Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146220.roa
File: AS146220.roa (raw, json)
Hash identifier: jcxcXWNZlA0JCdiqa5N88UImP+uwBwt8lGGMGg9QiAE=
Subject key identifier: 9A:72:59:10:A8:9E:43:DE:D9:0D:26:DE:5F:A0:AD:43:A5:72:E9:BC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33543B10CDB3020678037772F9E774260C6F576D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146220.roa
Signing time: Fri 22 May 2026 06:46:15 +0000
ROA not before: Fri 22 May 2026 06:41:15 +0000
ROA not after: Fri 21 May 2027 06:46:15 +0000
asID: 146220
IP address blocks: 240a:adf2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:54:3b:10:cd:b3:02:06:78:03:77:72:f9:e7:74:26:0c:6f:57:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:15 2026 GMT
Not After : May 21 06:46:15 2027 GMT
Subject: CN=9A725910A89E43DED90D26DE5FA0AD43A572E9BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:76:1b:50:ad:ad:c3:63:e5:c0:ce:e9:1e:
dc:06:16:cf:ae:b4:aa:e8:42:1f:e7:8b:d5:3b:52:
c4:05:c3:84:45:d1:34:01:d3:e7:fc:bd:95:9f:19:
1b:56:b1:18:fa:eb:1e:45:16:b8:41:3d:f6:31:5a:
9b:d0:fb:b6:59:af:3a:8e:5c:d2:4b:a9:75:cc:01:
4b:4a:b7:92:d6:0d:a3:43:2e:44:80:3e:e2:fe:b2:
16:c3:a9:05:d5:1c:d3:5f:2d:7c:66:e5:b7:9a:e9:
d5:b1:44:25:3b:7c:7b:3f:a6:5c:07:6e:3f:52:06:
bd:f8:3c:5c:9a:29:03:e4:d6:79:a9:cb:75:f4:fd:
49:99:8c:25:0b:5b:88:f5:bd:2c:ec:68:ac:c1:72:
57:c3:d6:20:9a:20:63:ea:0a:92:51:f8:74:1d:f0:
a2:69:c5:36:8b:78:54:25:d0:58:4f:98:0a:9b:32:
93:01:01:8e:a3:7e:f7:c4:70:0f:6a:4b:fc:84:7f:
69:ab:26:1f:f9:dd:28:2d:f9:c2:f3:cd:c5:fa:bb:
b2:1d:ff:69:d5:b4:ad:86:bc:1b:ee:bd:c7:5d:df:
13:b7:08:4f:0c:be:63:6e:81:d4:14:83:fd:a0:d8:
f2:a4:75:d0:5d:94:e7:70:3a:78:38:cc:a1:51:68:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:72:59:10:A8:9E:43:DE:D9:0D:26:DE:5F:A0:AD:43:A5:72:E9:BC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146220.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adf2::/32
Signature Algorithm: sha256WithRSAEncryption
65:d5:32:ad:1a:5d:de:66:f1:d5:45:6c:68:81:99:17:e2:0c:
1a:9a:58:cb:ff:3a:bf:98:7d:c9:d4:a2:60:54:4a:13:d3:1a:
01:5f:3b:e2:aa:ce:fe:ba:70:f3:65:6e:d7:f8:69:ce:72:af:
a8:7e:6e:c1:59:29:26:07:13:e7:71:a0:4d:09:b0:e6:80:29:
0c:77:0d:e8:7a:65:81:5a:94:b3:dd:46:93:2b:a2:b3:3d:7c:
2b:a6:4b:be:70:1e:e3:8d:34:c5:1b:ef:b1:df:73:e7:c6:85:
8b:88:be:99:38:da:f2:a1:4d:f0:bc:96:63:1b:2d:6c:5e:47:
b8:66:38:54:5d:9c:50:46:a1:13:d0:0b:c8:95:28:3f:c4:34:
9e:2b:00:1e:1f:1e:c5:92:9f:cb:ed:de:8b:3c:0c:2b:73:c1:
58:d7:d3:e0:22:8a:ea:be:2e:50:33:c5:e1:33:cd:6b:ae:12:
11:97:de:c8:6d:62:1f:a3:52:b3:b0:87:26:c5:be:03:e8:7e:
fa:5d:a7:60:8d:76:63:bd:09:37:20:88:ee:40:f0:42:87:b1:
33:8e:79:f0:5f:f8:a9:d6:07:e3:cb:c6:1d:0c:c3:d2:62:aa:
58:57:87:21:55:f8:2a:5b:cd:d4:19:30:6f:76:41:58:e7:bf:
8f:cd:6a:d4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUM1Q7EM2zAgZ4A3dy+ed0JgxvV20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTVaFw0yNzA1MjEwNjQ2MTVaMDMxMTAvBgNV
BAMTKDlBNzI1OTEwQTg5RTQzREVEOTBEMjZERTVGQTBBRDQzQTU3MkU5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07nYbUK2tw2PlwM7pHtwGFs+u
tKroQh/ni9U7UsQFw4RF0TQB0+f8vZWfGRtWsRj66x5FFrhBPfYxWpvQ+7ZZrzqO
XNJLqXXMAUtKt5LWDaNDLkSAPuL+shbDqQXVHNNfLXxm5bea6dWxRCU7fHs/plwH
bj9SBr34PFyaKQPk1nmpy3X0/UmZjCULW4j1vSzsaKzBclfD1iCaIGPqCpJR+HQd
8KJpxTaLeFQl0FhPmAqbMpMBAY6jfvfEcA9qS/yEf2mrJh/53Sgt+cLzzcX6u7Id
/2nVtK2GvBvuvcdd3xO3CE8MvmNugdQUg/2g2PKkddBdlOdwOng4zKFRaLytAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUmnJZEKieQ97ZDSbeX6CtQ6Vy6bwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt8jANBgkqhkiG9w0BAQsFAAOCAQEAZdUy
rRpd3mbx1UVsaIGZF+IMGppYy/86v5h9ydSiYFRKE9MaAV874qrO/rpw82Vu1/hp
znKvqH5uwVkpJgcT53GgTQmw5oApDHcN6HplgVqUs91Gkyuisz18K6ZLvnAe4400
xRvvsd9z58aFi4i+mTja8qFN8LyWYxstbF5HuGY4VF2cUEahE9ALyJUoP8Q0nisA
Hh8exZKfy+3eizwMK3PBWNfT4CKK6r4uUDPF4TPNa64SEZfeyG1iH6NSs7CHJsW+
A+h++l2nYI12Y70JNyCI7kDwQoexM4558F/4qdYH48vGHQzD0mKqWFeHIVX4KlvN
1Bkwb3ZBWOe/j81q1A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:04 2026 by rpki-client