Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146404.roa
File: AS146404.roa (raw, json)
Hash identifier: orK7rqj1E7I6MRcUburrcqRlnwYnxkBFn7pDax2xhOk=
Subject key identifier: 7A:EF:AF:E8:F4:01:C3:32:30:94:E3:FD:23:EF:A4:39:7A:D0:B4:50
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78E23E0ED9416D789643CE13FC1E781396B72D1A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146404.roa
Signing time: Fri 22 May 2026 04:27:13 +0000
ROA not before: Fri 22 May 2026 04:22:13 +0000
ROA not after: Fri 21 May 2027 04:27:13 +0000
asID: 146404
IP address blocks: 240a:aeaa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e2:3e:0e:d9:41:6d:78:96:43:ce:13:fc:1e:78:13:96:b7:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:13 2026 GMT
Not After : May 21 04:27:13 2027 GMT
Subject: CN=7AEFAFE8F401C3323094E3FD23EFA4397AD0B450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:c6:31:ab:38:9e:17:26:23:e0:05:82:ed:
6f:87:26:71:dc:80:77:38:34:e5:88:63:1e:6b:ff:
d0:39:a8:fe:85:75:b7:14:5e:f0:9b:2a:53:45:62:
85:e3:92:fe:b7:ea:17:14:3a:b9:46:33:8f:51:c8:
8f:89:59:26:7d:86:7e:7e:6d:42:c4:c9:0b:81:e4:
39:1d:61:95:10:c7:54:ce:2f:05:1e:ab:d4:fe:0d:
8f:69:ce:cc:03:12:1c:7b:fb:97:80:3e:3a:91:c7:
55:29:c4:41:72:43:35:68:78:f5:ec:66:a7:20:7a:
15:ea:4d:53:4e:9d:94:75:5b:f0:3d:dc:7e:58:d2:
9b:28:c0:f4:76:37:0c:fa:34:f1:c1:31:fa:3c:82:
df:5a:b6:26:fe:88:60:ec:c9:51:bb:a1:30:14:3f:
95:ab:14:bc:82:89:e2:43:0b:40:36:e9:ca:25:35:
4c:1c:46:a1:3a:76:bd:54:89:8f:a0:7a:47:0d:97:
ca:3a:e2:bb:73:c7:04:64:b4:6c:29:f7:19:96:18:
9d:49:ac:e7:49:45:f5:c3:c7:33:4d:0a:db:7a:09:
5e:5d:6d:d5:c4:10:0e:f8:ce:76:f4:cb:60:d3:c7:
bf:de:44:83:e9:35:57:87:73:b0:13:3e:d0:51:40:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:AF:E8:F4:01:C3:32:30:94:E3:FD:23:EF:A4:39:7A:D0:B4:50
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeaa::/32
Signature Algorithm: sha256WithRSAEncryption
31:2e:22:51:b9:50:2a:55:97:c8:83:3b:39:78:0f:62:a1:4e:
5c:2f:66:f8:4b:3a:df:c4:da:45:e3:7c:44:4c:2b:32:71:76:
bc:f9:a2:12:1d:7a:39:11:0b:fc:ae:0a:fc:a2:f0:10:19:6f:
fe:2e:53:89:69:db:b7:35:0c:e8:b2:e4:d7:07:51:a7:e3:4c:
2f:e3:dc:04:e2:1b:61:cb:03:d1:07:de:4a:39:05:5e:8d:a7:
c8:f1:cb:fd:fb:9a:e3:76:2f:31:d4:2c:be:8b:67:9f:12:00:
ad:42:ee:50:05:89:db:04:98:ae:a6:69:6d:ef:10:ee:1a:7e:
74:c1:2d:d2:6b:ce:a2:8a:49:fc:2b:b6:fa:5b:79:2f:de:6d:
08:79:22:c1:9c:df:31:cc:9c:ff:c6:f4:eb:aa:6e:8e:ba:ae:
6e:11:18:58:66:62:93:48:a8:80:05:31:3c:ec:b6:fa:20:13:
dc:1d:ff:3e:8b:c7:7a:af:31:85:cd:f8:aa:13:72:2f:34:1d:
87:37:cf:9a:2d:dc:05:04:da:c6:83:2a:ce:e7:06:e8:c9:7a:
41:00:95:8f:9e:79:2e:bb:c1:3a:60:8c:2d:29:dd:94:6d:82:
c4:ac:d8:b5:8d:89:b3:ee:ea:92:5f:b1:c4:bb:24:11:37:e0:
7c:1b:43:ce
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeOI+DtlBbXiWQ84T/B54E5a3LRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMTNaFw0yNzA1MjEwNDI3MTNaMDMxMTAvBgNV
BAMTKDdBRUZBRkU4RjQwMUMzMzIzMDk0RTNGRDIzRUZBNDM5N0FEMEI0NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOE8YxqzieFyYj4AWC7W+HJnHc
gHc4NOWIYx5r/9A5qP6FdbcUXvCbKlNFYoXjkv636hcUOrlGM49RyI+JWSZ9hn5+
bULEyQuB5DkdYZUQx1TOLwUeq9T+DY9pzswDEhx7+5eAPjqRx1UpxEFyQzVoePXs
ZqcgehXqTVNOnZR1W/A93H5Y0psowPR2Nwz6NPHBMfo8gt9atib+iGDsyVG7oTAU
P5WrFLyCieJDC0A26colNUwcRqE6dr1UiY+gekcNl8o64rtzxwRktGwp9xmWGJ1J
rOdJRfXDxzNNCtt6CV5dbdXEEA74znb0y2DTx7/eRIPpNVeHc7ATPtBRQENRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUeu+v6PQBwzIwlOP9I++kOXrQtFAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NDA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquqjANBgkqhkiG9w0BAQsFAAOCAQEAMS4i
UblQKlWXyIM7OXgPYqFOXC9m+Es638TaReN8REwrMnF2vPmiEh16OREL/K4K/KLw
EBlv/i5TiWnbtzUM6LLk1wdRp+NML+PcBOIbYcsD0QfeSjkFXo2nyPHL/fua43Yv
MdQsvotnnxIArULuUAWJ2wSYrqZpbe8Q7hp+dMEt0mvOoopJ/Cu2+lt5L95tCHki
wZzfMcyc/8b066pujrqubhEYWGZik0iogAUxPOy2+iAT3B3/PovHeq8xhc34qhNy
LzQdhzfPmi3cBQTaxoMqzucG6Ml6QQCVj555LrvBOmCMLSndlG2CxKzYtY2Js+7q
kl+xxLskETfgfBtDzg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:33 2026 by rpki-client