Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146507.roa
File: AS146507.roa (raw, json)
Hash identifier: rxERLPHiaSL1b/04hdvzEsqvQhpS0MS+cZR+4MKij9I=
Subject key identifier: EE:77:92:26:60:03:CD:8A:3A:13:B5:DA:8C:F7:C6:71:AF:47:A1:B3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 04045262ABA4B83404A728F29347FE9430992C9B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146507.roa
Signing time: Fri 22 May 2026 06:46:34 +0000
ROA not before: Fri 22 May 2026 06:41:34 +0000
ROA not after: Fri 21 May 2027 06:46:34 +0000
asID: 146507
IP address blocks: 240a:af11::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:04:52:62:ab:a4:b8:34:04:a7:28:f2:93:47:fe:94:30:99:2c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:34 2026 GMT
Not After : May 21 06:46:34 2027 GMT
Subject: CN=EE7792266003CD8A3A13B5DA8CF7C671AF47A1B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:06:ab:bf:ae:8f:18:9e:a3:aa:cc:dc:74:89:
19:ea:3e:15:c6:48:0a:0d:70:27:36:05:b7:08:43:
29:39:49:76:ee:aa:14:c5:29:31:e5:bc:90:4e:40:
58:65:b0:d7:f1:3e:54:72:71:b4:9a:4f:ec:82:ea:
35:e4:31:0c:b7:70:c6:36:38:f0:72:0b:62:93:9a:
85:7f:c0:15:ba:36:b8:6c:49:fe:ab:08:bc:17:42:
48:7d:fb:8d:25:8b:6c:d8:07:70:9d:47:66:5e:b3:
b8:cf:e6:69:26:ee:af:82:85:85:41:df:29:40:66:
49:6f:4a:83:e2:d6:11:27:0b:4c:c3:91:28:2a:3f:
3b:2d:3d:5e:f9:9a:e2:2a:6a:21:68:26:f5:cf:3e:
6b:e6:7c:36:29:c2:29:eb:2d:e1:62:ab:88:c8:50:
66:bc:4b:0b:ef:1a:6f:92:b2:2e:97:ee:ca:56:ae:
c9:3e:b6:61:27:1a:7d:24:88:27:38:40:1c:74:4d:
30:14:67:b7:06:e1:ee:8b:e9:05:da:1f:53:34:70:
e8:9c:8e:47:2a:7f:1e:c3:b5:d7:fc:93:2e:4c:72:
80:a5:25:f3:51:43:be:cf:c7:12:e6:69:f6:45:73:
94:55:0a:a6:8b:95:7a:5b:fd:c6:34:e6:92:fa:ed:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:77:92:26:60:03:CD:8A:3A:13:B5:DA:8C:F7:C6:71:AF:47:A1:B3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af11::/32
Signature Algorithm: sha256WithRSAEncryption
85:b9:24:1d:7b:b1:09:7b:6f:4f:70:1a:c6:a9:82:84:51:2e:
a1:ca:60:29:50:fb:c9:4a:92:cc:b4:7f:c8:29:c6:21:08:2e:
63:aa:32:f0:fe:a0:42:23:2b:de:ff:85:bf:a0:77:da:92:43:
b0:da:ed:8a:67:68:96:41:13:03:e3:61:2c:f6:77:e8:58:3e:
ec:2f:6b:1f:52:ed:72:ac:85:23:39:86:69:39:b1:03:a9:34:
1e:f4:c4:78:1a:25:72:59:1b:44:00:3e:eb:db:dd:28:5d:77:
8a:4c:3b:e9:44:75:ba:f6:08:df:5b:b8:da:5b:ac:c7:92:b9:
3d:fc:5e:77:1e:a6:b1:b3:cc:02:6b:8d:0e:7e:4a:6b:fb:80:
2e:a5:77:ea:ab:30:79:30:ba:d6:9b:55:57:67:25:ed:e1:6f:
6c:34:07:ce:33:5d:8a:7c:35:40:2b:d7:0c:31:83:67:72:28:
ac:d7:54:81:02:e5:05:ba:28:ad:28:5b:af:57:28:78:4f:ec:
89:92:c5:f5:b6:d1:fb:8a:40:33:32:2e:4f:41:07:13:4b:10:
6d:66:3b:90:1a:a8:1c:4a:9c:19:c4:3a:da:6c:58:51:d4:f9:
07:40:12:c6:27:ff:5a:9f:c4:dc:b6:7d:88:16:e1:f0:ec:8b:
a2:57:69:ca
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBARSYqukuDQEpyjyk0f+lDCZLJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMzRaFw0yNzA1MjEwNjQ2MzRaMDMxMTAvBgNV
BAMTKEVFNzc5MjI2NjAwM0NEOEEzQTEzQjVEQThDRjdDNjcxQUY0N0ExQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxBqu/ro8YnqOqzNx0iRnqPhXG
SAoNcCc2BbcIQyk5SXbuqhTFKTHlvJBOQFhlsNfxPlRycbSaT+yC6jXkMQy3cMY2
OPByC2KTmoV/wBW6NrhsSf6rCLwXQkh9+40li2zYB3CdR2Zes7jP5mkm7q+ChYVB
3ylAZklvSoPi1hEnC0zDkSgqPzstPV75muIqaiFoJvXPPmvmfDYpwinrLeFiq4jI
UGa8SwvvGm+Ssi6X7spWrsk+tmEnGn0kiCc4QBx0TTAUZ7cG4e6L6QXaH1M0cOic
jkcqfx7Dtdf8ky5McoClJfNRQ77PxxLmafZFc5RVCqaLlXpb/cY05pL67Tq9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU7neSJmADzYo6E7XajPfGca9HobMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvETANBgkqhkiG9w0BAQsFAAOCAQEAhbkk
HXuxCXtvT3AaxqmChFEuocpgKVD7yUqSzLR/yCnGIQguY6oy8P6gQiMr3v+Fv6B3
2pJDsNrtimdolkETA+NhLPZ36Fg+7C9rH1LtcqyFIzmGaTmxA6k0HvTEeBolclkb
RAA+69vdKF13ikw76UR1uvYI31u42lusx5K5Pfxedx6msbPMAmuNDn5Ka/uALqV3
6qsweTC61ptVV2cl7eFvbDQHzjNdinw1QCvXDDGDZ3IorNdUgQLlBboorShbr1co
eE/siZLF9bbR+4pAMzIuT0EHE0sQbWY7kBqoHEqcGcQ62mxYUdT5B0ASxif/Wp/E
3LZ9iBbh8OyLoldpyg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:26 2026 by rpki-client