Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146233.roa
File: AS146233.roa (raw, json)
Hash identifier: QqCvg5pgo/+LyLiQIKsUt9YFoSRmXDNiJauX/pFFVMw=
Subject key identifier: 81:AE:BA:3E:40:44:7D:9F:DF:AD:A9:CC:64:FF:42:06:D1:D0:27:FE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54755B13E2ECC8CB3026B03A3045DECE9040EC3B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146233.roa
Signing time: Fri 22 May 2026 02:47:31 +0000
ROA not before: Fri 22 May 2026 02:42:31 +0000
ROA not after: Fri 21 May 2027 02:47:31 +0000
asID: 146233
IP address blocks: 240a:adff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:75:5b:13:e2:ec:c8:cb:30:26:b0:3a:30:45:de:ce:90:40:ec:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:31 2026 GMT
Not After : May 21 02:47:31 2027 GMT
Subject: CN=81AEBA3E40447D9FDFADA9CC64FF4206D1D027FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:98:b1:52:d7:a0:12:5b:41:40:f9:80:3d:bd:
ac:b0:4f:ae:1f:99:86:dc:4d:24:57:12:74:99:3e:
d3:78:3d:68:8a:24:dd:0d:46:ac:a9:ac:7b:61:db:
ab:eb:0a:0a:a2:ef:2f:99:65:12:a8:0a:0a:c7:8c:
9e:12:95:ab:9d:cf:73:cd:59:b5:52:a2:e4:35:bd:
35:71:2e:09:35:34:0f:eb:eb:a0:1b:7a:73:fc:ad:
21:85:89:d5:29:41:5a:58:87:cf:24:79:aa:02:3e:
9b:21:40:cc:4d:ed:8c:62:36:86:23:d4:68:fc:25:
d1:86:61:b4:77:b0:3f:d0:ad:b9:a9:46:d2:f8:a4:
e6:8e:63:bf:a6:27:b9:18:30:b3:6d:78:2d:5d:b8:
f3:1b:f2:46:ba:ee:c0:20:6c:b0:25:ce:e9:f4:5c:
4b:9d:0b:f3:fc:00:dd:bc:28:ab:9d:ac:7d:e0:bd:
a9:7e:f1:88:14:9e:e9:07:43:60:9b:32:e3:cd:79:
bf:77:5a:5a:af:24:55:ed:a3:f4:cf:28:2c:6f:37:
a3:cc:54:40:93:fa:40:93:89:04:74:9d:ab:8b:07:
fe:97:92:51:02:d2:fa:8f:ee:6c:2b:a0:a1:2d:21:
5b:e7:38:1c:bb:cd:95:f0:c3:64:1b:6e:0c:b0:d8:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AE:BA:3E:40:44:7D:9F:DF:AD:A9:CC:64:FF:42:06:D1:D0:27:FE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adff::/32
Signature Algorithm: sha256WithRSAEncryption
4b:24:59:cf:ef:8a:47:84:2f:7b:76:55:e3:c7:5e:e9:98:f2:
b9:35:8d:22:e2:39:9e:13:b8:23:ea:5e:00:d5:e0:2d:1d:2d:
7f:f9:0f:37:0e:35:41:96:d0:9b:35:03:34:01:c3:92:b9:2d:
34:27:90:31:cd:1c:e2:16:b5:1a:ca:2a:6d:57:bd:fd:ce:73:
c9:f5:28:31:0c:76:f9:4d:65:63:b7:12:b0:43:e3:55:f9:01:
6d:9b:4e:fc:ad:19:7b:1c:14:81:f4:4b:46:46:6f:38:af:cc:
17:72:9c:89:66:55:79:2c:78:56:f0:7c:c4:4f:f0:ca:85:2a:
cf:fb:88:6c:a9:a3:f6:ad:e2:56:44:92:c9:a8:30:a2:5b:44:
1c:e5:b3:ee:e7:ff:6a:12:3c:52:e7:74:c9:70:32:4f:75:e0:
9c:b9:d9:b1:58:fb:c8:ab:3b:ba:ec:c9:73:a3:13:18:ff:6e:
d7:da:8e:be:d4:24:8d:94:cb:e4:76:14:d0:b6:3c:16:b0:9e:
a8:58:e0:4a:6f:a3:ec:aa:4d:1c:9f:7a:b5:7d:b6:78:eb:c8:
22:f2:93:85:8a:11:30:98:e6:7b:5e:aa:52:3f:1f:13:5d:e9:
f3:00:a4:d4:f2:d4:ff:67:9f:ec:8f:24:85:29:d7:6e:a9:3e:
ff:3b:e6:c8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVHVbE+LsyMswJrA6MEXezpBA7DswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzFaFw0yNzA1MjEwMjQ3MzFaMDMxMTAvBgNV
BAMTKDgxQUVCQTNFNDA0NDdEOUZERkFEQTlDQzY0RkY0MjA2RDFEMDI3RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlmLFS16ASW0FA+YA9vaywT64f
mYbcTSRXEnSZPtN4PWiKJN0NRqyprHth26vrCgqi7y+ZZRKoCgrHjJ4Slaudz3PN
WbVSouQ1vTVxLgk1NA/r66AbenP8rSGFidUpQVpYh88keaoCPpshQMxN7YxiNoYj
1Gj8JdGGYbR3sD/QrbmpRtL4pOaOY7+mJ7kYMLNteC1duPMb8ka67sAgbLAlzun0
XEudC/P8AN28KKudrH3gval+8YgUnukHQ2CbMuPNeb93WlqvJFXto/TPKCxvN6PM
VECT+kCTiQR0nauLB/6XklEC0vqP7mwroKEtIVvnOBy7zZXww2Qbbgyw2JdXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUga66PkBEfZ/franMZP9CBtHQJ/4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqt/zANBgkqhkiG9w0BAQsFAAOCAQEASyRZ
z++KR4Qve3ZV48de6ZjyuTWNIuI5nhO4I+peANXgLR0tf/kPNw41QZbQmzUDNAHD
krktNCeQMc0c4ha1GsoqbVe9/c5zyfUoMQx2+U1lY7cSsEPjVfkBbZtO/K0ZexwU
gfRLRkZvOK/MF3KciWZVeSx4VvB8xE/wyoUqz/uIbKmj9q3iVkSSyagwoltEHOWz
7uf/ahI8Uud0yXAyT3XgnLnZsVj7yKs7uuzJc6MTGP9u19qOvtQkjZTL5HYU0LY8
FrCeqFjgSm+j7KpNHJ96tX22eOvIIvKThYoRMJjme16qUj8fE13p8wCk1PLU/2ef
7I8khSnXbqk+/zvmyA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client