Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146216.roa
File: AS146216.roa (raw, json)
Hash identifier: WuZYNVf2SiLyD7P4jg+iB9q9O7NxPMddTQ5ESmHZA48=
Subject key identifier: 91:E8:FB:3C:5E:30:8C:A6:D7:51:1C:76:81:7F:46:4F:91:AA:48:4B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 686B1FE488069D68C3C0524A67494F770FACFC5D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146216.roa
Signing time: Mon 25 May 2026 06:28:50 +0000
ROA not before: Mon 25 May 2026 06:23:50 +0000
ROA not after: Mon 24 May 2027 06:28:50 +0000
asID: 146216
IP address blocks: 240a:adee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:6b:1f:e4:88:06:9d:68:c3:c0:52:4a:67:49:4f:77:0f:ac:fc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:50 2026 GMT
Not After : May 24 06:28:50 2027 GMT
Subject: CN=91E8FB3C5E308CA6D7511C76817F464F91AA484B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:98:bf:b8:1d:c6:10:2c:d0:54:fb:42:11:
69:45:d0:71:f5:bf:83:93:96:ab:ad:6a:ef:d2:4d:
36:d9:cf:17:e4:12:8e:a7:c9:42:92:72:55:06:77:
f3:66:54:26:c0:14:cc:c1:79:5d:c1:d2:a0:64:56:
d1:27:d8:0b:8b:fc:51:07:a9:a2:e9:a0:f3:cd:21:
52:83:16:e5:8b:be:f2:69:8f:0f:47:1f:10:5f:a4:
9b:a2:4d:58:1c:92:a7:1d:27:3b:d2:aa:32:3f:fb:
a8:15:41:e4:94:5e:af:c7:76:07:15:c2:ac:09:b8:
9e:0e:21:85:fe:01:72:44:c4:03:63:ab:17:ac:db:
96:61:85:90:ad:c0:36:14:62:9c:35:d0:ec:55:f6:
9a:27:0c:ab:c4:d9:64:94:6e:a6:ee:07:33:a2:f4:
08:60:9f:92:fb:a1:25:01:93:e0:fc:d0:de:9e:c3:
e1:6b:75:49:78:e1:6e:93:1c:84:7c:7f:54:34:a7:
b7:42:02:75:71:80:da:f9:57:7e:bd:6f:0a:93:91:
f7:a7:1d:7c:31:4d:9f:a0:13:ed:a2:d6:b7:83:d3:
30:c7:b2:e6:85:1d:55:be:e4:64:5e:d7:14:8a:ed:
52:fc:49:88:34:b6:ae:1b:d9:d8:38:90:20:c1:89:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E8:FB:3C:5E:30:8C:A6:D7:51:1C:76:81:7F:46:4F:91:AA:48:4B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adee::/32
Signature Algorithm: sha256WithRSAEncryption
3e:9d:51:cc:88:42:06:54:6d:f1:d2:ba:b7:eb:5e:29:3f:52:
86:c2:09:02:32:9a:cf:e4:81:74:51:c5:04:c6:8b:79:a2:16:
57:35:6a:dc:18:84:ce:e0:12:67:a0:0f:44:0e:3e:5c:18:9e:
75:21:e0:be:51:f9:0b:93:74:bc:6b:53:22:fa:2c:9d:56:eb:
ec:af:51:cb:58:74:8e:44:bd:25:63:5e:c4:3d:ae:67:07:4d:
fb:f8:bb:50:08:47:41:de:4a:75:7e:9c:62:a7:84:f7:ce:f8:
f5:f6:b1:7c:5f:91:19:56:3b:44:b8:10:fc:bc:c4:c4:94:a0:
63:52:2a:dc:f0:1b:bf:2c:5d:8e:ac:3f:94:34:9d:21:5f:c2:
02:94:cf:6c:ac:8c:fa:8a:c0:c3:89:00:d9:0d:0b:fd:45:f4:
9e:10:82:db:37:88:6b:96:cf:ee:91:6d:71:64:20:25:da:d6:
db:52:7f:1c:62:31:58:12:ef:8e:26:9a:b1:c9:91:cf:ba:cf:
a2:08:27:21:46:98:05:cc:66:68:b6:ce:ad:d9:08:27:20:db:
6b:90:6b:ae:aa:45:16:a2:24:d4:6b:97:06:03:fa:52:20:be:
59:31:74:55:53:a7:f8:90:e4:7c:d0:c2:fb:15:0f:fd:68:d3:
05:c1:b8:b4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaGsf5IgGnWjDwFJKZ0lPdw+s/F0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNTBaFw0yNzA1MjQwNjI4NTBaMDMxMTAvBgNV
BAMTKDkxRThGQjNDNUUzMDhDQTZENzUxMUM3NjgxN0Y0NjRGOTFBQTQ4NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mZi/uB3GECzQVPtCEWlF0HH1
v4OTlqutau/STTbZzxfkEo6nyUKSclUGd/NmVCbAFMzBeV3B0qBkVtEn2AuL/FEH
qaLpoPPNIVKDFuWLvvJpjw9HHxBfpJuiTVgckqcdJzvSqjI/+6gVQeSUXq/HdgcV
wqwJuJ4OIYX+AXJExANjqxes25ZhhZCtwDYUYpw10OxV9ponDKvE2WSUbqbuBzOi
9Ahgn5L7oSUBk+D80N6ew+FrdUl44W6THIR8f1Q0p7dCAnVxgNr5V369bwqTkfen
HXwxTZ+gE+2i1reD0zDHsuaFHVW+5GRe1xSK7VL8SYg0tq4b2dg4kCDBiR2xAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUkej7PF4wjKbXURx2gX9GT5GqSEswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjE2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt7jANBgkqhkiG9w0BAQsFAAOCAQEAPp1R
zIhCBlRt8dK6t+teKT9ShsIJAjKaz+SBdFHFBMaLeaIWVzVq3BiEzuASZ6APRA4+
XBiedSHgvlH5C5N0vGtTIvosnVbr7K9Ry1h0jkS9JWNexD2uZwdN+/i7UAhHQd5K
dX6cYqeE98749faxfF+RGVY7RLgQ/LzExJSgY1Iq3PAbvyxdjqw/lDSdIV/CApTP
bKyM+orAw4kA2Q0L/UX0nhCC2zeIa5bP7pFtcWQgJdrW21J/HGIxWBLvjiaascmR
z7rPoggnIUaYBcxmaLbOrdkIJyDba5BrrqpFFqIk1GuXBgP6UiC+WTF0VVOn+JDk
fNDC+xUP/WjTBcG4tA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:07 2026 by rpki-client