Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146463.roa
File: AS146463.roa (raw, json)
Hash identifier: Dy3Rr54CaChB3ZzoWRsFnVJS+mBlA63I3+J/qf2NnJ8=
Subject key identifier: 80:17:B9:8A:8E:34:6C:42:6C:00:4F:5E:4A:D1:4C:80:4D:3F:98:F0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 13A411590CA9AE181AE9025C0E6D35BCE60749AD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146463.roa
Signing time: Fri 22 May 2026 04:08:25 +0000
ROA not before: Fri 22 May 2026 04:03:25 +0000
ROA not after: Fri 21 May 2027 04:08:25 +0000
asID: 146463
IP address blocks: 240a:aee5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a4:11:59:0c:a9:ae:18:1a:e9:02:5c:0e:6d:35:bc:e6:07:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:25 2026 GMT
Not After : May 21 04:08:25 2027 GMT
Subject: CN=8017B98A8E346C426C004F5E4AD14C804D3F98F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:fa:b7:36:14:47:ff:cf:d2:36:89:39:6d:
06:40:f1:d0:8d:8d:ce:d7:7a:0b:c4:5a:d5:68:4c:
48:14:d0:75:93:bd:5f:57:54:b8:03:54:ea:e1:d1:
c8:57:ac:1d:b6:a4:d0:30:6d:10:59:e6:ae:c8:b1:
a3:da:f3:48:b8:9c:42:1e:99:59:4b:4a:dd:10:31:
a2:88:8e:50:11:e9:92:47:75:5a:5b:68:a6:9b:82:
6c:74:c1:00:64:70:df:b2:a2:33:e1:01:90:20:f9:
6a:ad:9b:07:30:53:c6:0a:c0:bd:ab:71:39:b0:3e:
66:c9:a9:c6:6d:a7:9d:c6:7b:69:da:9b:02:aa:d9:
d8:df:0d:ef:af:39:38:54:14:57:ff:fc:78:5f:bc:
70:c4:d7:4d:ae:55:6a:75:41:9e:61:3a:e3:c2:4f:
07:7b:54:4e:53:17:0d:bb:92:68:b8:de:ea:04:10:
16:6a:13:d9:01:48:c1:15:2f:d2:21:6f:dd:fd:4a:
53:15:f5:f6:3e:d9:95:cd:65:3c:1f:e3:6e:b3:d8:
ff:b3:78:af:b0:f1:0f:da:28:fc:14:f3:ec:34:7c:
e5:7c:98:0f:4f:1c:b2:bc:e1:fd:7d:d8:7d:a6:40:
6c:9a:de:ec:e4:e2:ec:10:ba:6a:77:0e:2b:1d:af:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:B9:8A:8E:34:6C:42:6C:00:4F:5E:4A:D1:4C:80:4D:3F:98:F0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146463.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aee5::/32
Signature Algorithm: sha256WithRSAEncryption
b4:53:56:78:f2:3b:62:92:a8:df:0d:d0:f1:90:1b:83:fc:42:
1d:a2:b3:5d:b9:c3:75:f6:6c:77:f4:3e:60:b4:6c:22:4f:17:
4b:55:7a:12:32:bd:11:4e:c0:10:11:97:e2:09:e6:fa:a7:92:
af:2e:c9:41:f3:37:74:c5:6d:9a:60:89:c1:98:2f:6d:f5:42:
8e:69:fc:25:4e:eb:19:fc:b2:c3:3f:a2:12:76:d3:9a:8a:70:
52:ff:fc:17:61:61:d5:66:88:2a:f9:d8:08:75:35:6a:c6:52:
8c:00:2e:ba:f7:5c:3f:90:3a:33:30:9b:41:7a:e7:7e:f6:f9:
a6:71:ba:f1:8b:c1:7b:ea:38:cb:c1:3b:6c:22:e7:72:d7:47:
e3:12:64:8e:14:e8:38:99:3c:86:d6:96:91:bb:0b:ed:20:1a:
a3:65:e8:1e:5e:5b:f8:9a:46:ba:7b:42:09:39:ca:b1:80:d5:
c6:dd:58:dc:34:96:e9:eb:5f:95:7e:ff:4e:0d:be:f8:91:bc:
d2:a2:65:c6:7a:b8:56:70:2d:fc:0a:2e:5f:f2:59:ee:39:33:
f2:7c:d9:cc:9b:84:02:53:b4:65:0b:a6:dd:cf:75:ef:46:f3:
62:d5:0a:af:47:98:01:f5:2f:a7:27:03:0a:7f:02:b8:f7:ad:
dc:3a:00:6a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUE6QRWQyprhga6QJcDm01vOYHSa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMjVaFw0yNzA1MjEwNDA4MjVaMDMxMTAvBgNV
BAMTKDgwMTdCOThBOEUzNDZDNDI2QzAwNEY1RTRBRDE0QzgwNEQzRjk4RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vfq3NhRH/8/SNok5bQZA8dCN
jc7XegvEWtVoTEgU0HWTvV9XVLgDVOrh0chXrB22pNAwbRBZ5q7IsaPa80i4nEIe
mVlLSt0QMaKIjlAR6ZJHdVpbaKabgmx0wQBkcN+yojPhAZAg+WqtmwcwU8YKwL2r
cTmwPmbJqcZtp53Ge2namwKq2djfDe+vOThUFFf//HhfvHDE102uVWp1QZ5hOuPC
Twd7VE5TFw27kmi43uoEEBZqE9kBSMEVL9Ihb939SlMV9fY+2ZXNZTwf426z2P+z
eK+w8Q/aKPwU8+w0fOV8mA9PHLK84f192H2mQGya3uzk4uwQump3Disdr7GDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUgBe5io40bEJsAE9eStFMgE0/mPAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NDYzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqu5TANBgkqhkiG9w0BAQsFAAOCAQEAtFNW
ePI7YpKo3w3Q8ZAbg/xCHaKzXbnDdfZsd/Q+YLRsIk8XS1V6EjK9EU7AEBGX4gnm
+qeSry7JQfM3dMVtmmCJwZgvbfVCjmn8JU7rGfyywz+iEnbTmopwUv/8F2Fh1WaI
KvnYCHU1asZSjAAuuvdcP5A6MzCbQXrnfvb5pnG68YvBe+o4y8E7bCLnctdH4xJk
jhToOJk8htaWkbsL7SAao2XoHl5b+JpGuntCCTnKsYDVxt1Y3DSW6etflX7/Tg2+
+JG80qJlxnq4VnAt/AouX/JZ7jkz8nzZzJuEAlO0ZQum3c9170bzYtUKr0eYAfUv
pycDCn8CuPet3DoAag==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client