Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146417.roa
File: AS146417.roa (raw, json)
Hash identifier: WItr1PF48psXNRIja7zEReqdDUGOhkz5pTAS7XhW2IM=
Subject key identifier: 2D:DA:A9:40:20:E7:8A:3C:D8:CC:40:62:9C:23:55:37:6F:70:B6:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4697F12DCC3750C4AE6140259A7A0738CB1C6F1C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146417.roa
Signing time: Fri 22 May 2026 07:32:00 +0000
ROA not before: Fri 22 May 2026 07:27:00 +0000
ROA not after: Fri 21 May 2027 07:32:00 +0000
asID: 146417
IP address blocks: 240a:aeb7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:97:f1:2d:cc:37:50:c4:ae:61:40:25:9a:7a:07:38:cb:1c:6f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:00 2026 GMT
Not After : May 21 07:32:00 2027 GMT
Subject: CN=2DDAA94020E78A3CD8CC40629C2355376F70B673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:48:75:65:95:d0:17:5b:db:a7:7c:f0:66:
f4:87:3d:3d:b2:a1:49:d7:0f:dd:66:d4:ca:fa:46:
2d:51:f7:f4:d6:35:75:3c:a7:b3:c3:20:7e:a3:2f:
32:3d:22:7f:4a:f2:aa:6e:5f:ec:89:ea:27:bf:c8:
3f:ee:79:2c:e0:f5:41:55:b1:ae:a6:04:e4:29:7e:
b5:fb:ec:9a:62:ed:90:cd:b6:44:94:4f:dc:e8:f5:
b7:80:69:72:34:19:4b:02:b6:3a:13:b7:27:83:12:
29:45:ff:b1:f7:56:f0:b9:e3:2f:50:97:53:d4:b9:
9e:57:fa:7e:26:a4:10:38:1e:8f:86:23:08:44:db:
8d:85:32:7e:44:26:aa:bb:32:3f:8e:d6:31:da:72:
0f:57:9f:8e:69:2c:3c:3a:f9:6c:d6:0f:a9:bd:78:
6a:aa:41:0e:cb:1c:37:ba:14:94:20:44:6b:3e:61:
f1:c7:29:8c:53:10:0a:2d:ab:39:81:a5:fc:d1:7c:
c6:77:57:1f:56:c5:ee:13:47:f3:a6:45:e8:39:e6:
09:2b:99:da:b5:9e:73:43:75:26:80:9e:d2:af:4b:
0d:af:67:61:a1:be:ef:db:d0:c5:52:8d:4b:c4:05:
07:2c:fb:84:2a:1a:17:4a:78:7a:e5:aa:65:00:bd:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DA:A9:40:20:E7:8A:3C:D8:CC:40:62:9C:23:55:37:6F:70:B6:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146417.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeb7::/32
Signature Algorithm: sha256WithRSAEncryption
6a:c7:3a:16:da:27:6a:66:43:15:9e:2e:45:5c:22:cc:92:3a:
79:8b:2c:db:2e:30:73:da:35:74:9f:d7:fb:c4:ce:c3:4f:b3:
d3:4e:f0:a8:2f:4e:0e:00:04:b3:65:4a:38:0e:76:9e:72:ad:
89:97:2b:cf:fc:4e:2c:21:5e:f8:5d:93:86:dc:7b:d0:09:bd:
72:17:0b:b2:2a:1f:ff:e7:7d:55:88:79:7d:79:9b:0e:eb:69:
43:2c:1c:c7:75:96:05:00:b2:fb:95:78:6e:fe:54:9d:bf:41:
58:1a:72:92:bf:cb:40:0f:5b:ef:13:c7:da:fb:3f:c2:12:ff:
22:9b:54:e6:06:e6:ba:7e:0e:71:87:de:ab:8d:dc:0e:7d:73:
7c:7e:d6:09:3e:38:1e:e8:56:3f:17:f4:c8:47:4c:22:50:ac:
f8:48:69:2a:b1:9c:b8:d5:45:c9:8d:78:99:71:a2:16:ec:26:
3b:6b:55:0d:ec:e3:22:df:3e:72:f7:a5:f9:75:f7:91:74:07:
ad:cc:03:a9:03:bd:be:24:12:94:ca:09:53:22:a0:50:d5:b9:
a5:78:a9:b4:e9:8a:f4:e7:4f:e7:7b:b3:5f:81:e5:30:66:97:
91:93:14:c6:9a:21:8c:27:0b:55:af:1d:46:2a:1e:51:9d:bd:
6c:68:0f:ef
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURpfxLcw3UMSuYUAlmnoHOMscbxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MDBaFw0yNzA1MjEwNzMyMDBaMDMxMTAvBgNV
BAMTKDJEREFBOTQwMjBFNzhBM0NEOENDNDA2MjlDMjM1NTM3NkY3MEI2NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3kh1ZZXQF1vbp3zwZvSHPT2y
oUnXD91m1Mr6Ri1R9/TWNXU8p7PDIH6jLzI9In9K8qpuX+yJ6ie/yD/ueSzg9UFV
sa6mBOQpfrX77Jpi7ZDNtkSUT9zo9beAaXI0GUsCtjoTtyeDEilF/7H3VvC54y9Q
l1PUuZ5X+n4mpBA4Ho+GIwhE242FMn5EJqq7Mj+O1jHacg9Xn45pLDw6+WzWD6m9
eGqqQQ7LHDe6FJQgRGs+YfHHKYxTEAotqzmBpfzRfMZ3Vx9Wxe4TR/OmReg55gkr
mdq1nnNDdSaAntKvSw2vZ2Ghvu/b0MVSjUvEBQcs+4QqGhdKeHrlqmUAvVjxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULdqpQCDnijzYzEBinCNVN29wtnMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NDE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqutzANBgkqhkiG9w0BAQsFAAOCAQEAasc6
FtonamZDFZ4uRVwizJI6eYss2y4wc9o1dJ/X+8TOw0+z007wqC9ODgAEs2VKOA52
nnKtiZcrz/xOLCFe+F2Thtx70Am9chcLsiof/+d9VYh5fXmbDutpQywcx3WWBQCy
+5V4bv5Unb9BWBpykr/LQA9b7xPH2vs/whL/IptU5gbmun4OcYfeq43cDn1zfH7W
CT44HuhWPxf0yEdMIlCs+EhpKrGcuNVFyY14mXGiFuwmO2tVDezjIt8+cvel+XX3
kXQHrcwDqQO9viQSlMoJUyKgUNW5pXiptOmK9OdP53uzX4HlMGaXkZMUxpohjCcL
Va8dRioeUZ29bGgP7w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:42 2026 by rpki-client