Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146210.roa
File: AS146210.roa (raw, json)
Hash identifier: pwZeYlNeuU0acyzmwP7bDmK6/1yD48nyGSE2rd7wgYE=
Subject key identifier: 76:3D:54:0D:A6:DE:84:F1:AB:B0:5E:CA:43:86:A4:00:33:F9:4D:63
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 45F5CB7F58F15D0B699DFEA2DB8C819FB6BD6D49
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146210.roa
Signing time: Fri 22 May 2026 06:27:56 +0000
ROA not before: Fri 22 May 2026 06:22:56 +0000
ROA not after: Fri 21 May 2027 06:27:56 +0000
asID: 146210
IP address blocks: 240a:ade8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f5:cb:7f:58:f1:5d:0b:69:9d:fe:a2:db:8c:81:9f:b6:bd:6d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:56 2026 GMT
Not After : May 21 06:27:56 2027 GMT
Subject: CN=763D540DA6DE84F1ABB05ECA4386A40033F94D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:6a:e2:c0:bd:47:a6:a9:e9:42:2f:f6:95:
36:b9:e5:c4:31:1b:e4:e6:74:13:7e:0c:fd:59:7d:
95:3a:3a:5e:ef:b9:68:25:1c:39:28:8c:83:da:af:
ac:8e:b3:eb:16:12:01:06:ac:ce:a7:3a:02:ef:3a:
47:7b:63:64:cf:16:04:59:53:70:6e:af:4c:9b:ea:
4c:a2:bc:18:8f:56:c3:3b:87:1e:69:7a:5f:5f:d4:
d2:14:3e:0d:c2:d4:fe:77:6a:1c:ff:dd:b1:c5:bb:
53:34:a5:c3:18:95:55:24:bc:54:3c:8a:3a:ec:3c:
ee:66:7d:62:c0:86:ed:83:ba:54:d3:2e:14:62:cd:
50:12:b3:45:bc:bb:9b:32:af:c3:a7:43:40:5d:e1:
a3:78:89:94:cd:95:e3:f4:d9:dc:45:92:65:5c:61:
9d:ff:9c:55:55:2c:30:c3:6a:6f:4f:3e:82:ad:07:
a5:ec:73:f7:c0:37:19:fb:a5:74:78:47:ec:61:03:
86:78:ad:33:67:e0:e3:dd:ba:67:35:4e:94:88:50:
56:fb:68:d3:63:d9:2b:af:b5:9a:01:16:04:2f:44:
11:bb:34:68:77:7a:6d:2a:ab:ab:aa:26:fa:c3:74:
3d:86:cd:eb:df:be:89:05:c8:b0:14:6d:be:2a:47:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3D:54:0D:A6:DE:84:F1:AB:B0:5E:CA:43:86:A4:00:33:F9:4D:63
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146210.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ade8::/32
Signature Algorithm: sha256WithRSAEncryption
11:08:1e:8a:7b:33:86:23:75:74:2e:10:da:97:0b:b7:1f:24:
25:1b:fd:93:a5:23:1a:af:b6:d4:b2:50:59:87:31:70:b9:d6:
01:00:16:6e:1d:a2:f7:8f:04:83:99:ea:c0:81:d5:76:14:10:
3f:ea:15:3f:6b:4d:7d:ca:64:78:6d:54:0e:91:6b:1b:4a:30:
18:1f:33:f7:a1:1e:70:34:7f:4a:57:10:62:16:44:d2:09:ef:
7c:97:af:fe:58:ee:ee:7f:1d:43:f6:72:81:c5:b1:f1:e8:0d:
c4:12:cd:21:b8:9f:7a:6a:9d:d1:ea:05:f7:bb:7e:04:85:26:
d0:fc:f4:2c:5d:63:1a:a2:bb:da:9c:15:88:80:5b:2d:f7:8d:
a2:36:43:cb:d6:4a:5b:84:f2:7d:91:bc:04:b8:4d:c5:cb:34:
61:c6:3b:95:ee:8a:43:72:65:26:86:db:f7:72:a2:2f:fc:0d:
b8:cc:86:1e:2b:a8:82:72:28:27:e8:56:a3:cf:36:f2:1a:9c:
c0:10:c0:56:11:86:da:c2:17:09:1b:3e:e9:c9:c1:95:f5:a3:
af:36:af:0f:b7:79:5e:96:f5:e6:52:be:01:c3:63:0b:fd:39:
d4:94:88:cf:38:31:3d:d8:bc:86:68:3d:33:0a:39:cc:de:54:
14:00:68:68
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURfXLf1jxXQtpnf6i24yBn7a9bUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNTZaFw0yNzA1MjEwNjI3NTZaMDMxMTAvBgNV
BAMTKDc2M0Q1NDBEQTZERTg0RjFBQkIwNUVDQTQzODZBNDAwMzNGOTRENjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI22riwL1HpqnpQi/2lTa55cQx
G+TmdBN+DP1ZfZU6Ol7vuWglHDkojIPar6yOs+sWEgEGrM6nOgLvOkd7Y2TPFgRZ
U3Bur0yb6kyivBiPVsM7hx5pel9f1NIUPg3C1P53ahz/3bHFu1M0pcMYlVUkvFQ8
ijrsPO5mfWLAhu2DulTTLhRizVASs0W8u5syr8OnQ0Bd4aN4iZTNleP02dxFkmVc
YZ3/nFVVLDDDam9PPoKtB6Xsc/fANxn7pXR4R+xhA4Z4rTNn4OPdumc1TpSIUFb7
aNNj2SuvtZoBFgQvRBG7NGh3em0qq6uqJvrDdD2GzevfvokFyLAUbb4qR4v9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUdj1UDabehPGrsF7KQ4akADP5TWMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt6DANBgkqhkiG9w0BAQsFAAOCAQEAEQge
inszhiN1dC4Q2pcLtx8kJRv9k6UjGq+21LJQWYcxcLnWAQAWbh2i948Eg5nqwIHV
dhQQP+oVP2tNfcpkeG1UDpFrG0owGB8z96EecDR/SlcQYhZE0gnvfJev/lju7n8d
Q/ZygcWx8egNxBLNIbifemqd0eoF97t+BIUm0Pz0LF1jGqK72pwViIBbLfeNojZD
y9ZKW4TyfZG8BLhNxcs0YcY7le6KQ3JlJobb93KiL/wNuMyGHiuognIoJ+hWo882
8hqcwBDAVhGG2sIXCRs+6cnBlfWjrzavD7d5Xpb15lK+AcNjC/051JSIzzgxPdi8
hmg9Mwo5zN5UFABoaA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client