Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146401.roa
File: AS146401.roa (raw, json)
Hash identifier: NmOdF+KfBPDu1didXxxgZCxUTwiqO+EAS7kS3VxkZus=
Subject key identifier: D3:F3:20:64:7D:68:A4:8F:AD:38:A9:06:BB:0A:7A:58:C7:23:F0:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 04C90F84BF5800C37DB9050180BA142298864357
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146401.roa
Signing time: Tue 26 May 2026 06:30:58 +0000
ROA not before: Tue 26 May 2026 06:25:58 +0000
ROA not after: Tue 25 May 2027 06:30:58 +0000
asID: 146401
IP address blocks: 240a:aea7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c9:0f:84:bf:58:00:c3:7d:b9:05:01:80:ba:14:22:98:86:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:58 2026 GMT
Not After : May 25 06:30:58 2027 GMT
Subject: CN=D3F320647D68A48FAD38A906BB0A7A58C723F020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:14:1a:32:f0:c9:a1:be:0b:9b:c6:1f:a7:
7f:50:58:55:c0:d0:a8:a6:c6:cb:5e:4a:f9:cd:46:
ed:b1:88:93:8b:f0:8a:0e:61:f0:df:b0:9e:60:be:
f6:33:25:0a:39:0b:cc:7d:7b:5a:6c:51:7d:b8:84:
e3:e3:dd:46:70:c8:12:09:ab:e2:3e:d6:97:f3:4e:
8d:3b:09:64:c6:d8:a8:95:b7:31:d9:30:e0:70:45:
cd:d2:0c:93:54:88:8e:cf:57:2a:0f:39:4f:5d:8f:
6f:b2:ea:e1:9a:4e:92:8e:6f:95:f1:41:ba:70:a9:
a0:30:56:32:e5:01:65:90:cf:b7:be:4f:27:30:26:
fc:f4:eb:53:cd:c2:6b:bb:82:e2:11:93:1d:70:80:
65:a9:e5:69:56:d5:d6:58:68:e0:df:d7:82:93:36:
01:33:9c:d8:78:38:38:94:16:b6:17:b9:e6:f4:73:
ce:bf:ef:ac:da:e9:b5:cd:cd:4a:8e:2e:ae:5a:b7:
fb:2c:04:83:dd:f9:d9:54:ae:f3:0d:fb:a3:42:83:
f8:ec:02:5c:94:51:5f:ff:53:25:1e:3b:48:5f:e6:
74:ff:cf:48:11:c9:40:8d:ed:23:36:94:a5:81:dc:
74:f6:d4:b9:88:a6:2b:d0:42:e7:ed:39:48:a5:4a:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:20:64:7D:68:A4:8F:AD:38:A9:06:BB:0A:7A:58:C7:23:F0:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146401.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aea7::/32
Signature Algorithm: sha256WithRSAEncryption
ba:34:a3:a0:02:3f:9a:e3:70:e5:dd:01:62:b0:eb:00:5c:96:
82:5d:e2:58:5f:00:6f:c4:dc:69:c8:56:51:69:6c:25:e5:ba:
dc:b3:87:41:7c:34:8f:a1:e2:38:11:89:ad:dd:5e:2f:6a:9c:
56:5e:75:64:05:92:cd:6f:23:5d:3e:22:dd:80:dd:59:8e:bd:
fc:28:d8:d6:eb:23:52:8a:a2:52:83:0f:c4:b7:31:b6:95:56:
13:59:01:31:7f:f4:50:b7:49:5a:f8:93:89:3c:94:06:ea:b1:
7b:c8:42:b2:83:72:9a:93:3c:c1:b1:bf:c7:0a:f1:6d:ed:e4:
6b:22:24:eb:a4:38:12:64:2d:1e:92:30:51:34:e3:75:53:30:
f7:37:51:52:b0:94:cc:f1:fd:8b:4e:dc:e6:57:f1:5a:e5:01:
4c:30:61:6e:2c:0c:de:d5:11:43:26:a1:74:1a:fc:d0:2e:20:
52:f2:75:b3:10:d3:a6:15:a0:96:25:8e:de:6f:ea:0c:47:76:
8e:b4:ae:03:c9:48:6e:b4:5d:6e:0f:19:b0:50:f6:3a:7b:f0:
76:87:89:b8:42:c3:36:b5:68:bf:7b:0e:e3:ca:63:e4:0a:4b:
99:82:10:f5:73:68:b5:6f:62:45:27:d1:2d:59:b1:d0:1e:13:
85:7a:38:8c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBMkPhL9YAMN9uQUBgLoUIpiGQ1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NThaFw0yNzA1MjUwNjMwNThaMDMxMTAvBgNV
BAMTKEQzRjMyMDY0N0Q2OEE0OEZBRDM4QTkwNkJCMEE3QTU4QzcyM0YwMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjyRQaMvDJob4Lm8Yfp39QWFXA
0KimxsteSvnNRu2xiJOL8IoOYfDfsJ5gvvYzJQo5C8x9e1psUX24hOPj3UZwyBIJ
q+I+1pfzTo07CWTG2KiVtzHZMOBwRc3SDJNUiI7PVyoPOU9dj2+y6uGaTpKOb5Xx
QbpwqaAwVjLlAWWQz7e+TycwJvz061PNwmu7guIRkx1wgGWp5WlW1dZYaODf14KT
NgEznNh4ODiUFrYXueb0c86/76za6bXNzUqOLq5at/ssBIPd+dlUrvMN+6NCg/js
AlyUUV//UyUeO0hf5nT/z0gRyUCN7SM2lKWB3HT21LmIpivQQuftOUilSsTFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU0/MgZH1opI+tOKkGuwp6WMcj8CAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqupzANBgkqhkiG9w0BAQsFAAOCAQEAujSj
oAI/muNw5d0BYrDrAFyWgl3iWF8Ab8TcachWUWlsJeW63LOHQXw0j6HiOBGJrd1e
L2qcVl51ZAWSzW8jXT4i3YDdWY69/CjY1usjUoqiUoMPxLcxtpVWE1kBMX/0ULdJ
WviTiTyUBuqxe8hCsoNympM8wbG/xwrxbe3kayIk66Q4EmQtHpIwUTTjdVMw9zdR
UrCUzPH9i07c5lfxWuUBTDBhbiwM3tURQyahdBr80C4gUvJ1sxDTphWgliWO3m/q
DEd2jrSuA8lIbrRdbg8ZsFD2OnvwdoeJuELDNrVov3sO48pj5ApLmYIQ9XNotW9i
RSfRLVmx0B4ThXo4jA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:50 2026 by rpki-client