Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146355.roa
File: AS146355.roa (raw, json)
Hash identifier: sOIwvBuiHLI+LGRgzx8BcEdASRspEdeNkZlXWVVYMMw=
Subject key identifier: 45:64:B1:9B:52:5E:D7:43:F3:E9:CA:C4:77:9A:FC:E1:AF:90:CA:DC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 796D0BB53FBB02AC213FDFB91FC9B68305E9EED5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146355.roa
Signing time: Fri 22 May 2026 01:50:18 +0000
ROA not before: Fri 22 May 2026 01:45:18 +0000
ROA not after: Fri 21 May 2027 01:50:18 +0000
asID: 146355
IP address blocks: 240a:ae79::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:6d:0b:b5:3f:bb:02:ac:21:3f:df:b9:1f:c9:b6:83:05:e9:ee:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:18 2026 GMT
Not After : May 21 01:50:18 2027 GMT
Subject: CN=4564B19B525ED743F3E9CAC4779AFCE1AF90CADC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:87:be:75:d8:ae:14:3f:2f:ca:8e:81:ae:
30:13:50:7f:14:0b:27:6e:da:1c:0a:62:20:45:9c:
41:f1:ee:de:20:90:b9:81:18:21:72:0b:fc:3d:a6:
2b:16:07:24:95:af:a8:7f:a9:fb:6c:fb:3d:c2:92:
2b:a3:88:ef:06:12:2b:c3:af:9c:7d:ba:6c:b9:50:
8f:00:0c:83:f0:ff:18:00:97:02:76:b0:b1:fc:ef:
cf:ec:ed:30:7c:3d:bb:2c:de:d9:47:ac:aa:41:8f:
16:74:76:d5:9e:ee:0f:ce:b2:e1:af:71:73:a8:71:
2e:c4:2f:b4:45:6b:d7:eb:75:54:e7:69:e1:03:23:
a8:93:f5:5b:8f:6e:f1:a9:28:9a:7d:25:04:8c:8f:
15:b8:f2:56:b1:9f:ac:83:ba:6d:92:9c:b5:ab:07:
dc:07:7a:4d:98:4d:49:4d:75:a9:ef:68:59:d7:ab:
81:de:44:7b:4b:da:24:ef:a7:fb:52:b0:90:6f:da:
fb:69:44:1d:f7:51:cf:ac:dc:66:77:2c:6e:61:bf:
4d:62:a6:d0:88:f6:fe:22:ad:6a:56:ac:ef:87:42:
78:2c:17:ba:90:51:66:ea:eb:7f:cb:90:ba:a1:88:
a6:c5:4e:82:fe:5d:4d:44:33:06:ad:c2:ea:6a:d9:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:64:B1:9B:52:5E:D7:43:F3:E9:CA:C4:77:9A:FC:E1:AF:90:CA:DC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae79::/32
Signature Algorithm: sha256WithRSAEncryption
1e:87:69:37:38:29:34:4b:05:70:f3:ad:b6:2e:09:b0:a9:8d:
87:3c:c5:b5:34:af:f7:a3:c3:84:03:e9:a3:c8:f7:72:44:e4:
c5:3a:6f:d5:94:0c:36:07:7c:74:4e:21:17:2f:ef:0f:97:cc:
73:1c:54:e9:36:1a:17:6d:60:f8:b9:2c:a0:5a:96:d9:95:21:
30:e6:03:3c:42:2c:16:99:c8:7e:e3:f5:16:e2:4a:e7:38:75:
e9:c4:6a:6c:5a:75:3f:3b:8b:20:20:29:45:95:fe:95:4f:04:
25:bf:fa:fe:0d:2e:9c:44:f8:ba:a4:de:00:e7:33:42:69:41:
1b:ad:56:34:3c:15:63:18:5c:45:61:fe:13:a6:38:30:f1:2a:
5a:93:d3:f8:1a:5c:3e:56:84:38:29:3d:a9:cf:44:0c:29:27:
3e:6a:61:51:e7:dc:ef:97:45:91:1d:0e:32:9a:d5:53:33:8b:
dc:c1:18:8d:2a:4e:8f:19:98:ae:c7:6e:28:f6:19:de:b9:01:
b2:c6:7b:72:f1:00:9d:84:82:7d:96:a5:5e:34:8d:c9:1f:97:
4d:54:bf:25:5b:35:ee:0d:d0:76:2f:54:77:50:00:ef:c2:08:
cc:cb:99:78:3d:7b:d2:14:23:98:92:fa:2d:97:56:18:63:38:
21:11:61:3e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeW0LtT+7AqwhP9+5H8m2gwXp7tUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MThaFw0yNzA1MjEwMTUwMThaMDMxMTAvBgNV
BAMTKDQ1NjRCMTlCNTI1RUQ3NDNGM0U5Q0FDNDc3OUFGQ0UxQUY5MENBREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK4Ie+ddiuFD8vyo6BrjATUH8U
Cydu2hwKYiBFnEHx7t4gkLmBGCFyC/w9pisWBySVr6h/qfts+z3CkiujiO8GEivD
r5x9umy5UI8ADIPw/xgAlwJ2sLH878/s7TB8Pbss3tlHrKpBjxZ0dtWe7g/OsuGv
cXOocS7EL7RFa9frdVTnaeEDI6iT9VuPbvGpKJp9JQSMjxW48laxn6yDum2SnLWr
B9wHek2YTUlNdanvaFnXq4HeRHtL2iTvp/tSsJBv2vtpRB33Uc+s3GZ3LG5hv01i
ptCI9v4irWpWrO+HQngsF7qQUWbq63/LkLqhiKbFToL+XU1EMwatwupq2S4bAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQURWSxm1Je10Pz6crEd5r84a+QytwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqueTANBgkqhkiG9w0BAQsFAAOCAQEAHodp
NzgpNEsFcPOtti4JsKmNhzzFtTSv96PDhAPpo8j3ckTkxTpv1ZQMNgd8dE4hFy/v
D5fMcxxU6TYaF21g+LksoFqW2ZUhMOYDPEIsFpnIfuP1FuJK5zh16cRqbFp1PzuL
ICApRZX+lU8EJb/6/g0unET4uqTeAOczQmlBG61WNDwVYxhcRWH+E6Y4MPEqWpPT
+BpcPlaEOCk9qc9EDCknPmphUefc75dFkR0OMprVUzOL3MEYjSpOjxmYrsduKPYZ
3rkBssZ7cvEAnYSCfZalXjSNyR+XTVS/JVs17g3Qdi9Ud1AA78IIzMuZeD170hQj
mJL6LZdWGGM4IRFhPg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:47 2026 by rpki-client