Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146229.roa
File: AS146229.roa (raw, json)
Hash identifier: KKYFqVrGl0dg/UNVJ29WZHiZqfWDS7ReHuIowLLjPV8=
Subject key identifier: 0E:29:FD:3A:75:CB:D9:53:41:5F:20:8B:09:EA:15:E0:F1:F7:AB:56
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5DC18530DB47A68D0B557FC7420134FC11BE4403
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146229.roa
Signing time: Tue 26 May 2026 03:16:46 +0000
ROA not before: Tue 26 May 2026 03:11:46 +0000
ROA not after: Tue 25 May 2027 03:16:46 +0000
asID: 146229
IP address blocks: 240a:adfb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c1:85:30:db:47:a6:8d:0b:55:7f:c7:42:01:34:fc:11:be:44:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:46 2026 GMT
Not After : May 25 03:16:46 2027 GMT
Subject: CN=0E29FD3A75CBD953415F208B09EA15E0F1F7AB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:c8:c8:3d:dd:c3:59:b8:85:32:9e:9a:f3:
b5:ff:2c:b7:8c:e3:41:a3:57:7f:17:e6:89:26:ba:
37:c8:c8:b5:d1:09:d1:4f:2b:38:6e:c0:03:d6:b0:
d9:a2:b4:a2:dc:d2:8b:4e:22:70:17:ee:dc:67:23:
1b:b4:84:16:5f:2e:e9:69:e3:b1:93:f7:4a:8a:1a:
47:8f:97:e7:6f:25:8a:e7:f2:6f:a1:27:b3:a9:d4:
e8:00:7d:8d:d5:cf:4a:20:a1:f2:bd:32:ae:aa:9b:
f9:af:1f:23:39:bc:02:8a:a1:4a:18:5e:0b:22:17:
d0:6c:57:0e:6f:b5:35:8f:94:33:cd:43:cf:44:15:
04:7c:21:96:10:68:1a:85:bb:3e:af:7b:cd:48:ea:
e2:5e:62:4f:36:05:6c:22:ea:aa:54:6e:bf:04:10:
eb:d9:d7:8e:cd:22:cc:69:25:0f:df:72:1f:12:8e:
07:91:e7:40:70:5f:2a:5e:54:b2:73:d1:a3:71:41:
62:f6:03:7b:8b:b9:2a:09:6b:de:77:31:3c:d3:39:
09:09:15:c6:5f:e2:88:ad:c4:89:78:e9:57:36:02:
55:02:09:4a:ee:ef:34:2f:d7:fe:64:63:2b:9b:1d:
0a:02:7d:77:1f:35:b0:3f:b1:25:85:59:88:4d:9e:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:FD:3A:75:CB:D9:53:41:5F:20:8B:09:EA:15:E0:F1:F7:AB:56
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146229.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adfb::/32
Signature Algorithm: sha256WithRSAEncryption
0b:37:ab:26:78:c9:0e:df:9c:ce:d5:63:a8:dd:81:28:09:76:
9c:87:f5:c9:94:dc:83:b2:4e:37:23:af:72:d2:f5:0e:7f:c5:
ca:11:99:78:db:18:8d:79:59:df:4d:8e:cc:d7:60:f4:1a:63:
4d:db:cd:61:6b:1c:2e:25:12:3a:6a:05:a9:3e:e0:4d:cf:2f:
ea:11:80:70:bc:d4:1f:93:e9:11:ae:34:25:89:80:6a:dd:4f:
bb:db:c3:a3:47:21:60:69:f3:5d:58:05:90:e3:8a:a7:ad:f1:
0b:cb:83:ce:f5:7f:fb:d3:b5:b7:64:4e:8b:4e:61:64:b4:41:
2d:2a:29:85:c7:42:cb:ae:42:01:20:6c:d9:72:93:9f:d4:0a:
16:0f:44:2a:dd:b2:57:38:62:80:5d:dd:16:cc:f3:50:fd:cf:
85:0d:c3:99:21:12:34:1d:bd:05:75:aa:b3:d1:f0:16:8e:a9:
97:d0:a8:0d:40:0c:22:f7:04:2c:ae:22:58:04:0c:11:26:b5:
4f:ff:9d:28:4a:7b:a4:96:62:b7:6c:49:1b:31:6d:ed:72:0e:
a2:70:41:16:42:73:5c:79:4f:e4:0b:c5:5b:58:14:2e:5c:cd:
5b:70:d1:5a:58:51:34:8a:e4:b0:33:c7:0e:5f:d7:97:95:4a:
bc:32:95:38
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXcGFMNtHpo0LVX/HQgE0/BG+RAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDZaFw0yNzA1MjUwMzE2NDZaMDMxMTAvBgNV
BAMTKDBFMjlGRDNBNzVDQkQ5NTM0MTVGMjA4QjA5RUExNUUwRjFGN0FCNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtccjIPd3DWbiFMp6a87X/LLeM
40GjV38X5okmujfIyLXRCdFPKzhuwAPWsNmitKLc0otOInAX7txnIxu0hBZfLulp
47GT90qKGkePl+dvJYrn8m+hJ7Op1OgAfY3Vz0ogofK9Mq6qm/mvHyM5vAKKoUoY
XgsiF9BsVw5vtTWPlDPNQ89EFQR8IZYQaBqFuz6ve81I6uJeYk82BWwi6qpUbr8E
EOvZ147NIsxpJQ/fch8SjgeR50BwXypeVLJz0aNxQWL2A3uLuSoJa953MTzTOQkJ
FcZf4oitxIl46Vc2AlUCCUru7zQv1/5kYyubHQoCfXcfNbA/sSWFWYhNngaxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUDin9OnXL2VNBXyCLCeoV4PH3q1YwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt+zANBgkqhkiG9w0BAQsFAAOCAQEACzer
JnjJDt+cztVjqN2BKAl2nIf1yZTcg7JONyOvctL1Dn/FyhGZeNsYjXlZ302OzNdg
9BpjTdvNYWscLiUSOmoFqT7gTc8v6hGAcLzUH5PpEa40JYmAat1Pu9vDo0chYGnz
XVgFkOOKp63xC8uDzvV/+9O1t2ROi05hZLRBLSophcdCy65CASBs2XKTn9QKFg9E
Kt2yVzhigF3dFszzUP3PhQ3DmSESNB29BXWqs9HwFo6pl9CoDUAMIvcELK4iWAQM
ESa1T/+dKEp7pJZit2xJGzFt7XIOonBBFkJzXHlP5AvFW1gULlzNW3DRWlhRNIrk
sDPHDl/Xl5VKvDKVOA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:24 2026 by rpki-client