Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146170.roa
File: AS146170.roa (raw, json)
Hash identifier: U3RnngIsYE+YH9q+7RM78CtD2XnOqOKLQtKaiZz7YG0=
Subject key identifier: BF:B6:C4:48:A3:08:D7:5D:C4:3A:AC:40:0C:81:AA:33:D7:51:33:1F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E523721BF2ED3156E18C07DE69C9BC373BF0737
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146170.roa
Signing time: Tue 26 May 2026 01:13:01 +0000
ROA not before: Tue 26 May 2026 01:08:01 +0000
ROA not after: Tue 25 May 2027 01:13:01 +0000
asID: 146170
IP address blocks: 240a:adc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:52:37:21:bf:2e:d3:15:6e:18:c0:7d:e6:9c:9b:c3:73:bf:07:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:01 2026 GMT
Not After : May 25 01:13:01 2027 GMT
Subject: CN=BFB6C448A308D75DC43AAC400C81AA33D751331F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:49:f4:68:56:33:7a:4a:78:63:29:b4:9d:
76:f0:61:c0:5e:9a:b7:9a:1d:b4:7b:b0:10:a3:21:
e5:e2:97:13:fe:f0:26:f0:cc:38:8f:61:f9:21:f1:
89:3f:41:b9:ba:95:09:39:d7:49:a5:d0:b8:94:63:
29:ea:d3:f0:3c:b9:5c:cf:dd:68:49:3c:3e:66:84:
2f:c1:9c:f7:3e:c1:43:06:d1:d3:dd:08:e7:a2:a9:
c9:4a:9a:aa:25:45:73:d9:2b:07:c5:11:ad:ce:e9:
a8:53:2c:9f:a9:7c:5d:2b:1f:53:36:97:f5:89:fc:
a1:9d:9f:9a:17:e2:a8:89:f3:de:bc:fc:15:10:42:
b2:47:60:a2:67:ea:b9:f3:fe:b3:a8:e4:c7:80:13:
49:7d:0f:f6:3c:0b:9a:72:a9:ff:ab:1b:85:18:61:
a1:3c:a2:2c:43:38:d8:0d:c9:5b:df:91:f3:7e:e1:
1b:ca:ef:47:62:eb:aa:5c:8a:1d:d6:57:f2:68:8d:
38:d0:10:65:10:16:d7:46:c0:14:fb:a6:b2:43:76:
15:44:84:85:c0:49:bd:16:56:66:10:6f:f0:d3:45:
86:14:bd:e2:36:3e:5d:0f:dc:db:c6:0a:62:27:c6:
b8:9b:24:2e:d6:53:85:a5:4b:60:1b:d0:01:32:79:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:C4:48:A3:08:D7:5D:C4:3A:AC:40:0C:81:AA:33:D7:51:33:1F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146170.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adc0::/32
Signature Algorithm: sha256WithRSAEncryption
72:c1:56:7e:3c:bf:ec:de:71:72:16:07:a5:2e:52:81:78:01:
37:1b:26:9c:00:83:87:57:dd:e3:57:b8:f6:45:28:62:ae:00:
cd:a0:08:52:ce:3e:80:23:75:3d:f6:a1:ee:c4:91:8c:b6:02:
fe:76:0a:6d:3f:8e:56:e3:b2:d9:07:fe:09:6a:c0:b1:5f:43:
c4:22:a6:2e:24:cb:7f:c0:fa:0e:5b:1d:b8:54:10:1e:1c:ce:
88:8b:cd:11:85:4e:a8:7e:77:66:fa:e1:3a:40:91:8a:f3:f2:
4f:ad:19:4b:e5:98:86:d5:e1:ee:d4:f6:5e:a1:f0:c6:87:aa:
3e:ad:42:b6:30:3e:11:d2:c4:dd:39:90:16:36:d6:b8:d7:f6:
fe:ab:4e:15:af:c9:e1:fe:09:f9:8a:cf:09:4f:07:ce:22:d1:
a6:43:2b:22:9f:eb:24:41:77:cf:75:6a:e8:b3:51:a8:7c:a4:
2d:41:be:4c:e4:68:e3:b1:bc:ec:71:a6:71:4a:0a:4f:0d:a9:
58:f3:cc:bb:0c:4e:1b:8e:40:3c:e4:bf:0e:50:e0:0c:51:8e:
bb:4f:08:da:e8:d7:ca:d8:e9:a8:9f:33:ab:7c:b8:cf:f1:f4:
08:e0:c4:60:2a:45:fb:55:4e:51:08:09:8b:75:12:1a:12:23:
56:b7:d0:0e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUflI3Ib8u0xVuGMB95pybw3O/BzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MDFaFw0yNzA1MjUwMTEzMDFaMDMxMTAvBgNV
BAMTKEJGQjZDNDQ4QTMwOEQ3NURDNDNBQUM0MDBDODFBQTMzRDc1MTMzMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqo0n0aFYzekp4Yym0nXbwYcBe
mreaHbR7sBCjIeXilxP+8CbwzDiPYfkh8Yk/Qbm6lQk510ml0LiUYynq0/A8uVzP
3WhJPD5mhC/BnPc+wUMG0dPdCOeiqclKmqolRXPZKwfFEa3O6ahTLJ+pfF0rH1M2
l/WJ/KGdn5oX4qiJ8968/BUQQrJHYKJn6rnz/rOo5MeAE0l9D/Y8C5pyqf+rG4UY
YaE8oixDONgNyVvfkfN+4RvK70di66pcih3WV/JojTjQEGUQFtdGwBT7prJDdhVE
hIXASb0WVmYQb/DTRYYUveI2Pl0P3NvGCmInxribJC7WU4WlS2Ab0AEyee0RAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUv7bESKMI113EOqxADIGqM9dRMx8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtwDANBgkqhkiG9w0BAQsFAAOCAQEAcsFW
fjy/7N5xchYHpS5SgXgBNxsmnACDh1fd41e49kUoYq4AzaAIUs4+gCN1Pfah7sSR
jLYC/nYKbT+OVuOy2Qf+CWrAsV9DxCKmLiTLf8D6DlsduFQQHhzOiIvNEYVOqH53
ZvrhOkCRivPyT60ZS+WYhtXh7tT2XqHwxoeqPq1CtjA+EdLE3TmQFjbWuNf2/qtO
Fa/J4f4J+YrPCU8HziLRpkMrIp/rJEF3z3Vq6LNRqHykLUG+TORo47G87HGmcUoK
Tw2pWPPMuwxOG45APOS/DlDgDFGOu08I2ujXytjpqJ8zq3y4z/H0CODEYCpF+1VO
UQgJi3USGhIjVrfQDg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client