Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146357.roa
File: AS146357.roa (raw, json)
Hash identifier: 8kiSkWAPwKoRrY+/el8Pd0UFh7iARJd8Fp5NCE8+MBc=
Subject key identifier: AC:2C:AC:BA:87:7B:3A:5F:84:C0:51:AB:A7:F6:8D:FD:4D:EA:39:53
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3E3B7F5E1A048C3B124C524416619EE677866681
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146357.roa
Signing time: Tue 26 May 2026 03:17:02 +0000
ROA not before: Tue 26 May 2026 03:12:02 +0000
ROA not after: Tue 25 May 2027 03:17:02 +0000
asID: 146357
IP address blocks: 240a:ae7b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3b:7f:5e:1a:04:8c:3b:12:4c:52:44:16:61:9e:e6:77:86:66:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:02 2026 GMT
Not After : May 25 03:17:02 2027 GMT
Subject: CN=AC2CACBA877B3A5F84C051ABA7F68DFD4DEA3953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:53:f0:d2:a8:89:2a:ec:ef:45:3e:3b:6a:
0e:89:07:ce:d4:e9:e6:91:5c:a8:74:61:0b:ed:69:
de:f7:bb:0f:3b:1e:53:a7:41:23:6f:88:6c:68:fd:
68:87:6a:4b:5f:55:44:ca:a1:6d:76:42:06:9f:01:
cc:02:f5:7f:91:76:63:db:b3:7d:05:10:d8:89:93:
81:78:bc:df:8e:57:b8:6c:8e:92:f1:9a:d1:5f:39:
4e:51:ed:ca:41:d7:10:48:12:43:59:02:69:aa:61:
c0:08:e5:9b:02:ae:aa:3c:4f:8b:e2:14:dc:e3:8e:
d1:3d:b2:b5:b6:7c:e0:b4:0d:e7:b6:5b:e4:00:b3:
c2:a9:3c:3d:6b:8d:53:71:6b:c3:82:df:99:ca:6a:
05:5b:d2:b9:e7:17:9b:73:4d:e9:6a:5f:26:ba:b1:
89:5e:5b:08:3c:a7:db:bb:0a:d2:f2:31:04:01:8d:
92:83:41:de:c9:00:1e:db:81:de:89:2c:40:46:bf:
84:7a:eb:6b:f3:6f:86:d0:cd:00:11:63:18:e3:88:
39:1d:48:66:82:54:85:38:62:49:c6:26:4d:29:46:
ea:d2:ff:05:0d:f4:73:1a:a8:aa:a1:65:82:e2:06:
a1:22:51:3c:dd:85:9a:3e:32:3d:f3:23:9e:8f:2d:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:AC:BA:87:7B:3A:5F:84:C0:51:AB:A7:F6:8D:FD:4D:EA:39:53
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146357.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae7b::/32
Signature Algorithm: sha256WithRSAEncryption
45:49:d1:73:ca:5c:10:e2:f2:e6:b6:74:69:ee:45:c7:a9:50:
a0:72:cb:ef:59:e0:77:1b:28:64:ee:97:f1:53:e2:96:60:dc:
9f:e3:c6:db:5a:4a:f4:ab:3b:bd:a5:0d:5c:26:aa:5e:85:2f:
6f:8a:c4:e5:df:72:61:30:a6:5f:31:01:4e:69:d3:df:f0:1f:
d4:ec:b2:8d:89:fd:30:88:73:5e:06:9c:01:31:03:26:a1:ed:
52:95:0e:77:68:a8:ee:72:f9:82:f2:56:39:32:5e:d4:bf:51:
a4:ee:3f:9a:1b:35:6b:8f:6f:1a:4d:55:68:9d:10:a3:f2:41:
1c:02:77:81:7f:00:65:4d:8e:69:3f:0f:5f:e1:1b:31:af:42:
d7:f3:72:24:dc:09:02:02:02:51:e0:04:03:0e:4b:a8:4c:50:
c9:cd:38:97:e7:4f:f0:db:dd:5e:c0:ff:a8:5b:e8:c7:21:51:
2f:33:3b:fd:b7:bf:2e:79:0a:78:05:be:2c:a0:f7:66:de:c7:
9b:13:9a:7c:fe:e7:c5:90:96:94:37:8e:37:da:7d:78:aa:b7:
c3:fa:62:14:d3:d4:0a:fb:2a:82:d7:bd:b8:be:ae:44:0c:00:
41:c3:6e:43:e7:88:c0:e2:e2:e7:17:a7:27:2a:24:ae:24:d9:
de:df:10:c3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPjt/XhoEjDsSTFJEFmGe5neGZoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMDJaFw0yNzA1MjUwMzE3MDJaMDMxMTAvBgNV
BAMTKEFDMkNBQ0JBODc3QjNBNUY4NEMwNTFBQkE3RjY4REZENERFQTM5NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC321Pw0qiJKuzvRT47ag6JB87U
6eaRXKh0YQvtad73uw87HlOnQSNviGxo/WiHaktfVUTKoW12QgafAcwC9X+RdmPb
s30FENiJk4F4vN+OV7hsjpLxmtFfOU5R7cpB1xBIEkNZAmmqYcAI5ZsCrqo8T4vi
FNzjjtE9srW2fOC0Dee2W+QAs8KpPD1rjVNxa8OC35nKagVb0rnnF5tzTelqXya6
sYleWwg8p9u7CtLyMQQBjZKDQd7JAB7bgd6JLEBGv4R662vzb4bQzQARYxjjiDkd
SGaCVIU4YknGJk0pRurS/wUN9HMaqKqhZYLiBqEiUTzdhZo+Mj3zI56PLfNrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrCysuod7Ol+EwFGrp/aN/U3qOVMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2MzU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquezANBgkqhkiG9w0BAQsFAAOCAQEARUnR
c8pcEOLy5rZ0ae5Fx6lQoHLL71ngdxsoZO6X8VPilmDcn+PG21pK9Ks7vaUNXCaq
XoUvb4rE5d9yYTCmXzEBTmnT3/Af1OyyjYn9MIhzXgacATEDJqHtUpUOd2io7nL5
gvJWOTJe1L9RpO4/mhs1a49vGk1VaJ0Qo/JBHAJ3gX8AZU2OaT8PX+EbMa9C1/Ny
JNwJAgICUeAEAw5LqExQyc04l+dP8NvdXsD/qFvoxyFRLzM7/be/LnkKeAW+LKD3
Zt7HmxOafP7nxZCWlDeON9p9eKq3w/piFNPUCvsqgte9uL6uRAwAQcNuQ+eIwOLi
5xenJyokriTZ3t8Qww==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:09 2026 by rpki-client