Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146353.roa
File: AS146353.roa (raw, json)
Hash identifier: 6YS+mzBadPovK6kEJhk41r3TAMl1bj1Bx92dSCNmrPI=
Subject key identifier: 61:8B:DE:92:EE:4A:BA:6D:86:E8:C1:9A:02:73:DB:AC:1F:9C:FA:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 64AD9937C7A22FBF5AE25F2EEC356DA048F5E5A2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146353.roa
Signing time: Tue 26 May 2026 08:52:59 +0000
ROA not before: Tue 26 May 2026 08:47:59 +0000
ROA not after: Tue 25 May 2027 08:52:59 +0000
asID: 146353
IP address blocks: 240a:ae77::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ad:99:37:c7:a2:2f:bf:5a:e2:5f:2e:ec:35:6d:a0:48:f5:e5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:59 2026 GMT
Not After : May 25 08:52:59 2027 GMT
Subject: CN=618BDE92EE4ABA6D86E8C19A0273DBAC1F9CFA4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:68:02:9c:af:fe:5d:b4:07:2f:08:de:11:
68:51:69:62:7a:a5:61:a7:06:b2:f2:bf:41:29:b2:
ce:f4:b3:7f:67:f2:38:c3:15:0c:70:c4:54:14:3e:
d3:8c:a5:8e:d0:ee:a4:98:c6:9e:38:3c:a0:fa:b4:
3c:ff:99:16:42:20:77:9c:23:24:d6:50:90:10:4a:
97:55:5c:96:97:dc:38:4d:48:f6:31:53:10:26:db:
42:b9:e7:53:a2:16:4c:54:50:1d:a5:6b:a3:7f:f3:
51:cc:7a:63:68:0b:9d:eb:91:76:dd:46:1d:e7:48:
96:a3:6c:f3:08:4a:e2:a3:1f:8b:5e:a0:ac:2c:6b:
d0:f4:98:b0:93:fc:18:65:14:c2:6e:dd:4c:28:25:
7b:fe:25:98:f0:5a:51:b6:98:f8:24:2d:1e:49:51:
c7:6b:3f:40:bb:9f:b9:12:29:ba:68:5b:00:46:32:
45:76:a9:b8:9f:c9:5e:ae:f3:31:a6:93:a1:69:f0:
b1:b3:fa:18:0b:86:73:c6:b8:a9:13:56:bd:66:a8:
74:3a:b1:8b:09:4b:8e:48:df:f3:60:f6:da:b9:19:
33:ea:c7:a4:6d:9b:2c:7a:70:7b:e2:a0:d5:2b:a1:
90:c3:13:c6:05:6c:ef:8e:51:b6:3d:fa:ba:a0:59:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8B:DE:92:EE:4A:BA:6D:86:E8:C1:9A:02:73:DB:AC:1F:9C:FA:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146353.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae77::/32
Signature Algorithm: sha256WithRSAEncryption
49:20:bc:53:73:59:25:0c:77:a9:1a:74:75:0f:cd:7f:bc:b2:
74:a4:fc:05:a5:c6:a8:4a:5b:1e:d9:c7:1e:91:eb:80:01:06:
d4:79:f3:d9:17:fe:fa:5f:c9:54:e9:c7:66:d5:e7:ca:57:67:
40:10:7e:b2:59:c8:69:39:0b:3b:9c:99:5c:a1:5f:72:9f:8a:
74:d9:f2:51:2b:64:32:c7:76:9c:4f:e9:36:01:c0:41:24:4a:
63:14:55:07:e7:cc:f1:9e:8c:be:49:88:0b:5e:9b:9f:c5:12:
6f:91:f0:90:23:bb:2f:35:82:64:0d:1a:bb:a1:7a:b2:6c:f5:
29:23:4e:4a:e6:d5:41:15:4e:3b:70:4d:67:cc:95:df:31:46:
88:90:ed:de:15:12:e4:db:de:80:71:48:65:49:fe:74:66:16:
a5:98:65:e9:72:d6:47:ab:16:af:c0:34:d4:6c:b7:64:bd:12:
84:39:5b:d4:06:d3:09:49:4a:11:27:ba:5f:c2:63:19:04:85:
b3:aa:a8:8b:dd:a6:8c:4f:34:5f:5c:8b:c5:78:1a:da:33:88:
a3:b6:7c:dc:f0:30:06:7b:88:2c:61:77:d8:ba:bc:cf:16:e4:
7e:67:f5:7c:43:a7:b0:a3:fe:d6:6d:1c:dd:64:a2:4f:08:66:
24:0a:08:16
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZK2ZN8eiL79a4l8u7DVtoEj15aIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ3NTlaFw0yNzA1MjUwODUyNTlaMDMxMTAvBgNV
BAMTKDYxOEJERTkyRUU0QUJBNkQ4NkU4QzE5QTAyNzNEQkFDMUY5Q0ZBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXTmgCnK/+XbQHLwjeEWhRaWJ6
pWGnBrLyv0Epss70s39n8jjDFQxwxFQUPtOMpY7Q7qSYxp44PKD6tDz/mRZCIHec
IyTWUJAQSpdVXJaX3DhNSPYxUxAm20K551OiFkxUUB2la6N/81HMemNoC53rkXbd
Rh3nSJajbPMISuKjH4teoKwsa9D0mLCT/BhlFMJu3UwoJXv+JZjwWlG2mPgkLR5J
UcdrP0C7n7kSKbpoWwBGMkV2qbifyV6u8zGmk6Fp8LGz+hgLhnPGuKkTVr1mqHQ6
sYsJS45I3/Ng9tq5GTPqx6Rtmyx6cHvioNUroZDDE8YFbO+OUbY9+rqgWYrFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUYYveku5Kum2G6MGaAnPbrB+c+k8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqudzANBgkqhkiG9w0BAQsFAAOCAQEASSC8
U3NZJQx3qRp0dQ/Nf7yydKT8BaXGqEpbHtnHHpHrgAEG1Hnz2Rf++l/JVOnHZtXn
yldnQBB+slnIaTkLO5yZXKFfcp+KdNnyUStkMsd2nE/pNgHAQSRKYxRVB+fM8Z6M
vkmIC16bn8USb5HwkCO7LzWCZA0au6F6smz1KSNOSubVQRVOO3BNZ8yV3zFGiJDt
3hUS5NvegHFIZUn+dGYWpZhl6XLWR6sWr8A01Gy3ZL0ShDlb1AbTCUlKESe6X8Jj
GQSFs6qoi92mjE80X1yLxXga2jOIo7Z83PAwBnuILGF32Lq8zxbkfmf1fEOnsKP+
1m0c3WSiTwhmJAoIFg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:55 2026 by rpki-client