Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146309.roa
File: AS146309.roa (raw, json)
Hash identifier: 1C/w0GmVEAbYSozdRmtMgraleRCy5FTMYDJOb7esMhk=
Subject key identifier: 3A:60:8D:A0:F6:2E:6C:8A:E6:ED:E6:FA:4E:64:49:A2:2D:B8:69:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 03966FEC8D51870945592D26D591AD6E36D7A356
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146309.roa
Signing time: Fri 22 May 2026 06:46:27 +0000
ROA not before: Fri 22 May 2026 06:41:27 +0000
ROA not after: Fri 21 May 2027 06:46:27 +0000
asID: 146309
IP address blocks: 240a:ae4b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:96:6f:ec:8d:51:87:09:45:59:2d:26:d5:91:ad:6e:36:d7:a3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:27 2026 GMT
Not After : May 21 06:46:27 2027 GMT
Subject: CN=3A608DA0F62E6C8AE6EDE6FA4E6449A22DB86908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:54:70:37:ed:78:17:58:26:7c:a2:4f:c2:
65:ed:fc:86:31:f0:dd:4e:85:13:c5:8d:82:c7:d9:
55:c2:4e:7b:4b:11:31:00:ce:2b:0d:f1:c9:13:a7:
71:13:01:71:68:f6:62:cc:60:70:cc:2f:89:f2:63:
d2:77:48:1d:0d:c6:4f:a7:21:b1:52:52:f6:29:21:
92:82:a2:5c:04:54:36:b0:61:94:e8:32:db:a9:51:
24:6a:bf:e6:a6:76:fa:00:90:91:80:fc:e8:a1:2e:
07:be:a6:da:7e:49:d4:2e:ea:1e:e9:9d:5a:ad:e2:
b2:b3:33:28:40:60:97:69:4b:9c:0d:60:3b:50:22:
01:a2:5f:9d:a1:1b:7c:f3:8b:49:da:5d:66:b0:b8:
5f:8d:93:21:98:53:a8:b3:ac:c7:8a:05:50:7c:ea:
b6:35:a5:75:fd:4c:c7:40:a1:19:b8:4f:ed:45:28:
1d:e7:d1:1a:c6:e7:69:0b:17:80:70:68:b2:ed:06:
9d:be:59:17:52:a3:6e:ab:96:1a:55:dd:66:6d:48:
18:14:d8:6c:4e:48:7b:35:1e:1b:21:d2:d0:ee:ff:
aa:cb:35:40:ca:71:4e:87:21:4d:c6:29:58:d2:09:
00:2b:15:6b:a0:ae:20:84:45:b9:b1:3b:ce:9f:1a:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:60:8D:A0:F6:2E:6C:8A:E6:ED:E6:FA:4E:64:49:A2:2D:B8:69:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146309.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae4b::/32
Signature Algorithm: sha256WithRSAEncryption
44:a9:a7:2d:3c:71:0e:5d:fb:78:34:4a:82:fd:4c:0d:ef:22:
21:1b:dd:3a:16:15:e2:b2:df:0f:c6:d9:a0:ad:ea:aa:33:33:
fa:3b:2e:a3:87:ff:d9:b3:d6:ab:55:61:ea:05:91:28:c1:85:
c0:fe:0d:62:6a:5c:dd:08:2c:ef:0a:78:56:09:11:e9:98:07:
9c:01:8a:94:bd:bb:9d:3f:f2:11:20:57:56:a6:59:b3:a3:72:
17:03:7d:7c:2d:dd:12:24:36:b3:9e:9c:a9:cf:ad:4d:28:23:
6d:89:cc:50:64:25:22:5d:01:7a:60:6b:6a:93:23:3a:a6:b3:
ad:fb:a8:06:f1:2d:1a:5e:d7:18:03:cd:cf:70:be:61:3d:a1:
2b:f5:23:b0:aa:6a:90:77:2d:10:8a:92:a8:e5:13:55:cd:47:
54:86:9d:42:2c:56:82:81:d4:b0:be:ff:36:ed:22:7d:23:d2:
1a:7b:51:04:0c:09:c5:7e:dd:df:d1:f2:26:36:3b:1d:0d:52:
e4:02:73:8a:7b:44:61:9d:d2:2c:60:a4:59:ae:87:93:a6:07:
69:b4:2a:8b:e4:4e:5f:a8:80:7e:14:f8:f8:a8:82:6c:3f:07:
02:1b:fc:8f:27:00:4d:f9:46:7e:1d:d9:c5:46:b1:0b:d2:43:
7e:38:64:c0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUA5Zv7I1RhwlFWS0m1ZGtbjbXo1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMjdaFw0yNzA1MjEwNjQ2MjdaMDMxMTAvBgNV
BAMTKDNBNjA4REEwRjYyRTZDOEFFNkVERTZGQTRFNjQ0OUEyMkRCODY5MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+VRwN+14F1gmfKJPwmXt/IYx
8N1OhRPFjYLH2VXCTntLETEAzisN8ckTp3ETAXFo9mLMYHDML4nyY9J3SB0Nxk+n
IbFSUvYpIZKColwEVDawYZToMtupUSRqv+amdvoAkJGA/OihLge+ptp+SdQu6h7p
nVqt4rKzMyhAYJdpS5wNYDtQIgGiX52hG3zzi0naXWawuF+NkyGYU6izrMeKBVB8
6rY1pXX9TMdAoRm4T+1FKB3n0RrG52kLF4BwaLLtBp2+WRdSo26rlhpV3WZtSBgU
2GxOSHs1Hhsh0tDu/6rLNUDKcU6HIU3GKVjSCQArFWugriCERbmxO86fGibfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOmCNoPYubIrm7eb6TmRJoi24aQgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquSzANBgkqhkiG9w0BAQsFAAOCAQEARKmn
LTxxDl37eDRKgv1MDe8iIRvdOhYV4rLfD8bZoK3qqjMz+jsuo4f/2bPWq1Vh6gWR
KMGFwP4NYmpc3Qgs7wp4VgkR6ZgHnAGKlL27nT/yESBXVqZZs6NyFwN9fC3dEiQ2
s56cqc+tTSgjbYnMUGQlIl0BemBrapMjOqazrfuoBvEtGl7XGAPNz3C+YT2hK/Uj
sKpqkHctEIqSqOUTVc1HVIadQixWgoHUsL7/Nu0ifSPSGntRBAwJxX7d39HyJjY7
HQ1S5AJzintEYZ3SLGCkWa6Hk6YHabQqi+ROX6iAfhT4+KiCbD8HAhv8jycATflG
fh3ZxUaxC9JDfjhkwA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:08 2026 by rpki-client