Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146348.roa
File: AS146348.roa (raw, json)
Hash identifier: 9gDC0wQBABEv06cZzghP+3g5QvVMKYXe69kYFPw3BEg=
Subject key identifier: 4C:B1:63:BF:D0:C2:2F:41:C3:4A:4B:D7:3B:BB:02:07:7F:E7:CD:A1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 69C5AC36F66E95E1688DC98D85A2BEFF584B0E86
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146348.roa
Signing time: Mon 25 May 2026 01:20:02 +0000
ROA not before: Mon 25 May 2026 01:15:02 +0000
ROA not after: Mon 24 May 2027 01:20:02 +0000
asID: 146348
IP address blocks: 240a:ae72::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c5:ac:36:f6:6e:95:e1:68:8d:c9:8d:85:a2:be:ff:58:4b:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:02 2026 GMT
Not After : May 24 01:20:02 2027 GMT
Subject: CN=4CB163BFD0C22F41C34A4BD73BBB02077FE7CDA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d3:19:bc:6d:db:3a:75:97:81:94:fb:4e:f1:
98:a2:ad:a4:5a:e1:62:d7:06:6e:2e:10:fb:26:68:
10:ce:a0:0b:dd:3e:38:d0:8a:e4:33:33:e7:d7:fe:
51:7e:22:41:64:44:59:74:79:81:a3:96:3c:bd:ee:
8c:df:d0:96:bb:4e:13:e1:07:ec:8c:ef:c7:98:e0:
b0:18:40:b5:6d:ad:f3:87:12:13:49:a9:81:f0:8a:
51:f9:83:1e:55:2b:14:93:4b:4b:bd:82:4e:2b:e2:
1f:c1:92:5a:a2:8b:9c:ae:cf:5e:5a:ec:03:42:02:
a4:14:08:fb:44:5a:a7:a7:ce:ae:f2:b6:6d:26:a1:
e1:86:1e:78:df:4c:2d:fc:1f:2b:54:54:67:20:a7:
25:c6:ff:b9:42:ab:51:3f:cf:d0:de:23:c9:2c:36:
48:87:79:b0:e6:d5:de:c5:bc:5b:c9:df:e6:21:02:
d7:7f:eb:19:2f:2b:7a:fd:13:49:bc:ef:fa:55:eb:
8e:61:7b:9c:da:20:86:3a:c3:ab:b7:89:33:16:b5:
98:c1:0e:56:f8:ab:81:7e:b9:00:57:6a:4f:71:6c:
1f:94:1f:b3:50:53:17:8e:2c:fa:98:7e:ab:c0:1c:
6c:77:4e:cc:2f:0d:4a:de:18:ee:60:34:7e:b6:85:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B1:63:BF:D0:C2:2F:41:C3:4A:4B:D7:3B:BB:02:07:7F:E7:CD:A1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146348.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae72::/32
Signature Algorithm: sha256WithRSAEncryption
02:0b:44:cf:4c:d3:d9:b1:b7:72:5d:61:74:01:ad:c0:94:dc:
f9:d2:10:18:aa:9f:77:dc:3b:0d:78:e3:30:00:3f:08:67:a4:
55:3e:07:44:79:d4:f0:e0:5d:4e:a3:07:03:65:46:73:b5:f4:
e0:5d:5b:0d:19:27:cb:51:28:c6:27:d5:da:08:24:87:64:3b:
58:94:cb:9a:63:9b:8e:6e:bc:0f:db:d2:c3:35:43:03:16:f3:
d5:b2:57:5e:05:b2:93:30:17:2f:55:f8:a4:cb:b2:cc:96:17:
8f:d9:d4:20:ff:dc:6d:54:6e:e6:1e:3b:6e:f9:79:db:70:5e:
11:3f:5e:c9:ec:80:cf:32:67:f4:cf:53:be:61:63:23:a2:1e:
e2:6c:b9:2f:fa:af:0f:fb:ac:94:d5:7f:fc:0f:b0:5c:7c:26:
a8:fd:d4:bc:2b:af:de:f2:50:38:19:72:a7:cb:08:71:b4:98:
6f:36:96:f7:a2:67:4c:1c:5c:72:af:dd:b5:7e:c1:52:7f:c2:
55:c0:3c:a4:12:dd:61:2d:18:6e:db:d3:12:2b:9a:c9:15:a6:
dc:43:fd:ff:30:8f:37:01:5f:8e:1a:fa:fe:9d:c7:65:05:dc:
96:04:27:68:e5:55:b9:97:f0:76:fc:06:c1:4b:19:db:cd:89:
4b:87:16:39
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUacWsNvZuleFojcmNhaK+/1hLDoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MDJaFw0yNzA1MjQwMTIwMDJaMDMxMTAvBgNV
BAMTKDRDQjE2M0JGRDBDMjJGNDFDMzRBNEJENzNCQkIwMjA3N0ZFN0NEQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp0xm8bds6dZeBlPtO8ZiiraRa
4WLXBm4uEPsmaBDOoAvdPjjQiuQzM+fX/lF+IkFkRFl0eYGjljy97ozf0Ja7ThPh
B+yM78eY4LAYQLVtrfOHEhNJqYHwilH5gx5VKxSTS0u9gk4r4h/Bklqii5yuz15a
7ANCAqQUCPtEWqenzq7ytm0moeGGHnjfTC38HytUVGcgpyXG/7lCq1E/z9DeI8ks
NkiHebDm1d7FvFvJ3+YhAtd/6xkvK3r9E0m87/pV645he5zaIIY6w6u3iTMWtZjB
Dlb4q4F+uQBXak9xbB+UH7NQUxeOLPqYfqvAHGx3TswvDUreGO5gNH62hQuRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTLFjv9DCL0HDSkvXO7sCB3/nzaEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqucjANBgkqhkiG9w0BAQsFAAOCAQEAAgtE
z0zT2bG3cl1hdAGtwJTc+dIQGKqfd9w7DXjjMAA/CGekVT4HRHnU8OBdTqMHA2VG
c7X04F1bDRkny1EoxifV2ggkh2Q7WJTLmmObjm68D9vSwzVDAxbz1bJXXgWykzAX
L1X4pMuyzJYXj9nUIP/cbVRu5h47bvl523BeET9eyeyAzzJn9M9TvmFjI6Ie4my5
L/qvD/uslNV//A+wXHwmqP3UvCuv3vJQOBlyp8sIcbSYbzaW96JnTBxccq/dtX7B
Un/CVcA8pBLdYS0YbtvTEiuayRWm3EP9/zCPNwFfjhr6/p3HZQXclgQnaOVVuZfw
dvwGwUsZ282JS4cWOQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:44 2026 by rpki-client