Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146325.roa
File: AS146325.roa (raw, json)
Hash identifier: tjMZVtKfwz9eltP3hEjxOPw62ipytLjT28FJIV4SBrI=
Subject key identifier: FC:97:2E:51:F6:B7:C2:5F:80:90:A6:0F:04:4C:34:2B:C3:6F:01:14
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 745AF47E32ACAB9957EE9790A8A743C83589C3D9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146325.roa
Signing time: Mon 25 May 2026 06:28:08 +0000
ROA not before: Mon 25 May 2026 06:23:08 +0000
ROA not after: Mon 24 May 2027 06:28:08 +0000
asID: 146325
IP address blocks: 240a:ae5b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5a:f4:7e:32:ac:ab:99:57:ee:97:90:a8:a7:43:c8:35:89:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:08 2026 GMT
Not After : May 24 06:28:08 2027 GMT
Subject: CN=FC972E51F6B7C25F8090A60F044C342BC36F0114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:31:33:79:bc:4e:70:38:9d:b1:8f:86:2e:
ca:3b:d4:df:17:86:4c:3c:ef:4f:24:05:a4:94:8e:
8d:a0:57:d8:ed:40:e1:4f:31:d3:65:d9:86:bc:2a:
da:3b:96:95:14:af:31:09:85:ec:e1:bd:ff:93:85:
60:53:c2:0d:2f:a3:d2:f0:aa:f2:ed:5b:4f:75:11:
99:06:59:cf:db:3f:70:3d:b9:6c:01:88:07:d7:ea:
fe:85:70:92:ca:bd:da:82:37:44:94:93:60:b3:4d:
91:54:bc:7b:ec:17:00:0f:46:09:1e:4f:c7:bd:e6:
98:2a:cf:c4:97:77:4b:0b:2d:5e:2f:db:b9:e2:83:
b7:02:c2:20:aa:59:80:bb:41:da:b0:80:a7:3b:48:
31:51:d9:7a:40:24:e5:69:11:b4:a9:e1:98:03:5b:
01:62:ea:03:34:ea:c2:c5:5b:26:71:44:a6:25:ec:
16:8d:9b:db:c4:c7:23:64:ec:c2:aa:1e:eb:3e:06:
0f:fb:3f:65:a7:b9:42:57:d5:9e:1c:48:b8:ef:17:
1c:41:f6:14:74:7f:76:9e:87:39:75:34:51:2a:c9:
84:a1:c9:bc:ad:46:ea:10:38:a2:19:25:29:79:53:
91:63:22:c0:8c:51:c6:2b:c7:96:52:52:5a:ee:f7:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:2E:51:F6:B7:C2:5F:80:90:A6:0F:04:4C:34:2B:C3:6F:01:14
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae5b::/32
Signature Algorithm: sha256WithRSAEncryption
77:d6:e7:41:8a:8e:f9:d6:04:3e:35:e1:d6:a2:f1:2f:94:ad:
89:24:a9:5d:75:ca:3e:90:4c:45:2c:77:8d:e3:78:eb:9c:a9:
b6:d8:f2:f8:6f:81:14:29:c5:98:70:17:36:e0:76:f1:7c:24:
3b:82:ca:2f:e5:ac:9d:95:46:b7:b7:68:6f:0f:4f:d4:4b:2a:
3a:f2:72:c6:da:d9:b5:bb:73:9a:66:e9:bc:59:61:50:7d:e4:
f8:0d:c4:33:7c:8c:73:9d:fa:8c:4e:f7:3b:a1:a6:00:54:af:
75:df:c5:a5:33:9e:bd:35:60:4b:1b:7c:db:91:66:ea:fa:92:
00:5a:63:71:1f:21:f0:e7:aa:08:ba:97:1f:79:a5:7f:3b:08:
6a:ea:23:1c:ec:cb:09:d0:44:e5:a2:61:ae:7a:49:36:96:a1:
5c:5c:4e:d8:76:bd:93:75:62:8f:29:49:9b:a0:e3:9c:62:76:
53:8a:6e:30:ea:cd:2b:e5:c3:1b:8e:01:47:10:ff:8f:46:e5:
3e:55:7e:41:89:42:ba:3e:9d:73:1d:fd:f5:38:86:bb:c2:30:
7f:a3:71:0f:c1:99:72:06:75:f5:9a:09:0a:b4:30:d3:8d:65:
1d:3b:55:dc:08:be:8c:2c:4f:89:e1:0a:d5:5b:2d:66:28:d4:
60:ec:59:c7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdFr0fjKsq5lX7peQqKdDyDWJw9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMDhaFw0yNzA1MjQwNjI4MDhaMDMxMTAvBgNV
BAMTKEZDOTcyRTUxRjZCN0MyNUY4MDkwQTYwRjA0NEMzNDJCQzM2RjAxMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd5DEzebxOcDidsY+GLso71N8X
hkw8708kBaSUjo2gV9jtQOFPMdNl2Ya8Kto7lpUUrzEJhezhvf+ThWBTwg0vo9Lw
qvLtW091EZkGWc/bP3A9uWwBiAfX6v6FcJLKvdqCN0SUk2CzTZFUvHvsFwAPRgke
T8e95pgqz8SXd0sLLV4v27nig7cCwiCqWYC7QdqwgKc7SDFR2XpAJOVpEbSp4ZgD
WwFi6gM06sLFWyZxRKYl7BaNm9vExyNk7MKqHus+Bg/7P2WnuUJX1Z4cSLjvFxxB
9hR0f3aehzl1NFEqyYShybytRuoQOKIZJSl5U5FjIsCMUcYrx5ZSUlru947xAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/JcuUfa3wl+AkKYPBEw0K8NvARQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquWzANBgkqhkiG9w0BAQsFAAOCAQEAd9bn
QYqO+dYEPjXh1qLxL5StiSSpXXXKPpBMRSx3jeN465ypttjy+G+BFCnFmHAXNuB2
8XwkO4LKL+WsnZVGt7dobw9P1EsqOvJyxtrZtbtzmmbpvFlhUH3k+A3EM3yMc536
jE73O6GmAFSvdd/FpTOevTVgSxt825Fm6vqSAFpjcR8h8OeqCLqXH3mlfzsIauoj
HOzLCdBE5aJhrnpJNpahXFxO2Ha9k3VijylJm6DjnGJ2U4puMOrNK+XDG44BRxD/
j0blPlV+QYlCuj6dcx399TiGu8Iwf6NxD8GZcgZ19ZoJCrQw041lHTtV3Ai+jCxP
ieEK1VstZijUYOxZxw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:55 2026 by rpki-client