Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146189.roa
File: AS146189.roa (raw, json)
Hash identifier: h+2yUbu7tQ1Cqt+fHotSDO/lhY7e+0KI8nkeDUlAI1o=
Subject key identifier: 19:E6:C9:71:D5:AE:BC:96:C9:D5:F9:B7:BA:32:62:56:D9:39:44:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3907AFAB8A59B1A7C6F212945BE57564B1A94C58
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146189.roa
Signing time: Tue 26 May 2026 01:13:05 +0000
ROA not before: Tue 26 May 2026 01:08:05 +0000
ROA not after: Tue 25 May 2027 01:13:05 +0000
asID: 146189
IP address blocks: 240a:add3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:07:af:ab:8a:59:b1:a7:c6:f2:12:94:5b:e5:75:64:b1:a9:4c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:05 2026 GMT
Not After : May 25 01:13:05 2027 GMT
Subject: CN=19E6C971D5AEBC96C9D5F9B7BA326256D939448D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:ce:64:d1:0a:21:42:2e:ea:0e:9c:89:13:
39:62:05:1c:18:1a:2f:37:6d:60:c3:01:e5:dd:f4:
f3:db:2f:48:f8:15:29:e0:c9:a7:b0:c1:5d:76:22:
e1:ee:18:0a:2b:73:c3:7c:fa:12:b7:0f:3d:1e:6f:
17:7a:61:a2:50:37:7c:ef:6a:2c:0c:de:26:dc:d8:
e1:fe:b6:18:4b:59:99:f1:86:ca:20:69:97:7e:5a:
af:45:39:08:f1:4d:1b:7b:ab:c5:e6:72:37:74:54:
8a:e7:4f:53:a1:04:a5:55:6f:cb:28:5c:98:7f:f6:
1d:ae:db:b3:45:63:0b:e4:f3:89:fc:b5:69:bd:70:
6d:71:99:9f:a1:8c:6c:c5:20:3a:ef:cb:8b:37:c9:
21:75:46:8a:ee:6a:5f:c8:2c:03:75:42:84:44:c8:
af:f7:52:0a:ab:09:1c:e1:69:41:7a:75:4b:5d:d4:
4e:b2:0a:fc:7b:f1:5c:96:92:a8:18:27:a9:f0:16:
3f:9b:01:6e:5c:1b:68:c0:82:c6:a1:60:af:69:ad:
d5:da:7a:21:92:df:9b:70:30:8f:60:78:1f:9d:51:
df:dc:61:8a:8c:10:3f:a1:89:10:14:a3:cc:4f:1c:
8b:22:33:6c:cf:64:da:8d:cb:43:71:62:d7:43:8a:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E6:C9:71:D5:AE:BC:96:C9:D5:F9:B7:BA:32:62:56:D9:39:44:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146189.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:add3::/32
Signature Algorithm: sha256WithRSAEncryption
6b:94:bb:50:2c:ef:68:69:73:c5:ca:af:5f:35:6e:fb:20:9f:
e1:58:96:bd:66:1a:35:b8:8c:31:31:2b:0d:9c:66:9a:47:86:
ff:ca:fd:8e:06:51:c5:c3:9c:45:c8:db:09:a0:9a:88:5d:6a:
f6:06:ef:e4:76:a3:e4:dc:98:6f:51:91:06:5d:0f:48:1b:6d:
fe:79:64:22:08:96:6e:1e:3f:0a:a3:f4:30:49:c3:1a:fc:27:
00:0d:59:a3:07:75:27:46:85:a4:8f:87:2b:1a:32:73:fd:b1:
b8:d1:3e:f9:5a:85:06:84:7d:e9:f3:29:99:6f:8e:20:34:bc:
01:8e:eb:4a:5a:76:59:b2:11:0a:75:25:43:19:a7:2c:59:32:
51:c7:36:d9:1c:c8:79:05:01:ae:f1:d3:d1:13:1e:33:5f:df:
ac:22:95:43:ce:d8:a9:55:5d:b6:92:cd:76:7a:0e:53:86:1d:
84:b3:67:e0:78:fd:7f:11:89:78:7b:d6:f4:64:a8:17:a3:ae:
6d:c3:56:5e:79:ca:43:76:b7:a3:29:42:86:cd:0c:0f:f9:83:
a7:c1:e5:0a:20:a6:3b:28:7a:c2:3e:6d:29:8a:55:34:c6:e1:
36:56:0a:21:d3:62:22:69:49:da:b8:03:ba:6c:69:b3:4b:1f:
84:54:7e:b1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOQevq4pZsafG8hKUW+V1ZLGpTFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MDVaFw0yNzA1MjUwMTEzMDVaMDMxMTAvBgNV
BAMTKDE5RTZDOTcxRDVBRUJDOTZDOUQ1RjlCN0JBMzI2MjU2RDkzOTQ0OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3W85k0QohQi7qDpyJEzliBRwY
Gi83bWDDAeXd9PPbL0j4FSngyaewwV12IuHuGAorc8N8+hK3Dz0ebxd6YaJQN3zv
aiwM3ibc2OH+thhLWZnxhsogaZd+Wq9FOQjxTRt7q8Xmcjd0VIrnT1OhBKVVb8so
XJh/9h2u27NFYwvk84n8tWm9cG1xmZ+hjGzFIDrvy4s3ySF1Rorual/ILAN1QoRE
yK/3UgqrCRzhaUF6dUtd1E6yCvx78VyWkqgYJ6nwFj+bAW5cG2jAgsahYK9prdXa
eiGS35twMI9geB+dUd/cYYqMED+hiRAUo8xPHIsiM2zPZNqNy0NxYtdDiuNPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUGebJcdWuvJbJ1fm3ujJiVtk5RI0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MTg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt0zANBgkqhkiG9w0BAQsFAAOCAQEAa5S7
UCzvaGlzxcqvXzVu+yCf4ViWvWYaNbiMMTErDZxmmkeG/8r9jgZRxcOcRcjbCaCa
iF1q9gbv5Haj5NyYb1GRBl0PSBtt/nlkIgiWbh4/CqP0MEnDGvwnAA1Zowd1J0aF
pI+HKxoyc/2xuNE++VqFBoR96fMpmW+OIDS8AY7rSlp2WbIRCnUlQxmnLFkyUcc2
2RzIeQUBrvHT0RMeM1/frCKVQ87YqVVdtpLNdnoOU4YdhLNn4Hj9fxGJeHvW9GSo
F6OubcNWXnnKQ3a3oylChs0MD/mDp8HlCiCmOyh6wj5tKYpVNMbhNlYKIdNiImlJ
2rgDumxps0sfhFR+sQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client