Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146254.roa
File: AS146254.roa (raw, json)
Hash identifier: inHLDomanJ0SKZDlWAfEoN9k9Xj9cS5vOEIEAMM2fMY=
Subject key identifier: AF:65:FE:32:44:B7:DB:EB:F0:38:A1:16:F0:5A:FD:02:9B:3E:1A:DD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F7DA5AD18ECE825979DA9CD6ECC6AD0123F4E06
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146254.roa
Signing time: Tue 26 May 2026 08:52:52 +0000
ROA not before: Tue 26 May 2026 08:47:52 +0000
ROA not after: Tue 25 May 2027 08:52:52 +0000
asID: 146254
IP address blocks: 240a:ae14::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7d:a5:ad:18:ec:e8:25:97:9d:a9:cd:6e:cc:6a:d0:12:3f:4e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:52 2026 GMT
Not After : May 25 08:52:52 2027 GMT
Subject: CN=AF65FE3244B7DBEBF038A116F05AFD029B3E1ADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:19:e5:96:b4:9d:a1:6d:d6:a0:3a:74:f1:
2c:81:73:0c:2f:a1:af:a8:e0:a4:64:66:77:c7:61:
e9:f2:56:a0:a1:51:e2:1a:7d:0d:31:0d:7a:4e:3d:
fb:51:18:e9:62:75:26:58:e5:46:f9:11:bb:7d:fb:
ec:7e:4a:dd:0d:ab:ae:3d:d5:6c:da:17:e1:3a:ae:
74:a6:1b:32:e8:b2:59:3e:ed:a0:97:20:0e:3a:71:
74:4e:4c:03:9c:86:01:5c:14:9d:ed:8d:c5:55:3a:
87:e3:f3:3d:21:05:a0:ec:61:ca:36:e9:07:1b:bc:
2f:b8:ff:81:63:5f:22:a2:70:8b:15:d5:0b:34:30:
c9:67:30:33:b0:68:05:af:55:21:45:00:a5:04:07:
31:98:69:fe:86:f6:01:e6:12:df:2d:41:4e:b0:9a:
48:35:b4:1e:30:3a:00:b4:73:c5:14:f9:c6:15:79:
50:78:c1:76:fe:88:05:8e:58:c6:d6:50:2c:50:79:
bc:be:67:2a:4f:88:05:6f:f8:98:9e:cd:f9:8e:7f:
bb:bd:30:01:ea:51:d7:2c:c1:a5:29:93:5b:33:f0:
25:55:ff:c1:29:ec:1e:08:83:4d:9a:10:71:ff:09:
72:77:37:31:16:93:96:2b:60:58:d0:07:d2:4c:0c:
e6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:65:FE:32:44:B7:DB:EB:F0:38:A1:16:F0:5A:FD:02:9B:3E:1A:DD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146254.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae14::/32
Signature Algorithm: sha256WithRSAEncryption
ad:0c:0d:04:8e:65:6a:c4:e4:cc:95:c9:6c:85:fb:02:02:63:
ed:c2:fe:9b:40:14:d0:f1:ed:77:67:7c:0e:da:0c:3d:5a:e0:
dd:b1:0a:a7:b8:5e:00:c0:d1:bd:14:f2:87:f1:b6:86:dd:5d:
98:70:67:67:5f:af:34:b2:d8:2d:66:c7:19:ea:c6:e6:56:66:
16:0e:e0:dd:2c:38:86:9e:87:7a:5c:f9:18:dc:8d:24:5c:ca:
82:99:42:24:26:cd:88:b8:ec:ee:59:8a:f1:08:91:9f:56:7c:
fd:f3:69:00:86:e3:4a:c5:58:ce:0b:5b:f4:a3:54:6c:16:4c:
7d:80:b0:ee:a8:d5:94:c4:5f:91:03:cc:c6:6a:bd:2c:1c:5e:
c9:82:57:f5:05:a6:39:30:42:19:39:2b:9b:c3:b9:42:a7:2a:
c3:5c:9f:05:7f:4f:69:95:82:16:0c:fa:56:9c:31:30:9f:56:
20:5a:8d:a8:28:43:8a:52:8f:c2:36:47:75:2c:20:3f:0a:74:
0f:6f:5c:d3:c0:03:f8:4a:1f:01:19:85:6d:58:7d:3a:93:d4:
3d:fc:a6:41:34:97:93:59:41:20:07:9d:40:8e:7f:d2:a1:2d:
96:1b:16:c8:cd:e5:10:be:62:50:38:e9:a1:2d:12:9f:c2:0c:
c0:3e:fb:68
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUf32lrRjs6CWXnanNbsxq0BI/TgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ3NTJaFw0yNzA1MjUwODUyNTJaMDMxMTAvBgNV
BAMTKEFGNjVGRTMyNDRCN0RCRUJGMDM4QTExNkYwNUFGRDAyOUIzRTFBREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfRnllrSdoW3WoDp08SyBcwwv
oa+o4KRkZnfHYenyVqChUeIafQ0xDXpOPftRGOlidSZY5Ub5Ebt9++x+St0Nq649
1WzaF+E6rnSmGzLoslk+7aCXIA46cXROTAOchgFcFJ3tjcVVOofj8z0hBaDsYco2
6QcbvC+4/4FjXyKicIsV1Qs0MMlnMDOwaAWvVSFFAKUEBzGYaf6G9gHmEt8tQU6w
mkg1tB4wOgC0c8UU+cYVeVB4wXb+iAWOWMbWUCxQeby+ZypPiAVv+JiezfmOf7u9
MAHqUdcswaUpk1sz8CVV/8Ep7B4Ig02aEHH/CXJ3NzEWk5YrYFjQB9JMDOZLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUr2X+MkS32+vwOKEW8Fr9Aps+Gt0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquFDANBgkqhkiG9w0BAQsFAAOCAQEArQwN
BI5lasTkzJXJbIX7AgJj7cL+m0AU0PHtd2d8DtoMPVrg3bEKp7heAMDRvRTyh/G2
ht1dmHBnZ1+vNLLYLWbHGerG5lZmFg7g3Sw4hp6Helz5GNyNJFzKgplCJCbNiLjs
7lmK8QiRn1Z8/fNpAIbjSsVYzgtb9KNUbBZMfYCw7qjVlMRfkQPMxmq9LBxeyYJX
9QWmOTBCGTkrm8O5Qqcqw1yfBX9PaZWCFgz6VpwxMJ9WIFqNqChDilKPwjZHdSwg
Pwp0D29c08AD+EofARmFbVh9OpPUPfymQTSXk1lBIAedQI5/0qEtlhsWyM3lEL5i
UDjpoS0Sn8IMwD77aA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:21 2026 by rpki-client