:f6:d4:
97:dd:8e:f3:6f:cc:07:89:b5:be:b7:fb:8d:3a:16:
af:b1:b1:e4:c9:76:01:0f:36:2f:90:a8:38:55:16:
44:22:e9:f9:02:ac:4d:aa:e0:4e:c4:f5:9c:d5:eb:
5b:9e:65:6b:86:43:c3:13:f7:6d:2e:1d:f0:54:9a:
48:28:fc:29:98:a9:cc:63:ab:36:4c:5c:ef:d6:21:
f2:f7:0d:f3:87:82:8c:37:39:fd:ad:8b:49:6b:f4:
1e:cc:76:22:76:a1:92:ea:58:38:0f:63:86:b2:21:
9a:97:af:b1:b1:6c:d4:f8:53:c5:83:bc:d5:fb:5e:
2c:a4:dd:f5:e5:68:24:cd:bd:e3:4a:92:38:81:b2:
cc:1e:bd:57:d7:3c:4d:53:74:eb:63:1b:26:4d:89:
15:15:53:69:4f:e4:80:42:bc:82:81:42:3b:21:76:
31:e8:49:53:1e:f0:97:5f:e7:82:de:73:f6:46:10:
3c:22:d5:ea:73:51:45:18:f7:07:aa:10:fb:ff:2a:
38:34:3f:97:4e:bf:bc:0d:72:d8:01:41:ec:d1:23:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:34:9C:52:79:4D:44:32:C9:40:D4:AF:E1:A5:10:E0:24:5C:BA:4E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146153.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adaf::/32
Signature Algorithm: sha256WithRSAEncryption
aa:ed:9f:cc:a2:1a:3f:45:f9:62:04:dc:74:b8:72:28:0e:56:
3a:9f:9f:1f:6d:06:cd:10:c9:a2:8c:8b:2a:f3:9c:3e:44:2c:
83:53:1d:d6:21:c8:8d:10:16:8f:a2:69:97:c3:cb:a9:a9:78:
42:22:fc:b1:3b:48:92:af:58:82:e5:7c:bd:e9:a3:db:74:a0:
5b:10:70:b5:57:3f:1d:36:03:81:c5:90:58:06:5a:39:d8:6b:
44:85:c0:ad:aa:63:77:2d:44:17:ee:87:06:b6:85:76:e5:1e:
35:ff:d6:2b:6c:94:d3:d4:8b:fc:0f:e2:ef:37:1f:cb:97:86:
4d:ba:c1:a1:8c:39:f8:d5:39:db:35:b1:e8:7d:67:1a:9c:34:
a4:5f:76:51:3c:e9:50:9c:95:6a:69:21:2f:a5:32:82:bf:39:
52:72:20:3d:c3:d7:aa:bd:98:30:8f:54:17:45:0a:59:80:fd:
3b:84:66:fa:c9:cf:bb:45:7b:82:55:40:87:08:28:bc:29:19:
55:c1:ba:f9:76:05:68:80:8a:69:dd:be:c2:f3:e4:30:79:35:
e1:df:a4:b5:8a:7d:bf:f1:f4:a2:3c:b5:6a:fd:15:d1:03:76:
27:0a:f6:22:ef:e6:02:d6:8b:39:16:4c:1f:b2:b1:3e:36:a3:
c6:4c:8d:b2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaIsttHAfgsPCGFrLQHNPoAP515wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMTVaFw0yNzA1MjUwMjM1MTVaMDMxMTAvBgNV
BAMTKDlGMzQ5QzUyNzk0RDQ0MzJDOTQwRDRBRkUxQTUxMEUwMjQ1Q0JBNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCayp3ZuWqe5Gf0V5k6ZgHRikVk
fbUZy6S9Ap8DtFRIMcoaHc40jihhQ9v21JfdjvNvzAeJtb63+406Fq+xseTJdgEP
Ni+QqDhVFkQi6fkCrE2q4E7E9ZzV61ueZWuGQ8MT920uHfBUmkgo/CmYqcxjqzZM
XO/WIfL3DfOHgow3Of2ti0lr9B7MdiJ2oZLqWDgPY4ayIZqXr7GxbNT4U8WDvNX7
Xiyk3fXlaCTNveNKkjiBsswevVfXPE1TdOtjGyZNiRUVU2lP5IBCvIKBQjshdjHo
SVMe8Jdf54Lec/ZGEDwi1epzUUUY9weqEPv/Kjg0P5dOv7wNctgBQezRI9avAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUnzScUnlNRDLJQNSv4aUQ4CRcuk4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtrzANBgkqhkiG9w0BAQsFAAOCAQEAqu2f
zKIaP0X5YgTcdLhyKA5WOp+fH20GzRDJooyLKvOcPkQsg1Md1iHIjRAWj6Jpl8PL
qal4QiL8sTtIkq9YguV8vemj23SgWxBwtVc/HTYDgcWQWAZaOdhrRIXArapjdy1E
F+6HBraFduUeNf/WK2yU09SL/A/i7zcfy5eGTbrBoYw5+NU52zWx6H1nGpw0pF92
UTzpUJyVamkhL6Uygr85UnIgPcPXqr2YMI9UF0UKWYD9O4Rm+snPu0V7glVAhwgo
vCkZVcG6+XYFaICKad2+wvPkMHk14d+ktYp9v/H0ojy1av0V0QN2Jwr2Iu/mAtaL
ORZMH7KxPjajxkyNsg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:16 2026 by rpki-client