Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146337.roa
File: AS146337.roa (raw, json)
Hash identifier: 6DG08f8O5wOh8qaoL1UnFcGXDj6R4VebQ2ZEBj4yPys=
Subject key identifier: 23:36:69:1F:AA:57:21:C6:B1:E9:82:93:C4:EB:2D:A4:7F:89:BA:7A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C2E2EA817CDCF7C19027E6EBD9892DC61712EA4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146337.roa
Signing time: Fri 22 May 2026 06:46:10 +0000
ROA not before: Fri 22 May 2026 06:41:10 +0000
ROA not after: Fri 21 May 2027 06:46:10 +0000
asID: 146337
IP address blocks: 240a:ae67::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:2e:2e:a8:17:cd:cf:7c:19:02:7e:6e:bd:98:92:dc:61:71:2e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:10 2026 GMT
Not After : May 21 06:46:10 2027 GMT
Subject: CN=2336691FAA5721C6B1E98293C4EB2DA47F89BA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:60:b5:48:7a:c3:6d:ec:01:29:25:98:ae:
91:6b:4b:93:61:bb:c5:d5:ce:06:b0:5b:bc:28:8d:
7c:0c:4e:5c:a0:e2:ca:a1:bd:63:dc:d5:ff:84:4e:
0a:32:d2:3d:43:3f:e0:21:df:3f:5b:fc:c6:f8:f6:
60:08:aa:07:bf:57:83:4e:d7:d4:f4:bd:51:50:63:
ca:8f:d8:e6:a2:2c:16:6d:65:e9:49:0f:60:ca:c5:
76:35:e5:8d:c5:7f:21:7f:e5:75:c0:9e:f3:28:42:
22:bf:6d:3f:69:a1:05:36:2c:11:db:5e:3a:2b:14:
2f:1c:9a:3a:ce:88:ad:1d:26:64:c2:2d:ed:10:49:
d2:ed:ed:03:f2:4f:88:6d:d0:b0:45:cd:ae:13:e7:
91:c6:0c:d7:1e:27:1c:2f:91:ad:4c:75:05:fd:cb:
b4:09:62:69:86:92:fc:72:8f:19:15:4c:2b:36:ad:
4c:66:32:47:81:af:c7:c3:9e:6c:97:2d:bd:55:72:
aa:32:c8:8c:97:49:61:8f:4c:11:ab:56:6a:5b:34:
1d:9e:f7:64:18:fe:08:bc:d4:42:db:83:77:2b:e5:
1c:38:e4:c6:ff:63:5c:bf:cb:e0:a4:71:c6:8a:03:
66:ac:2e:d6:03:6d:11:71:a8:c8:31:4f:5c:b0:2a:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:36:69:1F:AA:57:21:C6:B1:E9:82:93:C4:EB:2D:A4:7F:89:BA:7A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae67::/32
Signature Algorithm: sha256WithRSAEncryption
07:c8:6f:15:16:15:95:28:27:8e:83:97:85:1e:2f:4e:fe:11:
84:1e:67:fd:3e:f8:61:2b:34:b3:74:92:5f:62:72:73:15:55:
10:ac:c4:c1:1d:40:9e:34:85:b4:05:d8:4b:d0:af:4f:e6:ef:
24:c2:76:a9:4c:36:6c:69:3f:db:14:8f:fc:4a:70:c6:09:6d:
27:fe:54:d0:a9:2b:c2:3f:7e:2a:3e:d6:14:5a:1f:1d:42:0f:
47:62:89:09:c1:4e:c2:a5:e6:27:67:30:14:9c:23:aa:fe:6e:
97:a9:74:30:01:cb:8f:76:72:89:a8:4b:46:ff:71:d7:0b:9e:
a6:cd:14:d6:59:46:71:7e:30:0e:aa:fe:be:d2:fb:70:75:c7:
91:32:4e:2d:15:bd:0e:23:2b:3f:9d:5e:3e:a4:ce:21:0a:10:
45:dc:ab:5e:37:04:ee:4e:bd:ed:df:f6:ef:8b:85:4a:5a:08:
23:2b:c3:73:a3:2d:d0:01:82:4b:76:9e:cf:67:09:7c:eb:02:
42:8a:e8:95:16:0a:59:5d:26:74:11:e9:b1:68:2a:f6:b6:87:
25:64:e4:93:97:e0:31:3b:cb:05:46:2b:82:61:39:6b:39:42:
99:20:91:85:69:35:2d:93:4a:87:72:af:66:39:c3:a1:a0:e8:
f9:b8:46:6c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfC4uqBfNz3wZAn5uvZiS3GFxLqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTBaFw0yNzA1MjEwNjQ2MTBaMDMxMTAvBgNV
BAMTKDIzMzY2OTFGQUE1NzIxQzZCMUU5ODI5M0M0RUIyREE0N0Y4OUJBN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdmC1SHrDbewBKSWYrpFrS5Nh
u8XVzgawW7wojXwMTlyg4sqhvWPc1f+ETgoy0j1DP+Ah3z9b/Mb49mAIqge/V4NO
19T0vVFQY8qP2OaiLBZtZelJD2DKxXY15Y3FfyF/5XXAnvMoQiK/bT9poQU2LBHb
XjorFC8cmjrOiK0dJmTCLe0QSdLt7QPyT4ht0LBFza4T55HGDNceJxwvka1MdQX9
y7QJYmmGkvxyjxkVTCs2rUxmMkeBr8fDnmyXLb1VcqoyyIyXSWGPTBGrVmpbNB2e
92QY/gi81ELbg3cr5Rw45Mb/Y1y/y+CkccaKA2asLtYDbRFxqMgxT1ywKpIFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUIzZpH6pXIcax6YKTxOstpH+JunowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquZzANBgkqhkiG9w0BAQsFAAOCAQEAB8hv
FRYVlSgnjoOXhR4vTv4RhB5n/T74YSs0s3SSX2JycxVVEKzEwR1AnjSFtAXYS9Cv
T+bvJMJ2qUw2bGk/2xSP/EpwxgltJ/5U0Kkrwj9+Kj7WFFofHUIPR2KJCcFOwqXm
J2cwFJwjqv5ul6l0MAHLj3ZyiahLRv9x1wueps0U1llGcX4wDqr+vtL7cHXHkTJO
LRW9DiMrP51ePqTOIQoQRdyrXjcE7k697d/274uFSloIIyvDc6Mt0AGCS3aez2cJ
fOsCQorolRYKWV0mdBHpsWgq9raHJWTkk5fgMTvLBUYrgmE5azlCmSCRhWk1LZNK
h3KvZjnDoaDo+bhGbA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:45 2026 by rpki-client