Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146456.roa
File: AS146456.roa (raw, json)
Hash identifier: p9+CBv/kPh9CzMDNi0XWJbqmFgbF2IviAR3t5EDeatw=
Subject key identifier: 24:F8:02:ED:36:C1:9C:E8:A4:E9:45:94:9B:CE:DA:04:8E:14:D8:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 72B605946C6767CAF5BA04BDE75A2DD7D34B242B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146456.roa
Signing time: Fri 22 May 2026 04:26:42 +0000
ROA not before: Fri 22 May 2026 04:21:42 +0000
ROA not after: Fri 21 May 2027 04:26:42 +0000
asID: 146456
IP address blocks: 240a:aede::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b6:05:94:6c:67:67:ca:f5:ba:04:bd:e7:5a:2d:d7:d3:4b:24:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:42 2026 GMT
Not After : May 21 04:26:42 2027 GMT
Subject: CN=24F802ED36C19CE8A4E945949BCEDA048E14D841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:4f:fc:2f:a8:8b:b0:36:a0:31:35:71:a1:
e0:82:f6:9e:49:31:3b:40:e8:22:e5:f7:5d:11:4c:
5b:32:be:80:a8:aa:e2:e5:8b:ef:d9:e3:01:e4:25:
4d:4f:e3:01:94:da:c2:94:23:00:e4:c8:80:50:3a:
0f:1d:0e:7f:a5:8d:3a:70:d3:23:a6:56:11:08:76:
e9:7c:e3:70:18:af:1e:d6:3c:fb:13:ec:2d:6d:03:
7d:02:af:af:57:7f:6e:f6:91:2a:04:25:36:6f:ad:
da:26:d2:f6:02:96:d9:c9:c4:56:eb:23:1c:ab:c0:
22:12:4e:e3:f2:68:37:e4:74:da:3b:28:7e:ed:26:
19:43:20:cb:96:a7:ee:05:b1:b2:89:99:89:21:51:
ed:58:17:14:61:9f:02:bb:97:55:36:10:f0:c5:06:
d5:98:0c:13:aa:21:3b:13:d0:24:30:4f:e8:20:e4:
6f:a9:63:62:5c:5a:c2:70:ff:fe:a1:6e:7a:d1:1f:
8c:47:ce:db:05:26:f5:f1:80:13:04:17:a8:e7:52:
40:d0:1a:49:a1:94:7a:3e:93:21:cb:fc:f7:7f:19:
4f:fd:1f:5b:3f:7a:3a:b0:a0:c7:db:75:b4:32:bd:
b7:9a:30:de:19:db:6d:02:0b:a5:9a:f5:e8:52:4c:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F8:02:ED:36:C1:9C:E8:A4:E9:45:94:9B:CE:DA:04:8E:14:D8:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aede::/32
Signature Algorithm: sha256WithRSAEncryption
77:9c:f6:5a:aa:1b:38:c9:f8:4f:68:34:2e:46:48:2a:32:95:
41:22:4b:94:d7:94:a9:02:4e:70:83:51:6b:87:67:f5:dd:f7:
ad:51:0a:1e:4e:7c:9a:4d:41:9a:e1:ab:f6:83:c1:2f:f3:bd:
7e:98:f6:9f:3f:d0:ef:90:d2:c3:58:01:bf:32:9f:7f:bc:ed:
6a:94:e0:2f:d2:23:f1:d6:eb:f1:9d:df:4a:b5:99:eb:0f:30:
5f:e3:19:34:7f:d5:c3:a7:49:d7:68:47:9c:e5:88:d5:4b:97:
25:23:41:5a:c2:21:1a:ea:33:08:db:30:1d:38:48:48:35:87:
da:16:02:45:7d:fc:55:1f:0f:3f:53:41:f1:4c:8f:73:27:c7:
8c:60:75:1f:fd:48:88:25:76:2e:ee:2d:4d:42:53:2e:8e:f2:
7f:5f:a6:8c:52:64:1b:37:a1:b2:be:86:70:ea:a8:5b:fa:3d:
12:ab:e9:2e:de:2f:d5:1f:f0:f2:85:1c:af:fb:7c:b3:fd:0d:
b7:e4:5c:05:94:7f:48:47:ff:99:58:ca:59:8a:17:8c:2e:2c:
b6:3c:91:19:c1:10:4c:e7:ed:5a:a8:e8:d7:d0:0b:a1:c7:0c:
aa:d7:fb:72:84:64:98:0d:29:68:5a:26:69:ae:8e:ca:56:0d:
5b:4f:be:39
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcrYFlGxnZ8r1ugS951ot19NLJCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIxNDJaFw0yNzA1MjEwNDI2NDJaMDMxMTAvBgNV
BAMTKDI0RjgwMkVEMzZDMTlDRThBNEU5NDU5NDlCQ0VEQTA0OEUxNEQ4NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3l0/8L6iLsDagMTVxoeCC9p5J
MTtA6CLl910RTFsyvoCoquLli+/Z4wHkJU1P4wGU2sKUIwDkyIBQOg8dDn+ljTpw
0yOmVhEIdul843AYrx7WPPsT7C1tA30Cr69Xf272kSoEJTZvrdom0vYCltnJxFbr
IxyrwCISTuPyaDfkdNo7KH7tJhlDIMuWp+4FsbKJmYkhUe1YFxRhnwK7l1U2EPDF
BtWYDBOqITsT0CQwT+gg5G+pY2JcWsJw//6hbnrRH4xHztsFJvXxgBMEF6jnUkDQ
GkmhlHo+kyHL/Pd/GU/9H1s/ejqwoMfbdbQyvbeaMN4Z220CC6Wa9ehSTEZnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJPgC7TbBnOik6UWUm87aBI4U2EEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NDU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqu3jANBgkqhkiG9w0BAQsFAAOCAQEAd5z2
WqobOMn4T2g0LkZIKjKVQSJLlNeUqQJOcINRa4dn9d33rVEKHk58mk1BmuGr9oPB
L/O9fpj2nz/Q75DSw1gBvzKff7ztapTgL9Ij8dbr8Z3fSrWZ6w8wX+MZNH/Vw6dJ
12hHnOWI1UuXJSNBWsIhGuozCNswHThISDWH2hYCRX38VR8PP1NB8UyPcyfHjGB1
H/1IiCV2Lu4tTUJTLo7yf1+mjFJkGzehsr6GcOqoW/o9EqvpLt4v1R/w8oUcr/t8
s/0Nt+RcBZR/SEf/mVjKWYoXjC4stjyRGcEQTOftWqjo19ALoccMqtf7coRkmA0p
aFomaa6OylYNW0++OQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:50 2026 by rpki-client