Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146258.roa
File: AS146258.roa (raw, json)
Hash identifier: FIas3tBxc+Q6xdLAbs2HOVMzdvdbN/XNhYv3Bv4iUi4=
Subject key identifier: 41:1A:9C:96:F5:86:CF:8D:7D:6F:44:E7:DF:96:1A:48:C7:67:D7:A9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 445D7890B04A060B9624A7FA288D104861EACF0B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146258.roa
Signing time: Fri 22 May 2026 07:32:06 +0000
ROA not before: Fri 22 May 2026 07:27:06 +0000
ROA not after: Fri 21 May 2027 07:32:06 +0000
asID: 146258
IP address blocks: 240a:ae18::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5d:78:90:b0:4a:06:0b:96:24:a7:fa:28:8d:10:48:61:ea:cf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:06 2026 GMT
Not After : May 21 07:32:06 2027 GMT
Subject: CN=411A9C96F586CF8D7D6F44E7DF961A48C767D7A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:78:81:5e:33:78:08:ea:24:a9:da:5c:5e:
7e:e6:1d:8d:81:cb:ba:e7:b4:54:61:fd:2e:34:68:
a0:48:b6:7b:07:b9:fb:81:41:bb:2b:74:f0:c0:64:
f1:0d:84:ca:e6:0e:cd:7e:f7:37:a5:28:f9:b2:88:
32:0a:3f:80:0c:23:b3:8d:95:e2:e4:cc:d0:ed:c0:
70:63:6c:0f:04:96:46:61:7f:bc:03:63:ee:ad:07:
e0:73:55:2d:91:85:2b:23:cf:b0:74:87:c7:e4:e0:
a8:d6:a2:30:a3:c3:c9:eb:79:e2:a8:a0:48:08:12:
df:5b:43:b8:0d:fb:a2:68:e1:30:18:e9:6b:53:b0:
d6:66:14:1a:3c:0e:29:fe:25:c7:aa:e5:a2:4f:a4:
35:46:54:e1:08:62:f5:a6:5a:40:d0:3c:6b:b8:b9:
02:90:b4:c7:97:02:75:33:48:1e:85:0a:34:14:ed:
ed:0b:aa:8b:df:96:0f:af:f0:f5:2f:ff:52:68:a4:
ab:7c:2f:e8:d5:d0:f3:42:e1:00:dc:7f:cf:6f:1f:
43:29:73:61:ed:1f:e2:ce:b8:63:81:da:86:41:18:
93:db:78:20:f7:51:2a:25:22:21:a5:f1:6a:8c:b7:
9d:92:00:cd:f1:eb:20:68:9d:f9:d2:2e:68:92:e8:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1A:9C:96:F5:86:CF:8D:7D:6F:44:E7:DF:96:1A:48:C7:67:D7:A9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146258.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae18::/32
Signature Algorithm: sha256WithRSAEncryption
19:c0:3a:b6:32:15:e6:99:dc:b9:4c:7d:62:32:dd:71:99:fe:
13:a8:44:24:17:56:d0:14:e4:6b:f9:45:66:05:e1:b9:71:87:
d8:2c:4f:0f:40:c7:f6:3a:67:73:b6:80:ad:83:e4:fe:e2:37:
8f:e7:9d:4f:23:cb:b6:5f:af:f2:0b:8b:f7:49:96:32:76:ab:
2b:11:70:01:15:55:f4:4a:a2:9f:a8:3f:b6:0d:6a:79:6e:42:
1b:9c:77:c9:5d:17:ef:72:d2:6e:db:75:d7:dd:1f:38:80:c5:
d7:93:b4:33:02:bd:84:de:d9:45:08:a7:bb:89:ee:7b:d0:24:
c6:74:33:76:77:9b:c6:47:61:19:e5:75:b6:4e:1b:fc:03:9e:
35:85:e0:f0:92:24:e0:4b:24:b2:a2:42:cd:8b:d1:8f:0a:3d:
18:ad:47:f7:35:c3:73:26:79:8d:64:05:19:cf:43:5c:63:2b:
b1:19:1f:79:d6:47:22:83:a8:44:53:9c:7f:b1:6c:79:c1:dc:
f4:65:29:d8:0d:cf:c4:e0:6a:a2:ed:d0:9f:8b:71:05:39:b5:
95:52:ef:da:9a:de:fd:c8:45:3d:a1:42:a2:40:3c:f5:fc:7d:
83:ee:e6:e1:4b:18:91:a4:83:a0:40:f2:27:43:95:4d:f2:80:
f4:0b:a0:cb
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURF14kLBKBguWJKf6KI0QSGHqzwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MDZaFw0yNzA1MjEwNzMyMDZaMDMxMTAvBgNV
BAMTKDQxMUE5Qzk2RjU4NkNGOEQ3RDZGNDRFN0RGOTYxQTQ4Qzc2N0Q3QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMniBXjN4COokqdpcXn7mHY2B
y7rntFRh/S40aKBItnsHufuBQbsrdPDAZPENhMrmDs1+9zelKPmyiDIKP4AMI7ON
leLkzNDtwHBjbA8ElkZhf7wDY+6tB+BzVS2RhSsjz7B0h8fk4KjWojCjw8nreeKo
oEgIEt9bQ7gN+6Jo4TAY6WtTsNZmFBo8Din+Jceq5aJPpDVGVOEIYvWmWkDQPGu4
uQKQtMeXAnUzSB6FCjQU7e0Lqovflg+v8PUv/1JopKt8L+jV0PNC4QDcf89vH0Mp
c2HtH+LOuGOB2oZBGJPbeCD3USolIiGl8WqMt52SAM3x6yBonfnSLmiS6MTLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUQRqclvWGz419b0Tn35YaSMdn16kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MjU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquGDANBgkqhkiG9w0BAQsFAAOCAQEAGcA6
tjIV5pncuUx9YjLdcZn+E6hEJBdW0BTka/lFZgXhuXGH2CxPD0DH9jpnc7aArYPk
/uI3j+edTyPLtl+v8guL90mWMnarKxFwARVV9Eqin6g/tg1qeW5CG5x3yV0X73LS
btt1190fOIDF15O0MwK9hN7ZRQinu4nue9AkxnQzdnebxkdhGeV1tk4b/AOeNYXg
8JIk4EsksqJCzYvRjwo9GK1H9zXDcyZ5jWQFGc9DXGMrsRkfedZHIoOoRFOcf7Fs
ecHc9GUp2A3PxOBqou3Qn4txBTm1lVLv2pre/chFPaFCokA89fx9g+7m4UsYkaSD
oEDyJ0OVTfKA9Augyw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:33 2026 by rpki-client