Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146173.roa
File: AS146173.roa (raw, json)
Hash identifier: UIRgZCQ1PxL4JANdOKuNLTOS2UNdlzaK9UFl6GWDyIQ=
Subject key identifier: 03:28:42:33:4D:8F:66:F7:92:21:6C:52:54:10:52:61:6E:FA:ED:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 61D58052E2A8B0E7D24B037228A2C8C5E63B6481
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146173.roa
Signing time: Fri 22 May 2026 02:47:41 +0000
ROA not before: Fri 22 May 2026 02:42:41 +0000
ROA not after: Fri 21 May 2027 02:47:41 +0000
asID: 146173
IP address blocks: 240a:adc3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d5:80:52:e2:a8:b0:e7:d2:4b:03:72:28:a2:c8:c5:e6:3b:64:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:41 2026 GMT
Not After : May 21 02:47:41 2027 GMT
Subject: CN=032842334D8F66F792216C52541052616EFAEDFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:cf:b1:35:f4:82:93:c8:27:a3:8b:b7:4a:
f7:33:44:d6:16:0e:6d:35:2b:3c:d4:b2:1a:e6:f3:
c3:3a:ee:9a:e3:31:a7:1a:72:93:c9:d7:0c:39:b4:
ea:62:e6:46:1d:96:6d:c8:74:17:72:17:53:da:da:
57:64:b5:93:4d:2e:f8:61:27:14:49:0a:bd:50:91:
ac:2f:85:3c:a3:c3:40:6e:d8:98:fa:c8:06:db:d0:
a9:a7:62:8d:6f:7e:bb:b2:15:67:d9:49:b2:74:c6:
f4:fc:92:8d:d2:8c:f0:04:8e:e8:1d:48:41:14:69:
49:d2:4b:a1:83:0e:f0:0d:35:8a:57:d2:14:0f:5f:
26:1b:60:e7:64:f0:67:b7:e7:85:fe:a5:f8:d0:be:
36:9a:6f:11:c2:20:c1:ab:18:91:84:a5:8e:63:c7:
71:52:e2:aa:f5:1a:51:66:d3:04:fe:ab:63:c1:db:
c4:d8:cb:13:8b:7e:78:20:1f:7d:fd:f3:61:3a:37:
4f:a9:43:d8:4f:c1:6a:af:45:8c:9e:af:60:13:9c:
aa:d9:8a:a1:bb:af:62:dd:ad:06:24:4e:9c:31:a7:
e9:f9:a9:02:24:74:d3:52:9a:38:b5:b9:ff:ac:d8:
a8:5b:5f:c7:1b:7b:56:fd:24:86:f7:7b:47:37:5d:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:28:42:33:4D:8F:66:F7:92:21:6C:52:54:10:52:61:6E:FA:ED:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adc3::/32
Signature Algorithm: sha256WithRSAEncryption
1a:3c:fd:36:57:4c:42:0f:0d:be:80:11:5a:28:3a:c7:84:95:
96:15:35:3f:50:56:c7:46:90:bc:70:61:6b:7f:9e:fc:a8:aa:
4e:62:bc:b9:0d:86:e7:f2:1c:14:53:28:4d:9c:f4:d5:41:cb:
78:96:a6:7c:d9:23:9c:7c:ef:b3:43:50:9d:45:41:ed:58:18:
44:d6:ac:27:4b:dd:d9:6a:94:85:f7:cc:51:10:b7:50:a5:8e:
00:b6:44:b1:a1:1d:1e:b3:27:06:49:41:f8:83:72:f6:b7:4e:
4a:53:2b:c0:12:3f:87:21:3e:17:5c:44:cd:c0:d2:eb:48:85:
61:1f:ec:54:f3:60:dc:d7:d0:72:da:52:ec:a5:d1:d7:13:d1:
d1:e4:d1:43:c5:1f:42:0d:84:0b:f9:fe:d3:c3:9b:5f:1c:97:
c3:c6:c5:e1:89:79:72:88:7d:12:41:a8:9d:3b:3a:dc:01:65:
a8:11:88:d9:2d:6d:6f:e3:d4:0e:be:71:0c:9b:87:0c:47:07:
81:86:e2:cb:aa:94:22:cb:7b:23:56:62:7c:ef:48:a4:57:25:
17:3f:1d:78:e2:91:d0:85:a5:98:de:14:85:0b:51:41:7e:78:
45:f4:dd:d5:b9:98:0c:7e:98:57:a8:bf:8e:71:dd:f1:7a:33:
e3:fc:c0:d8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYdWAUuKosOfSSwNyKKLIxeY7ZIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyNDFaFw0yNzA1MjEwMjQ3NDFaMDMxMTAvBgNV
BAMTKDAzMjg0MjMzNEQ4RjY2Rjc5MjIxNkM1MjU0MTA1MjYxNkVGQUVERkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9M+xNfSCk8gno4u3SvczRNYW
Dm01KzzUshrm88M67prjMacacpPJ1ww5tOpi5kYdlm3IdBdyF1Pa2ldktZNNLvhh
JxRJCr1QkawvhTyjw0Bu2Jj6yAbb0KmnYo1vfruyFWfZSbJ0xvT8ko3SjPAEjugd
SEEUaUnSS6GDDvANNYpX0hQPXyYbYOdk8Ge354X+pfjQvjaabxHCIMGrGJGEpY5j
x3FS4qr1GlFm0wT+q2PB28TYyxOLfnggH33982E6N0+pQ9hPwWqvRYyer2ATnKrZ
iqG7r2LdrQYkTpwxp+n5qQIkdNNSmji1uf+s2KhbX8cbe1b9JIb3e0c3XbPRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUAyhCM02PZveSIWxSVBBSYW767f0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtwzANBgkqhkiG9w0BAQsFAAOCAQEAGjz9
NldMQg8NvoARWig6x4SVlhU1P1BWx0aQvHBha3+e/KiqTmK8uQ2G5/IcFFMoTZz0
1UHLeJamfNkjnHzvs0NQnUVB7VgYRNasJ0vd2WqUhffMURC3UKWOALZEsaEdHrMn
BklB+INy9rdOSlMrwBI/hyE+F1xEzcDS60iFYR/sVPNg3NfQctpS7KXR1xPR0eTR
Q8UfQg2EC/n+08ObXxyXw8bF4Yl5coh9EkGonTs63AFlqBGI2S1tb+PUDr5xDJuH
DEcHgYbiy6qUIst7I1ZifO9IpFclFz8deOKR0IWlmN4UhQtRQX54RfTd1bmYDH6Y
V6i/jnHd8Xoz4/zA2A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:55 2026 by rpki-client