Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146525.roa
File: AS146525.roa (raw, json)
Hash identifier: v0xPnYeQ6sDmsoPDDGIHzfofUuwO3TXOksnLvhSi02I=
Subject key identifier: 58:D7:C6:B0:20:AF:14:2D:C9:A5:75:27:72:EB:44:5F:42:53:66:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2036BF1667BE564F7DAAA8D28DEAFBA52A8BF964
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146525.roa
Signing time: Mon 25 May 2026 06:48:56 +0000
ROA not before: Mon 25 May 2026 06:43:56 +0000
ROA not after: Mon 24 May 2027 06:48:56 +0000
asID: 146525
IP address blocks: 240a:af23::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:36:bf:16:67:be:56:4f:7d:aa:a8:d2:8d:ea:fb:a5:2a:8b:f9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:56 2026 GMT
Not After : May 24 06:48:56 2027 GMT
Subject: CN=58D7C6B020AF142DC9A5752772EB445F4253668D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:c1:7d:9d:d4:ef:7e:a3:27:a4:96:91:36:
ac:cd:37:e6:da:72:8a:cf:75:ba:c9:88:fa:91:cf:
31:12:8f:d5:1d:9f:59:90:ff:4d:e6:fd:fd:ad:d1:
63:82:3e:18:fd:f7:8b:a0:73:e9:2d:ee:28:57:2d:
f9:23:74:f6:61:ca:f0:a3:7c:f1:ad:bd:f7:78:96:
5c:fc:73:34:90:c6:df:0a:29:48:ef:d9:a5:e3:9b:
49:14:f7:a3:00:4b:68:cd:14:44:c0:fc:17:2c:85:
5e:39:f6:ec:d2:72:0a:05:bc:9a:1e:ea:e0:86:5f:
46:00:3d:fb:e9:83:d2:9d:38:ba:3c:fc:4f:71:e1:
89:95:16:3b:83:96:c0:d5:bc:cd:2e:3c:3b:cd:fb:
1b:95:a1:a3:ad:45:ab:9b:a1:66:59:ae:43:cb:31:
1d:81:30:81:44:2a:b8:40:76:ea:ee:ae:64:d6:15:
3f:89:0a:ad:95:08:bf:35:5c:a3:12:02:02:1d:68:
e9:83:2e:46:4a:b0:d8:59:a2:b2:c7:af:6f:34:83:
63:28:9e:f5:ac:e6:9b:78:07:8a:b8:8c:84:7e:4c:
ed:cf:52:80:d2:36:38:c2:cf:da:3b:9e:98:77:ce:
f9:86:26:0f:2b:c3:84:6c:1d:65:be:fc:93:6c:ff:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:C6:B0:20:AF:14:2D:C9:A5:75:27:72:EB:44:5F:42:53:66:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146525.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af23::/32
Signature Algorithm: sha256WithRSAEncryption
17:67:80:20:89:ee:04:7a:5b:0f:af:86:41:a1:9a:f7:80:04:
cc:13:16:d6:e4:0b:dc:c2:8b:e6:8c:bc:1f:1c:79:47:ed:24:
fb:7c:a2:53:2a:96:4c:4f:81:45:c8:43:57:af:68:21:79:00:
d7:46:d4:4b:90:21:21:ac:ee:8e:ca:73:ac:bf:67:a6:b2:b4:
68:a8:fc:ad:96:bc:9f:b5:e6:11:ca:7a:29:bc:b1:73:d3:e6:
c0:6c:9d:00:87:f3:8e:4a:ca:b2:8d:ce:d3:b6:67:23:1a:51:
b0:a0:b6:f5:c4:fd:9d:1c:4a:d1:c0:03:ff:b4:dd:1d:a1:c4:
a5:00:ad:a6:be:57:7f:a9:42:d7:d9:94:5c:1d:25:44:50:ef:
25:8b:e3:a0:4b:11:f5:bb:67:7c:5f:b2:af:42:13:cf:e1:cb:
fa:e5:d8:c1:c6:1d:12:f6:f6:de:64:5b:ba:df:a2:05:4f:41:
64:8c:4d:cd:44:de:2a:7c:3b:c8:73:fc:11:3e:fc:04:6d:b4:
4f:4e:79:4a:9b:57:c3:4a:f0:27:4b:09:19:7a:28:e3:ca:5b:
a7:c4:95:5f:62:bc:d4:19:e6:59:e8:db:ba:f8:70:f8:f1:56:
b4:4d:09:2a:5e:68:8b:e3:0e:fb:c2:41:d2:c2:fd:bc:50:db:
ad:78:f0:97
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIDa/Fme+Vk99qqjSjer7pSqL+WQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNTZaFw0yNzA1MjQwNjQ4NTZaMDMxMTAvBgNV
BAMTKDU4RDdDNkIwMjBBRjE0MkRDOUE1NzUyNzcyRUI0NDVGNDI1MzY2OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuScF9ndTvfqMnpJaRNqzNN+ba
corPdbrJiPqRzzESj9Udn1mQ/03m/f2t0WOCPhj994ugc+kt7ihXLfkjdPZhyvCj
fPGtvfd4llz8czSQxt8KKUjv2aXjm0kU96MAS2jNFETA/BcshV459uzScgoFvJoe
6uCGX0YAPfvpg9KdOLo8/E9x4YmVFjuDlsDVvM0uPDvN+xuVoaOtRauboWZZrkPL
MR2BMIFEKrhAdururmTWFT+JCq2VCL81XKMSAgIdaOmDLkZKsNhZorLHr280g2Mo
nvWs5pt4B4q4jIR+TO3PUoDSNjjCz9o7nph3zvmGJg8rw4RsHWW+/JNs/3SFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUWNfGsCCvFC3JpXUncutEX0JTZo0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvIzANBgkqhkiG9w0BAQsFAAOCAQEAF2eA
IInuBHpbD6+GQaGa94AEzBMW1uQL3MKL5oy8Hxx5R+0k+3yiUyqWTE+BRchDV69o
IXkA10bUS5AhIazujspzrL9nprK0aKj8rZa8n7XmEcp6Kbyxc9PmwGydAIfzjkrK
so3O07ZnIxpRsKC29cT9nRxK0cAD/7TdHaHEpQCtpr5Xf6lC19mUXB0lRFDvJYvj
oEsR9btnfF+yr0ITz+HL+uXYwcYdEvb23mRbut+iBU9BZIxNzUTeKnw7yHP8ET78
BG20T055SptXw0rwJ0sJGXoo48pbp8SVX2K81BnmWejbuvhw+PFWtE0JKl5oi+MO
+8JB0sL9vFDbrXjwlw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client