Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146399.roa
File: AS146399.roa (raw, json)
Hash identifier: 7Qstbne0+9PYvHTiEIrHv2kgB9KT727QHwVrAG1tDaE=
Subject key identifier: C7:C9:B3:AB:7E:FF:05:15:8E:16:24:4F:CC:9E:C7:A1:F4:89:9B:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1A47E4DF32C9202677FBFCC01DED52792DE4190B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146399.roa
Signing time: Fri 22 May 2026 04:07:51 +0000
ROA not before: Fri 22 May 2026 04:02:51 +0000
ROA not after: Fri 21 May 2027 04:07:51 +0000
asID: 146399
IP address blocks: 240a:aea5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:47:e4:df:32:c9:20:26:77:fb:fc:c0:1d:ed:52:79:2d:e4:19:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:51 2026 GMT
Not After : May 21 04:07:51 2027 GMT
Subject: CN=C7C9B3AB7EFF05158E16244FCC9EC7A1F4899B74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:83:57:31:f8:bb:23:1a:05:4f:dc:40:68:
af:ba:4d:1e:97:93:8d:5c:2e:b4:17:30:5d:23:dd:
1d:6d:cf:f5:02:f2:62:6e:f6:8f:3b:6b:41:2b:b9:
80:4b:1b:47:fd:4e:71:22:5d:b2:c9:43:dd:88:c0:
6b:3d:39:51:d7:37:7f:1c:bf:af:4d:e3:05:8b:19:
48:32:f5:b8:46:1c:40:07:8a:fa:c2:af:b1:44:23:
9f:0a:f1:77:09:b0:85:92:a4:88:3b:5b:e1:26:33:
5d:2f:1a:98:c6:f9:21:bf:f7:33:19:8a:b2:41:92:
bf:93:ad:87:13:9b:22:95:ce:7b:8f:ba:54:51:20:
dc:d6:5b:4f:2d:c9:c5:e8:d9:0a:0c:4b:57:64:74:
4a:c1:a0:8a:b4:f5:ca:b7:2d:3f:bd:58:7f:4b:3f:
0f:c5:ed:0a:18:41:a2:95:d7:be:51:22:fd:94:8e:
09:78:5b:8f:ae:fe:f4:8e:a6:8c:0c:c1:bf:dd:e4:
4c:ac:10:86:22:73:05:7f:b0:89:84:e0:5f:1e:4d:
8b:05:8d:f3:e2:be:2d:18:f0:44:17:9e:c5:ba:b0:
66:bf:98:36:cc:80:14:39:2a:b2:ad:10:d9:f9:7f:
78:cc:62:ff:3f:e8:2c:01:6c:a3:e1:4c:b8:86:d0:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:B3:AB:7E:FF:05:15:8E:16:24:4F:CC:9E:C7:A1:F4:89:9B:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146399.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aea5::/32
Signature Algorithm: sha256WithRSAEncryption
4f:83:bf:dd:dc:f5:bc:07:ec:5a:f3:94:78:42:1d:cc:8c:68:
af:46:69:fe:4f:cb:11:59:b8:fa:5e:f1:2c:17:63:8a:57:33:
ef:c4:99:d7:c1:06:03:cd:5b:33:02:0e:bd:1f:08:97:12:01:
7c:87:14:3a:60:9f:3e:d3:06:f8:26:62:b0:49:64:19:3f:5f:
70:4e:8c:39:4e:25:9b:3c:1a:82:c7:1e:65:08:eb:ca:ff:93:
4a:89:e2:9f:65:b0:a2:39:66:41:75:c2:48:86:75:50:c1:58:
4d:3c:eb:a9:e3:93:81:94:cb:09:9e:4a:3e:6a:22:e6:75:59:
c4:0e:7b:e1:14:b7:1e:6d:03:93:a9:07:8d:3a:61:7a:ef:65:
cb:cb:fe:fb:cb:b3:ba:f7:a5:f6:a7:00:87:2c:da:bf:5e:79:
dd:eb:5e:d3:bc:28:bf:6e:ce:00:1c:59:d1:e7:95:70:40:43:
a1:d8:09:70:fd:3a:59:64:cf:af:b1:ba:f1:c6:c9:a7:c1:b5:
04:54:af:44:dd:8a:46:5f:9f:76:0d:e4:96:5c:60:bd:05:9e:
42:68:7f:d9:81:93:88:ce:55:d9:c5:24:ef:da:c9:c7:25:3c:
96:52:bd:9e:1f:92:5c:35:5f:23:0f:a0:55:96:9f:b7:ca:bf:
1a:2b:64:65
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGkfk3zLJICZ3+/zAHe1SeS3kGQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAyNTFaFw0yNzA1MjEwNDA3NTFaMDMxMTAvBgNV
BAMTKEM3QzlCM0FCN0VGRjA1MTU4RTE2MjQ0RkNDOUVDN0ExRjQ4OTlCNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmINXMfi7IxoFT9xAaK+6TR6X
k41cLrQXMF0j3R1tz/UC8mJu9o87a0EruYBLG0f9TnEiXbLJQ92IwGs9OVHXN38c
v69N4wWLGUgy9bhGHEAHivrCr7FEI58K8XcJsIWSpIg7W+EmM10vGpjG+SG/9zMZ
irJBkr+TrYcTmyKVznuPulRRINzWW08tycXo2QoMS1dkdErBoIq09cq3LT+9WH9L
Pw/F7QoYQaKV175RIv2Ujgl4W4+u/vSOpowMwb/d5EysEIYicwV/sImE4F8eTYsF
jfPivi0Y8EQXnsW6sGa/mDbMgBQ5KrKtENn5f3jMYv8/6CwBbKPhTLiG0AInAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUx8mzq37/BRWOFiRPzJ7HofSJm3QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2Mzk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqupTANBgkqhkiG9w0BAQsFAAOCAQEAT4O/
3dz1vAfsWvOUeEIdzIxor0Zp/k/LEVm4+l7xLBdjilcz78SZ18EGA81bMwIOvR8I
lxIBfIcUOmCfPtMG+CZisElkGT9fcE6MOU4lmzwagsceZQjryv+TSonin2Wwojlm
QXXCSIZ1UMFYTTzrqeOTgZTLCZ5KPmoi5nVZxA574RS3Hm0Dk6kHjTpheu9ly8v+
+8uzuvel9qcAhyzav1553ete07wov27OABxZ0eeVcEBDodgJcP06WWTPr7G68cbJ
p8G1BFSvRN2KRl+fdg3kllxgvQWeQmh/2YGTiM5V2cUk79rJxyU8llK9nh+SXDVf
Iw+gVZaft8q/GitkZQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:36 2026 by rpki-client