Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146249.roa
File: AS146249.roa (raw, json)
Hash identifier: oRNDILlYEQDJVM3o/HdIEeVcYBQVilFI4pqZZ7krTQE=
Subject key identifier: A5:FB:19:54:3D:FD:41:21:D3:74:77:82:D3:CA:43:1B:3B:DF:BD:F6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A3D96A24D2D099924AED71A34296BEF8718E988
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146249.roa
Signing time: Fri 22 May 2026 04:27:13 +0000
ROA not before: Fri 22 May 2026 04:22:13 +0000
ROA not after: Fri 21 May 2027 04:27:13 +0000
asID: 146249
IP address blocks: 240a:ae0f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3d:96:a2:4d:2d:09:99:24:ae:d7:1a:34:29:6b:ef:87:18:e9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:13 2026 GMT
Not After : May 21 04:27:13 2027 GMT
Subject: CN=A5FB19543DFD4121D3747782D3CA431B3BDFBDF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:d2:cc:1f:b1:8c:be:1f:a5:f4:83:ec:40:
3e:f3:51:0a:70:2c:f7:8a:d0:26:f4:ed:67:a3:58:
69:52:49:52:73:52:8b:ab:b0:ff:7f:a8:d6:8c:4e:
51:7d:de:81:a8:65:6e:24:44:87:79:32:8a:2c:a2:
f4:36:d2:64:12:8d:de:3f:77:93:0d:63:7e:ba:3d:
33:7e:a3:86:c8:7c:e1:f3:f0:8c:6d:70:20:2d:08:
d6:6f:f2:61:8c:53:4c:e2:67:82:5b:41:c8:b6:92:
9c:a4:99:03:81:39:d8:f9:4f:14:e4:82:5f:77:60:
3e:3c:78:3a:aa:f7:78:2b:22:e7:fe:bc:7e:1e:e7:
2c:31:4d:47:a6:b5:bc:29:07:95:ac:e7:f8:18:ea:
6b:eb:8f:36:90:6c:f8:76:c4:4e:f5:db:53:09:d5:
bb:e1:0b:cc:fa:bb:42:35:a7:b4:3c:db:2f:1a:d6:
69:48:c2:6e:8e:bd:7d:ad:b4:0d:e6:01:ae:65:dd:
4e:f9:bc:b8:99:78:de:c4:9b:b9:3e:a0:cf:82:dd:
4a:60:70:ac:b7:48:9a:2e:d8:6f:69:47:ba:38:ec:
c3:22:d4:0a:1e:8e:10:87:fa:6d:37:fb:f9:d5:38:
fc:65:db:c9:d0:d0:03:1c:40:2b:34:1b:5a:9b:43:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FB:19:54:3D:FD:41:21:D3:74:77:82:D3:CA:43:1B:3B:DF:BD:F6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146249.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae0f::/32
Signature Algorithm: sha256WithRSAEncryption
57:2c:25:93:af:f0:a3:08:23:e7:0f:35:72:27:85:c2:4f:98:
bc:c5:0c:74:c3:aa:ba:f1:5a:c0:b3:6f:72:e9:50:a9:40:3e:
e7:fa:a9:10:16:0e:ec:2d:a9:b2:ce:e9:0b:4a:3c:ce:d0:c8:
c0:0f:e2:d0:02:0e:f7:9f:72:1d:88:ad:38:33:56:f5:dc:d3:
00:51:11:b0:8b:ea:74:a6:ac:dd:a9:2f:11:10:71:c7:a5:d0:
2e:00:e3:e2:a3:62:f5:e8:16:7e:0d:d1:8e:69:88:05:b1:21:
c3:cb:56:2d:5f:27:28:e0:60:1f:9c:3f:88:fb:4f:f4:c6:12:
86:8f:e9:05:54:9a:b8:0a:ac:87:5d:5f:2f:88:31:bb:6a:d5:
c4:ef:f5:8f:71:95:ea:c0:eb:b9:bb:b6:91:b3:b8:b2:9d:de:
38:ff:39:cc:ea:b1:5d:74:67:12:07:22:68:8c:26:66:be:54:
67:66:f3:9f:ff:af:a2:f5:d6:bb:b6:fc:40:fa:52:89:b7:b4:
e5:27:05:aa:fd:9d:b5:2d:ba:59:1e:a7:1a:9e:31:15:45:b3:
34:8f:82:74:91:7e:e3:23:4e:c1:6d:77:79:04:a1:eb:b1:d7:
2c:df:0c:ee:8d:e2:98:68:33:16:2e:2b:74:7b:1d:4b:53:4e:
6d:7c:9e:d9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCj2Wok0tCZkkrtcaNClr74cY6YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMTNaFw0yNzA1MjEwNDI3MTNaMDMxMTAvBgNV
BAMTKEE1RkIxOTU0M0RGRDQxMjFEMzc0Nzc4MkQzQ0E0MzFCM0JERkJERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmtLMH7GMvh+l9IPsQD7zUQpw
LPeK0Cb07WejWGlSSVJzUoursP9/qNaMTlF93oGoZW4kRId5MoosovQ20mQSjd4/
d5MNY366PTN+o4bIfOHz8IxtcCAtCNZv8mGMU0ziZ4JbQci2kpykmQOBOdj5TxTk
gl93YD48eDqq93grIuf+vH4e5ywxTUemtbwpB5Ws5/gY6mvrjzaQbPh2xE7121MJ
1bvhC8z6u0I1p7Q82y8a1mlIwm6OvX2ttA3mAa5l3U75vLiZeN7Em7k+oM+C3Upg
cKy3SJou2G9pR7o47MMi1AoejhCH+m03+/nVOPxl28nQ0AMcQCs0G1qbQ5zRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUpfsZVD39QSHTdHeC08pDGzvfvfYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquDzANBgkqhkiG9w0BAQsFAAOCAQEAVywl
k6/wowgj5w81cieFwk+YvMUMdMOquvFawLNvculQqUA+5/qpEBYO7C2pss7pC0o8
ztDIwA/i0AIO959yHYitODNW9dzTAFERsIvqdKas3akvERBxx6XQLgDj4qNi9egW
fg3RjmmIBbEhw8tWLV8nKOBgH5w/iPtP9MYSho/pBVSauAqsh11fL4gxu2rVxO/1
j3GV6sDrubu2kbO4sp3eOP85zOqxXXRnEgciaIwmZr5UZ2bzn/+vovXWu7b8QPpS
ibe05ScFqv2dtS26WR6nGp4xFUWzNI+CdJF+4yNOwW13eQSh67HXLN8M7o3imGgz
Fi4rdHsdS1NObXye2Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:04 2026 by rpki-client