Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146298.roa
File: AS146298.roa (raw, json)
Hash identifier: WzVHFqk4qPVp2JIKD6gWUWW6ZehYmRCAnc+IUBiuvUg=
Subject key identifier: B8:DC:2C:E2:23:33:B5:80:E4:43:B2:96:98:B5:4C:48:2F:65:E8:E6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5E1BE873594F63EA0C9CD70347FDA80B8D4CD8AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146298.roa
Signing time: Mon 25 May 2026 01:38:24 +0000
ROA not before: Mon 25 May 2026 01:33:24 +0000
ROA not after: Mon 24 May 2027 01:38:24 +0000
asID: 146298
IP address blocks: 240a:ae40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:1b:e8:73:59:4f:63:ea:0c:9c:d7:03:47:fd:a8:0b:8d:4c:d8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:24 2026 GMT
Not After : May 24 01:38:24 2027 GMT
Subject: CN=B8DC2CE22333B580E443B29698B54C482F65E8E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:13:47:44:4a:ea:5c:cc:45:5f:86:03:c0:
7b:29:94:de:dc:af:00:a4:d8:12:6c:b4:47:0a:99:
67:ae:b1:6f:92:87:c4:5c:bf:b8:a0:28:5b:3c:ec:
a0:cc:3f:9d:e3:d5:cd:64:a1:41:c4:00:fb:3b:86:
36:7d:55:94:cd:e6:f9:1a:3b:f7:f4:f9:e1:50:8d:
b7:53:56:7c:75:00:8b:b2:71:32:a4:69:db:79:74:
a0:f0:ac:07:3e:21:bc:2e:45:6e:90:9e:b6:26:59:
51:6e:a0:a6:8f:82:e3:ce:0e:9a:b9:6f:f9:43:72:
24:85:c4:37:32:b9:71:50:f5:ee:6b:d2:d6:f5:53:
c3:a6:f5:e8:07:f5:14:c9:d8:2f:b1:ff:f5:a3:c3:
0c:75:17:85:36:d5:39:26:94:e6:0e:35:23:ff:6a:
84:70:42:6d:fb:36:a0:98:ff:47:5f:20:ed:ed:6d:
91:16:f9:41:7d:7b:a6:de:de:a8:e7:03:45:64:6f:
19:22:bb:91:f3:97:67:5b:a8:3b:95:71:55:d6:b9:
06:38:6e:18:18:99:e3:9b:f9:5e:ee:7a:0b:f7:36:
63:44:8b:b6:22:73:50:7e:9a:41:03:5b:0c:51:36:
60:52:83:12:8d:34:b1:20:91:f2:81:f7:fa:06:f6:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DC:2C:E2:23:33:B5:80:E4:43:B2:96:98:B5:4C:48:2F:65:E8:E6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146298.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
76:56:d6:b2:e7:db:5e:47:26:60:d8:2d:d0:16:3f:96:5d:45:
91:a4:11:bb:21:83:bd:a5:c4:7e:97:5b:50:be:4e:1a:4e:34:
b2:33:18:1f:00:bc:34:5f:33:00:18:3b:35:92:8d:08:d6:93:
53:9d:ba:0e:4e:ec:55:b0:48:ee:c5:fc:5d:66:e5:0c:c7:17:
80:68:27:67:24:7d:5b:7a:1a:69:80:2a:45:97:43:04:b8:d8:
00:a9:fe:02:4a:3b:af:12:80:08:36:bd:6e:0d:4b:ff:aa:80:
a5:24:0d:d5:ee:12:ec:fe:b5:47:ec:f4:45:9e:31:10:6f:88:
84:e0:00:15:56:bf:45:3e:a0:c6:bf:48:c6:fa:e1:b1:a9:5d:
5d:e1:07:e9:56:6d:85:30:79:1c:cb:a5:a6:b2:7e:4c:04:95:
40:b7:1b:35:d5:57:3f:18:2f:ed:e2:b8:a2:66:7b:e2:4d:48:
8e:8b:fc:70:81:ff:6a:af:1c:41:86:3f:08:b3:09:e0:16:d8:
6c:c7:70:2a:0c:b6:b4:45:10:26:22:bc:20:53:6e:98:21:0d:
d4:a4:58:3f:ef:c3:a8:8f:a4:e6:c2:93:8e:4b:14:70:fa:b3:
b0:85:f4:25:3e:c5:e5:35:7d:f4:f5:84:33:ba:84:31:55:a3:
68:4e:7c:77
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXhvoc1lPY+oMnNcDR/2oC41M2K8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMjRaFw0yNzA1MjQwMTM4MjRaMDMxMTAvBgNV
BAMTKEI4REMyQ0UyMjMzM0I1ODBFNDQzQjI5Njk4QjU0QzQ4MkY2NUU4RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0hNHRErqXMxFX4YDwHsplN7c
rwCk2BJstEcKmWeusW+Sh8Rcv7igKFs87KDMP53j1c1koUHEAPs7hjZ9VZTN5vka
O/f0+eFQjbdTVnx1AIuycTKkadt5dKDwrAc+IbwuRW6QnrYmWVFuoKaPguPODpq5
b/lDciSFxDcyuXFQ9e5r0tb1U8Om9egH9RTJ2C+x//Wjwwx1F4U21TkmlOYONSP/
aoRwQm37NqCY/0dfIO3tbZEW+UF9e6be3qjnA0Vkbxkiu5Hzl2dbqDuVcVXWuQY4
bhgYmeOb+V7uegv3NmNEi7Yic1B+mkEDWwxRNmBSgxKNNLEgkfKB9/oG9huvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUuNws4iMztYDkQ7KWmLVMSC9l6OYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2Mjk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquQDANBgkqhkiG9w0BAQsFAAOCAQEAdlbW
sufbXkcmYNgt0BY/ll1FkaQRuyGDvaXEfpdbUL5OGk40sjMYHwC8NF8zABg7NZKN
CNaTU526Dk7sVbBI7sX8XWblDMcXgGgnZyR9W3oaaYAqRZdDBLjYAKn+Ako7rxKA
CDa9bg1L/6qApSQN1e4S7P61R+z0RZ4xEG+IhOAAFVa/RT6gxr9IxvrhsaldXeEH
6VZthTB5HMulprJ+TASVQLcbNdVXPxgv7eK4omZ74k1Ijov8cIH/aq8cQYY/CLMJ
4BbYbMdwKgy2tEUQJiK8IFNumCEN1KRYP+/DqI+k5sKTjksUcPqzsIX0JT7F5TV9
9PWEM7qEMVWjaE58dw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:21 2026 by rpki-client