Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146354.roa
File: AS146354.roa (raw, json)
Hash identifier: 927DLVGLDSFTVlifgkONV3K3ljmTthjLyKe4HOX71v4=
Subject key identifier: F4:90:DD:39:71:E2:97:EE:4C:F5:05:59:3D:91:5A:3F:7E:F8:CF:31
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68DE8B18DEEAE5BB3B4F296F7A9DB9A679B84BC7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146354.roa
Signing time: Mon 25 May 2026 02:22:16 +0000
ROA not before: Mon 25 May 2026 02:17:16 +0000
ROA not after: Mon 24 May 2027 02:22:16 +0000
asID: 146354
IP address blocks: 240a:ae78::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:de:8b:18:de:ea:e5:bb:3b:4f:29:6f:7a:9d:b9:a6:79:b8:4b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:16 2026 GMT
Not After : May 24 02:22:16 2027 GMT
Subject: CN=F490DD3971E297EE4CF505593D915A3F7EF8CF31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:39:86:37:c1:46:99:95:f4:79:d2:f7:51:
37:0a:c3:bc:6b:41:c2:ac:3f:7c:a3:a4:0e:58:3b:
83:bc:43:6d:20:76:35:da:a3:b1:88:27:9c:15:30:
d9:27:14:5c:59:d6:4c:4f:28:ad:5f:da:d2:df:66:
d3:ee:63:91:9b:7e:1a:41:64:b9:2c:1a:c1:bf:76:
b7:e6:b1:67:68:09:22:56:e6:00:27:a7:76:a1:be:
8f:9f:50:41:10:2f:1d:d6:21:aa:a7:25:ad:41:ad:
0d:05:d9:5d:74:91:f5:e9:e3:6c:64:8d:7e:e5:bc:
93:dc:fa:52:74:05:84:e2:55:e2:7d:c6:97:92:20:
7e:25:c8:21:d5:1f:58:94:b9:9f:ad:d2:67:ac:78:
c6:54:ee:09:9e:45:e4:9e:6d:ff:ce:51:8f:28:fa:
c9:b2:4f:59:2d:e6:3f:4c:3d:78:3b:f7:d4:b8:8a:
c4:17:54:60:ec:36:8e:48:3b:4c:90:35:3b:e3:0f:
53:6e:82:13:7b:d0:a9:13:7b:86:f5:ad:ab:30:7a:
5f:ae:7f:70:f4:bf:84:13:99:52:c8:e5:47:76:22:
45:cf:80:58:7e:1a:a7:b0:69:77:8a:c5:fe:9a:c7:
56:82:d5:8a:a8:8d:ef:b1:b1:02:b4:05:1d:5e:9f:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:DD:39:71:E2:97:EE:4C:F5:05:59:3D:91:5A:3F:7E:F8:CF:31
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146354.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae78::/32
Signature Algorithm: sha256WithRSAEncryption
0d:2b:63:08:16:b8:86:59:e5:8b:d0:82:76:81:f8:d7:a7:b7:
77:d3:59:db:52:7c:c2:91:53:f8:46:ad:e0:08:e7:68:d1:82:
c0:e2:4c:7d:1e:10:ee:f2:c5:46:32:4b:42:b3:21:9b:80:55:
5a:db:2a:aa:c7:43:f9:58:15:2a:68:48:a6:ce:9c:a3:b7:2a:
8a:99:0f:03:a4:a1:ee:26:28:c9:88:b2:95:50:e9:f4:da:b5:
3a:08:9e:d3:f9:92:f9:53:77:08:9a:46:b1:ec:33:1b:68:24:
6d:11:43:41:93:6a:35:cd:05:dc:2b:b3:42:b7:8a:00:62:e9:
3b:46:fe:fd:40:da:31:26:0a:71:99:0d:ca:05:67:5f:08:8c:
30:16:7c:71:03:23:21:c8:2d:62:77:5d:69:65:93:d6:dc:ab:
5f:9a:d3:43:bd:3c:4a:51:ef:e4:8c:f8:a2:5c:b3:68:22:6d:
07:b7:3b:da:7b:82:a9:9d:01:c8:7c:59:94:f5:3c:5f:d7:47:
a9:1c:0c:05:5c:46:51:aa:40:c6:39:50:f1:17:c3:f5:45:75:
46:5b:19:2f:19:e3:77:e0:17:2e:b1:5a:55:8c:92:e9:89:77:
d6:ea:f9:04:17:b7:25:7b:08:a2:9c:62:15:14:f3:4a:80:4f:
08:42:97:ed
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaN6LGN7q5bs7Tylvep25pnm4S8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MTZaFw0yNzA1MjQwMjIyMTZaMDMxMTAvBgNV
BAMTKEY0OTBERDM5NzFFMjk3RUU0Q0Y1MDU1OTNEOTE1QTNGN0VGOENGMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw+jmGN8FGmZX0edL3UTcKw7xr
QcKsP3yjpA5YO4O8Q20gdjXao7GIJ5wVMNknFFxZ1kxPKK1f2tLfZtPuY5GbfhpB
ZLksGsG/drfmsWdoCSJW5gAnp3ahvo+fUEEQLx3WIaqnJa1BrQ0F2V10kfXp42xk
jX7lvJPc+lJ0BYTiVeJ9xpeSIH4lyCHVH1iUuZ+t0meseMZU7gmeReSebf/OUY8o
+smyT1kt5j9MPXg799S4isQXVGDsNo5IO0yQNTvjD1NughN70KkTe4b1raswel+u
f3D0v4QTmVLI5Ud2IkXPgFh+GqewaXeKxf6ax1aC1Yqoje+xsQK0BR1en4alAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9JDdOXHil+5M9QVZPZFaP374zzEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqueDANBgkqhkiG9w0BAQsFAAOCAQEADStj
CBa4hlnli9CCdoH416e3d9NZ21J8wpFT+Eat4AjnaNGCwOJMfR4Q7vLFRjJLQrMh
m4BVWtsqqsdD+VgVKmhIps6co7cqipkPA6Sh7iYoyYiylVDp9Nq1Ogie0/mS+VN3
CJpGsewzG2gkbRFDQZNqNc0F3CuzQreKAGLpO0b+/UDaMSYKcZkNygVnXwiMMBZ8
cQMjIcgtYnddaWWT1tyrX5rTQ708SlHv5Iz4olyzaCJtB7c72nuCqZ0ByHxZlPU8
X9dHqRwMBVxGUapAxjlQ8RfD9UV1RlsZLxnjd+AXLrFaVYyS6Yl31ur5BBe3JXsI
opxiFRTzSoBPCEKX7Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:30 2026 by rpki-client