Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146234.roa
File: AS146234.roa (raw, json)
Hash identifier: rFnZfYbhoWHCf01eFtIaxjyF0RoferczkO7Ozxoaf0o=
Subject key identifier: 32:69:39:B2:3C:9B:BC:2A:81:87:DE:35:8B:6F:8A:55:AA:57:BC:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D2D8C1978A6AE0C650B5BA755D2A95B343FBBDC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146234.roa
Signing time: Mon 25 May 2026 02:22:47 +0000
ROA not before: Mon 25 May 2026 02:17:47 +0000
ROA not after: Mon 24 May 2027 02:22:47 +0000
asID: 146234
IP address blocks: 240a:ae00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2d:8c:19:78:a6:ae:0c:65:0b:5b:a7:55:d2:a9:5b:34:3f:bb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:47 2026 GMT
Not After : May 24 02:22:47 2027 GMT
Subject: CN=326939B23C9BBC2A8187DE358B6F8A55AA57BC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:e1:9a:f9:21:10:a0:0c:d5:13:cb:48:cd:
c1:01:c0:77:dc:b4:93:af:3b:2c:31:07:61:40:57:
25:76:7b:3c:c4:50:5b:79:f2:72:02:88:27:1d:c0:
7f:6d:1d:f5:09:46:7d:46:b1:70:7d:96:77:57:44:
47:90:0b:dd:9e:c6:90:ca:0c:fd:f5:04:0a:b8:10:
2b:23:d2:16:a9:f1:a0:df:a9:7c:e1:b6:c4:a6:ec:
6c:88:a0:94:20:bf:6b:d5:e8:11:a8:1e:26:90:cf:
4b:93:55:15:d6:8b:a6:75:80:f8:16:86:99:d7:a6:
ff:81:44:56:0b:46:f3:ba:24:1d:ff:91:d7:3a:66:
cc:6b:c3:5d:b5:6c:52:62:fb:d3:ed:ae:ce:68:4f:
aa:fa:c4:78:31:8c:5a:db:bf:aa:78:dc:c3:2c:f5:
31:79:55:bb:16:c3:80:1c:82:73:b2:b0:e3:69:7f:
46:37:b7:78:09:5f:18:8e:ce:61:8a:19:77:f4:84:
8c:c2:15:f8:58:a1:a0:e6:f6:00:7d:95:48:a9:5a:
bc:ad:c6:cd:1f:0e:b6:e5:7f:a6:78:4b:a9:d5:e1:
5c:36:ee:ff:3d:31:c5:f8:3c:5b:f1:bc:ea:24:fd:
88:3c:91:cd:59:23:2f:a9:d6:6c:54:d4:fe:6d:83:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:39:B2:3C:9B:BC:2A:81:87:DE:35:8B:6F:8A:55:AA:57:BC:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
40:63:d0:d6:ae:77:2e:2e:54:4b:a3:4c:51:77:7e:f8:0d:a9:
7c:f7:d6:ca:a3:45:29:bc:bc:ae:64:23:14:ac:19:2a:52:0b:
91:cc:48:78:23:5b:86:d9:6d:a9:f9:4f:c9:ef:60:21:f5:46:
d2:2e:39:27:73:d9:fd:d0:5c:3a:6c:b3:d8:a9:bb:fb:62:a5:
77:c8:8a:7b:21:6e:16:98:25:21:f4:a1:31:dd:9f:ec:4b:7d:
e2:32:08:ec:b7:bc:79:17:fb:26:85:c2:03:87:1d:0b:4e:5d:
0b:fa:cc:ca:12:be:e8:ad:e2:f7:af:96:ca:2f:36:9a:a4:3a:
0e:55:10:90:64:e8:e2:e1:0a:52:d3:e8:65:52:ac:d4:8b:1d:
0d:8d:48:64:51:23:e9:09:dc:95:67:e7:1e:13:69:ab:4b:10:
31:2f:ac:61:0f:1e:5c:be:28:8b:e0:9d:f9:40:d0:a4:ef:b3:
74:75:ea:ce:65:bb:f8:d4:4d:72:d4:66:a0:6d:f9:53:c7:f6:
87:4c:28:eb:9a:39:10:5d:e7:5b:f2:9a:cf:7c:3b:fd:99:f3:
d5:ae:bf:02:97:2d:c7:4c:fe:63:81:3e:77:a3:24:c3:a3:fb:
f0:77:b7:e5:c3:e1:83:8d:47:cf:ec:17:1f:d4:ee:32:52:dd:
e4:1a:39:bc
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUHS2MGXimrgxlC1unVdKpWzQ/u9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3NDdaFw0yNzA1MjQwMjIyNDdaMDMxMTAvBgNV
BAMTKDMyNjkzOUIyM0M5QkJDMkE4MTg3REUzNThCNkY4QTU1QUE1N0JDMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk0OGa+SEQoAzVE8tIzcEBwHfc
tJOvOywxB2FAVyV2ezzEUFt58nICiCcdwH9tHfUJRn1GsXB9lndXREeQC92expDK
DP31BAq4ECsj0hap8aDfqXzhtsSm7GyIoJQgv2vV6BGoHiaQz0uTVRXWi6Z1gPgW
hpnXpv+BRFYLRvO6JB3/kdc6Zsxrw121bFJi+9Ptrs5oT6r6xHgxjFrbv6p43MMs
9TF5VbsWw4AcgnOysONpf0Y3t3gJXxiOzmGKGXf0hIzCFfhYoaDm9gB9lUipWryt
xs0fDrblf6Z4S6nV4Vw27v89McX4PFvxvOok/Yg8kc1ZIy+p1mxU1P5tg2Y1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUMmk5sjybvCqBh941i2+KVapXvCQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquADANBgkqhkiG9w0BAQsFAAOCAQEAQGPQ
1q53Li5US6NMUXd++A2pfPfWyqNFKby8rmQjFKwZKlILkcxIeCNbhtltqflPye9g
IfVG0i45J3PZ/dBcOmyz2Km7+2Kld8iKeyFuFpglIfShMd2f7Et94jII7Le8eRf7
JoXCA4cdC05dC/rMyhK+6K3i96+Wyi82mqQ6DlUQkGTo4uEKUtPoZVKs1IsdDY1I
ZFEj6QnclWfnHhNpq0sQMS+sYQ8eXL4oi+Cd+UDQpO+zdHXqzmW7+NRNctRmoG35
U8f2h0wo65o5EF3nW/Kaz3w7/Znz1a6/Apctx0z+Y4E+d6Mkw6P78He35cPhg41H
z+wXH9TuMlLd5Bo5vA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:59 2026 by rpki-client