Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146501.roa
File: AS146501.roa (raw, json)
Hash identifier: nlsQ4JF29kH2WpihsR0j6PwiAWgyeOY0KWjnoN1AnVM=
Subject key identifier: 1F:D9:8D:BA:FD:40:3B:AA:33:FB:FB:1D:F8:BE:0D:BA:2D:D5:44:EB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32BE76E14F21DB1AD7317536F73B76BBE6E85268
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146501.roa
Signing time: Fri 22 May 2026 06:05:15 +0000
ROA not before: Fri 22 May 2026 06:00:15 +0000
ROA not after: Fri 21 May 2027 06:05:15 +0000
asID: 146501
IP address blocks: 240a:af0b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:be:76:e1:4f:21:db:1a:d7:31:75:36:f7:3b:76:bb:e6:e8:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:15 2026 GMT
Not After : May 21 06:05:15 2027 GMT
Subject: CN=1FD98DBAFD403BAA33FBFB1DF8BE0DBA2DD544EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:b8:3b:07:94:e3:49:0a:88:a3:88:32:e1:
41:f7:f5:bd:34:b8:50:67:2d:e5:99:31:93:8c:37:
59:f1:64:bc:38:e2:78:94:f6:15:24:32:ee:70:24:
ba:da:9d:97:f6:2b:cc:ec:74:bc:25:66:ac:8c:58:
97:1a:0c:8a:28:b4:39:7c:38:d0:a8:a6:93:c7:ea:
73:0c:42:1d:b4:b0:a5:45:7d:1a:e1:7e:47:f5:ae:
bc:84:4d:5d:e5:82:02:32:58:1d:df:e4:4f:45:9e:
3a:96:d9:9a:24:de:09:5d:00:92:24:07:f5:14:06:
ca:6e:a6:97:e2:eb:d6:58:29:60:8e:82:29:47:62:
fe:cb:ff:68:24:9a:98:e8:c4:68:20:cb:bd:6e:cd:
cd:03:68:f5:a0:7f:28:2d:4e:b3:0c:2d:09:29:81:
c2:6c:d7:e6:c7:da:6a:da:7a:fb:89:64:1a:f2:8e:
b3:c2:de:88:98:ca:a0:d8:9e:e2:8d:6f:e4:fe:6c:
32:93:53:df:cf:0e:e1:3f:9c:c1:40:ce:01:e5:d4:
fe:6c:4b:8c:e4:e7:a5:1d:45:ae:a1:13:c4:a3:86:
8f:43:30:0d:e7:31:3c:c7:48:b7:da:e6:80:a3:d1:
42:93:4d:f5:b3:77:3c:4d:e7:d0:e1:6f:fc:7c:c3:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D9:8D:BA:FD:40:3B:AA:33:FB:FB:1D:F8:BE:0D:BA:2D:D5:44:EB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af0b::/32
Signature Algorithm: sha256WithRSAEncryption
03:56:d4:ef:7a:3c:39:62:05:3b:4a:1b:41:31:69:65:53:5d:
fb:69:47:93:e1:fd:38:3c:e4:1d:54:61:78:6f:8f:9a:72:b0:
9d:9c:04:de:f0:e4:06:f5:40:17:08:bc:dc:a1:27:e5:25:5d:
b4:3d:b4:20:7b:76:b8:4c:84:15:7e:f9:a5:02:30:64:41:29:
b3:32:63:a8:e5:ff:94:fb:67:7c:4a:c3:41:55:8e:27:41:ea:
8a:73:48:e7:a6:2b:f6:04:5c:b3:75:8f:f7:02:38:33:a6:ba:
81:29:22:f8:31:d9:b3:22:1b:15:d9:e8:f5:ab:ae:f0:8b:11:
a2:e0:72:4d:5e:17:93:20:10:34:af:12:87:1a:65:0d:dc:ad:
d6:3d:82:a6:d3:80:7e:0d:de:6e:3e:1c:0b:ed:c8:cf:b3:1b:
f2:bc:35:10:9b:57:95:04:e5:a1:88:b5:75:cf:f4:00:b6:a3:
58:21:d2:ed:12:19:d8:82:e1:70:c4:73:ba:b3:e6:96:6a:e1:
2a:d7:da:85:20:5e:ea:a3:dd:de:ec:a2:93:3f:23:ec:c1:3c:
03:c8:f4:f6:1c:23:a4:17:33:a5:7a:d1:3d:2e:74:ea:b2:cf:
03:c3:a6:24:e5:39:e6:da:87:a6:63:96:21:89:7e:94:7f:ba:
6b:eb:7b:ff
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMr524U8h2xrXMXU29zt2u+boUmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMTVaFw0yNzA1MjEwNjA1MTVaMDMxMTAvBgNV
BAMTKDFGRDk4REJBRkQ0MDNCQUEzM0ZCRkIxREY4QkUwREJBMkRENTQ0RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCym7g7B5TjSQqIo4gy4UH39b00
uFBnLeWZMZOMN1nxZLw44niU9hUkMu5wJLranZf2K8zsdLwlZqyMWJcaDIootDl8
ONCoppPH6nMMQh20sKVFfRrhfkf1rryETV3lggIyWB3f5E9FnjqW2Zok3gldAJIk
B/UUBspuppfi69ZYKWCOgilHYv7L/2gkmpjoxGggy71uzc0DaPWgfygtTrMMLQkp
gcJs1+bH2mraevuJZBryjrPC3oiYyqDYnuKNb+T+bDKTU9/PDuE/nMFAzgHl1P5s
S4zk56UdRa6hE8Sjho9DMA3nMTzHSLfa5oCj0UKTTfWzdzxN59Dhb/x8w9GXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUH9mNuv1AO6oz+/sd+L4Nui3VROswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvCzANBgkqhkiG9w0BAQsFAAOCAQEAA1bU
73o8OWIFO0obQTFpZVNd+2lHk+H9ODzkHVRheG+PmnKwnZwE3vDkBvVAFwi83KEn
5SVdtD20IHt2uEyEFX75pQIwZEEpszJjqOX/lPtnfErDQVWOJ0HqinNI56Yr9gRc
s3WP9wI4M6a6gSki+DHZsyIbFdno9auu8IsRouByTV4XkyAQNK8ShxplDdyt1j2C
ptOAfg3ebj4cC+3Iz7Mb8rw1EJtXlQTloYi1dc/0ALajWCHS7RIZ2ILhcMRzurPm
lmrhKtfahSBe6qPd3uyikz8j7ME8A8j09hwjpBczpXrRPS506rLPA8OmJOU55tqH
pmOWIYl+lH+6a+t7/w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:29 2026 by rpki-client