Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146467.roa
File: AS146467.roa (raw, json)
Hash identifier: mJOcTdqBACJZEKIWdZSvaEo5gGc2I+8ebKEzXvuAOyg=
Subject key identifier: 6B:8A:EA:29:3D:7B:F5:02:F2:08:51:84:1C:8B:4A:65:82:A5:B6:CB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 79D62ACA0D742B68BCFB2D8FFB085B87BD437CE6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146467.roa
Signing time: Fri 22 May 2026 02:48:10 +0000
ROA not before: Fri 22 May 2026 02:43:10 +0000
ROA not after: Fri 21 May 2027 02:48:10 +0000
asID: 146467
IP address blocks: 240a:aee9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d6:2a:ca:0d:74:2b:68:bc:fb:2d:8f:fb:08:5b:87:bd:43:7c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:10 2026 GMT
Not After : May 21 02:48:10 2027 GMT
Subject: CN=6B8AEA293D7BF502F20851841C8B4A6582A5B6CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:10:58:60:9f:36:9e:fb:f9:7e:d5:09:e9:
cc:69:10:d6:d4:68:80:53:b6:db:12:53:21:47:15:
f5:75:ac:2e:4b:5b:1a:18:88:5a:00:a1:d3:dd:f2:
7a:d4:11:32:53:ae:07:f8:a2:b4:a6:6e:ef:77:23:
90:80:9c:99:33:8e:3f:37:3c:b4:ae:33:3b:66:1b:
73:7a:68:37:83:4e:ee:f0:7f:14:75:1c:4b:28:e3:
52:59:3c:7e:61:96:bb:01:0f:bc:0d:d6:e9:07:65:
5f:f2:97:83:78:9d:6d:41:d5:a0:9f:b7:2c:30:8c:
23:86:47:99:df:ab:38:25:0e:e2:b9:21:8b:e2:31:
25:15:b2:d3:c7:59:77:60:5f:35:32:22:50:48:32:
0b:3e:27:1f:f2:41:ca:04:19:d9:d3:d2:7c:57:3d:
7c:f7:4c:01:42:80:6a:c6:c5:5b:bf:0f:26:d7:42:
96:28:10:a9:9e:fd:e2:19:5e:a6:f9:40:a9:59:57:
46:2d:33:f6:85:ae:03:be:b9:f7:91:7c:b8:33:d4:
7a:7a:f8:db:e8:c4:16:b9:ec:0d:a5:72:d1:ef:b9:
b5:a8:f6:d1:da:00:78:56:ca:b3:ba:8a:6b:c1:f2:
8c:5c:3d:1a:15:50:ee:b6:c1:e0:a7:16:a8:65:52:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8A:EA:29:3D:7B:F5:02:F2:08:51:84:1C:8B:4A:65:82:A5:B6:CB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146467.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aee9::/32
Signature Algorithm: sha256WithRSAEncryption
8e:95:12:49:2f:f0:13:96:2f:99:93:f8:8b:7a:95:0c:db:ac:
cd:4f:64:c5:6c:04:14:53:73:13:5e:6c:84:6a:74:7e:22:da:
f0:b1:bd:31:ef:1f:a3:65:69:f8:97:24:84:c1:c2:20:3f:63:
fb:23:f0:00:81:9e:e8:24:8c:b1:98:6d:d6:07:18:9a:1b:1e:
aa:76:7e:3c:b1:d5:94:24:c6:bb:ae:22:b7:13:bf:d1:8f:87:
61:53:c7:b2:86:cb:16:64:f8:c4:04:3c:86:56:38:19:f7:0c:
72:00:ef:90:70:d3:5c:08:04:9e:2d:f7:e2:68:96:29:a9:6f:
ee:04:26:ea:3d:cc:08:43:b8:2a:c4:4b:bb:ae:6a:24:6b:17:
e4:f6:75:71:c1:a5:c8:63:4d:b1:00:4e:6a:d5:b0:ed:7a:4e:
37:4d:28:41:8e:f6:0e:4c:dc:69:c4:c1:e8:65:fa:b8:20:0c:
64:65:87:89:c2:8d:52:8d:61:78:90:4c:5d:90:e2:e7:25:57:
63:e5:a6:56:a7:04:f7:70:f0:44:80:6a:14:29:96:33:83:e5:
1f:a5:38:e1:24:fb:b4:df:57:9c:aa:8c:6f:e4:f8:dd:8a:cf:
88:d0:34:c6:9d:82:96:3b:51:2c:cc:30:bc:89:1f:55:b9:d0:
1c:e1:19:f1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUedYqyg10K2i8+y2P+whbh71DfOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQzMTBaFw0yNzA1MjEwMjQ4MTBaMDMxMTAvBgNV
BAMTKDZCOEFFQTI5M0Q3QkY1MDJGMjA4NTE4NDFDOEI0QTY1ODJBNUI2Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAhBYYJ82nvv5ftUJ6cxpENbU
aIBTttsSUyFHFfV1rC5LWxoYiFoAodPd8nrUETJTrgf4orSmbu93I5CAnJkzjj83
PLSuMztmG3N6aDeDTu7wfxR1HEso41JZPH5hlrsBD7wN1ukHZV/yl4N4nW1B1aCf
tywwjCOGR5nfqzglDuK5IYviMSUVstPHWXdgXzUyIlBIMgs+Jx/yQcoEGdnT0nxX
PXz3TAFCgGrGxVu/DybXQpYoEKme/eIZXqb5QKlZV0YtM/aFrgO+ufeRfLgz1Hp6
+NvoxBa57A2lctHvubWo9tHaAHhWyrO6imvB8oxcPRoVUO62weCnFqhlUsGnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUa4rqKT179QLyCFGEHItKZYKltsswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NDY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqu6TANBgkqhkiG9w0BAQsFAAOCAQEAjpUS
SS/wE5YvmZP4i3qVDNuszU9kxWwEFFNzE15shGp0fiLa8LG9Me8fo2Vp+JckhMHC
ID9j+yPwAIGe6CSMsZht1gcYmhseqnZ+PLHVlCTGu64itxO/0Y+HYVPHsobLFmT4
xAQ8hlY4GfcMcgDvkHDTXAgEni334miWKalv7gQm6j3MCEO4KsRLu65qJGsX5PZ1
ccGlyGNNsQBOatWw7XpON00oQY72DkzcacTB6GX6uCAMZGWHicKNUo1heJBMXZDi
5yVXY+WmVqcE93DwRIBqFCmWM4PlH6U44ST7tN9XnKqMb+T43YrPiNA0xp2CljtR
LMwwvIkfVbnQHOEZ8Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:32 2026 by rpki-client