Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146440.roa
File: AS146440.roa (raw, json)
Hash identifier: W1K8Tc6Uy0d6XPmnSdu/d4XgAIP0ANNtLcQymdQUNb4=
Subject key identifier: 35:75:98:EA:F2:57:39:60:B3:81:72:82:58:A1:8F:11:5B:F1:A9:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 8C8B750F5840CB542F0DC90CBB682CF49CC8A8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146440.roa
Signing time: Fri 22 May 2026 07:24:34 +0000
ROA not before: Fri 22 May 2026 07:19:34 +0000
ROA not after: Fri 21 May 2027 07:24:34 +0000
asID: 146440
IP address blocks: 240a:aece::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
8c:8b:75:0f:58:40:cb:54:2f:0d:c9:0c:bb:68:2c:f4:9c:c8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:34 2026 GMT
Not After : May 21 07:24:34 2027 GMT
Subject: CN=357598EAF2573960B381728258A18F115BF1A908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:d4:f6:e7:80:01:27:27:8b:8f:95:83:0c:
5d:fb:88:19:2a:26:5d:cc:95:fc:2d:34:28:f8:c8:
79:be:e1:e4:7c:00:dd:48:57:53:0e:63:1c:42:a5:
b2:b6:c7:d5:b2:5b:96:2d:26:2b:58:58:7a:b8:4f:
d4:0d:e0:73:5b:3e:b9:3d:4b:db:ca:ad:6e:e4:e0:
b9:3d:fb:c1:b8:6d:ad:23:36:58:cf:93:08:43:4e:
3a:1b:16:5d:6c:52:a9:6c:14:45:a9:e2:36:ce:c9:
10:82:d9:1c:cc:fa:92:a9:9d:df:03:6d:89:94:b9:
1c:09:43:97:16:4e:db:0d:a1:a7:c2:5d:3f:af:af:
f3:ad:7a:61:5c:3f:52:98:76:a3:c2:5a:ab:24:12:
1c:fc:76:d7:3a:73:b0:b2:ec:5a:88:7b:06:81:f0:
88:1d:d4:bf:96:7d:58:ea:ba:56:fd:86:de:50:46:
98:d9:de:69:66:4d:f4:38:49:d9:39:cd:a6:d8:f2:
39:b1:8b:ec:4a:1a:7b:0e:3a:d0:d0:4e:00:98:8e:
b5:31:81:fa:54:f3:e1:13:1e:40:ed:11:04:41:4a:
8a:3e:9b:da:4e:0e:64:42:a5:16:84:55:49:19:e0:
b7:00:9c:96:23:87:ae:8d:a5:03:e1:4c:f5:00:69:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:75:98:EA:F2:57:39:60:B3:81:72:82:58:A1:8F:11:5B:F1:A9:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aece::/32
Signature Algorithm: sha256WithRSAEncryption
14:6b:e7:17:cd:4c:67:e0:ed:31:86:e6:60:9a:e5:0a:c7:2d:
58:0d:96:42:c7:83:08:57:7f:00:b2:73:8b:7b:df:d2:ea:ec:
de:73:ff:b6:ff:a0:38:e1:dc:4c:9a:16:d4:ca:a4:03:c1:30:
69:15:9d:e5:c8:ac:91:97:d0:8c:dc:4b:38:bc:09:aa:58:b2:
2f:ad:58:27:12:e2:98:84:14:6d:fd:a4:44:2e:c3:e6:54:32:
f8:7b:e6:19:98:dd:0f:db:90:3e:5f:fb:20:e8:37:6e:e0:f8:
6b:4e:03:f5:8f:c0:5c:14:bb:f3:da:46:07:37:6a:d1:ca:04:
51:18:83:c5:c2:8c:28:34:a2:fc:d7:e8:be:ec:6a:d9:08:13:
07:94:8a:d7:23:8d:c0:5e:c7:2d:ca:ae:b9:03:09:52:0e:be:
b0:76:1f:52:e0:26:8a:dc:7c:2d:9c:d8:d7:60:7b:5d:59:8b:
89:8e:65:37:81:e9:d3:d8:cc:f8:c5:24:7f:34:42:b0:a0:82:
4f:4e:c6:0b:68:62:af:b4:b0:e8:65:1e:4d:84:6a:39:90:60:
bd:1c:96:af:23:e0:71:48:90:65:42:99:ef:70:27:5a:e9:41:
f4:c1:17:f1:ac:6a:38:d1:eb:28:4f:8a:3c:b4:02:9c:77:aa:
69:fe:be:9a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAIyLdQ9YQMtULw3JDLtoLPScyKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MzRaFw0yNzA1MjEwNzI0MzRaMDMxMTAvBgNV
BAMTKDM1NzU5OEVBRjI1NzM5NjBCMzgxNzI4MjU4QTE4RjExNUJGMUE5MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj6dT254ABJyeLj5WDDF37iBkq
Jl3MlfwtNCj4yHm+4eR8AN1IV1MOYxxCpbK2x9WyW5YtJitYWHq4T9QN4HNbPrk9
S9vKrW7k4Lk9+8G4ba0jNljPkwhDTjobFl1sUqlsFEWp4jbOyRCC2RzM+pKpnd8D
bYmUuRwJQ5cWTtsNoafCXT+vr/OtemFcP1KYdqPCWqskEhz8dtc6c7Cy7FqIewaB
8Igd1L+WfVjqulb9ht5QRpjZ3mlmTfQ4Sdk5zabY8jmxi+xKGnsOOtDQTgCYjrUx
gfpU8+ETHkDtEQRBSoo+m9pODmRCpRaEVUkZ4LcAnJYjh66NpQPhTPUAaWrvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUNXWY6vJXOWCzgXKCWKGPEVvxqQgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NDQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAquzjANBgkqhkiG9w0BAQsFAAOCAQEAFGvn
F81MZ+DtMYbmYJrlCsctWA2WQseDCFd/ALJzi3vf0urs3nP/tv+gOOHcTJoW1Mqk
A8EwaRWd5ciskZfQjNxLOLwJqliyL61YJxLimIQUbf2kRC7D5lQy+HvmGZjdD9uQ
Pl/7IOg3buD4a04D9Y/AXBS789pGBzdq0coEURiDxcKMKDSi/Nfovuxq2QgTB5SK
1yONwF7HLcquuQMJUg6+sHYfUuAmitx8LZzY12B7XVmLiY5lN4Hp09jM+MUkfzRC
sKCCT07GC2hir7Sw6GUeTYRqOZBgvRyWryPgcUiQZUKZ73AnWulB9MEX8axqONHr
KE+KPLQCnHeqaf6+mg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:05 2026 by rpki-client