Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146538.roa
File: AS146538.roa (raw, json)
Hash identifier: fQqAMWvkmNZzxXfQv74RVh1Gcy5VAX9vmOE+YDc7kPs=
Subject key identifier: 52:56:B1:F9:4F:98:38:8A:C5:70:E1:E3:EB:09:49:4D:BF:66:83:82
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 67066E78EF45DF869995B776A0C9D51AFAAC654D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146538.roa
Signing time: Fri 22 May 2026 06:58:35 +0000
ROA not before: Fri 22 May 2026 06:53:35 +0000
ROA not after: Fri 21 May 2027 06:58:35 +0000
asID: 146538
IP address blocks: 240a:af30::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:06:6e:78:ef:45:df:86:99:95:b7:76:a0:c9:d5:1a:fa:ac:65:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:35 2026 GMT
Not After : May 21 06:58:35 2027 GMT
Subject: CN=5256B1F94F98388AC570E1E3EB09494DBF668382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:1e:d5:e2:40:86:b1:fc:83:0d:3c:6a:69:
1e:8f:8e:2d:6a:a0:f5:64:63:82:5f:be:59:74:e0:
5a:be:67:9e:6f:71:b1:89:d2:dd:19:79:b5:4a:4d:
da:4a:7a:b6:1e:3c:59:d0:63:b0:57:e3:de:af:3b:
7b:d8:4b:f1:c3:54:ff:3e:45:3b:12:b6:a9:5f:f8:
44:5c:2b:13:58:b0:2b:c9:39:d2:88:6b:50:65:8d:
e3:e2:ec:7f:b9:c0:e4:6d:c7:ea:41:20:03:70:77:
b7:69:82:39:3d:f2:bb:97:ae:c8:ab:d8:7d:0b:9d:
15:31:5c:e0:39:05:48:e0:55:e8:f0:3c:6f:36:12:
d3:d6:a1:72:96:7c:1e:3c:69:1c:a3:8c:07:8a:43:
36:18:5a:25:ef:23:70:b6:a4:47:5e:2b:4a:07:3f:
d1:e7:42:42:88:22:38:1f:e3:35:3b:9c:52:0f:80:
dd:30:b5:56:2a:ed:f7:58:83:f3:7d:bc:c8:ca:cc:
4e:41:5e:f5:e9:f6:a6:41:25:1e:e1:07:f7:ce:60:
65:ce:35:e2:b0:a9:92:28:46:c6:5a:65:c6:0c:74:
eb:fe:6b:ed:8b:8d:b9:be:97:38:06:f8:37:5a:8f:
23:9a:a0:1b:9f:d1:81:f6:2f:9e:d8:d3:1a:ea:ce:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:B1:F9:4F:98:38:8A:C5:70:E1:E3:EB:09:49:4D:BF:66:83:82
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af30::/32
Signature Algorithm: sha256WithRSAEncryption
b0:86:55:71:27:ce:9d:33:bc:55:8a:2f:e9:aa:3f:9e:6b:72:
a6:fc:ef:08:f4:6e:90:32:b3:04:fc:2b:29:9d:56:ea:67:52:
5c:e0:ef:94:78:c2:65:1f:ae:4c:da:83:d2:fa:9e:2a:04:ec:
61:a9:89:c6:07:6c:7e:12:f0:60:c5:83:76:b7:29:06:c8:6e:
d5:69:5c:be:67:c6:34:99:77:5b:e1:2e:40:3b:86:72:81:63:
56:09:21:58:74:f6:8e:47:a3:0b:e8:0c:48:45:41:f3:01:ae:
76:1b:7e:a9:c2:72:4e:a4:37:74:7b:54:31:2c:69:90:3a:cb:
c5:fe:6e:e9:11:19:a2:61:1d:bd:52:7d:f5:28:71:0c:ff:3e:
95:6f:df:be:45:4d:b0:9e:51:a4:65:07:bd:a9:8a:93:51:a4:
8c:7e:57:22:d7:2b:3b:55:df:3d:7b:86:d8:e7:7a:ab:f9:80:
8c:69:37:3c:90:e3:93:61:89:b4:61:c2:18:3e:01:52:8d:96:
94:1d:5d:a9:49:24:8c:fc:1a:8c:15:0c:14:85:4b:12:b3:4c:
42:f5:e3:12:97:30:c9:a9:3c:52:a2:08:b0:d1:c9:f3:de:4f:
19:8e:e1:12:15:43:bb:7c:c6:77:02:5e:fa:ba:b8:74:fe:14:
f3:74:98:4a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZwZueO9F34aZlbd2oMnVGvqsZU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMzVaFw0yNzA1MjEwNjU4MzVaMDMxMTAvBgNV
BAMTKDUyNTZCMUY5NEY5ODM4OEFDNTcwRTFFM0VCMDk0OTREQkY2NjgzODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wx7V4kCGsfyDDTxqaR6Pji1q
oPVkY4Jfvll04Fq+Z55vcbGJ0t0ZebVKTdpKerYePFnQY7BX496vO3vYS/HDVP8+
RTsStqlf+ERcKxNYsCvJOdKIa1BljePi7H+5wORtx+pBIANwd7dpgjk98ruXrsir
2H0LnRUxXOA5BUjgVejwPG82EtPWoXKWfB48aRyjjAeKQzYYWiXvI3C2pEdeK0oH
P9HnQkKIIjgf4zU7nFIPgN0wtVYq7fdYg/N9vMjKzE5BXvXp9qZBJR7hB/fOYGXO
NeKwqZIoRsZaZcYMdOv+a+2Ljbm+lzgG+DdajyOaoBuf0YH2L57Y0xrqztV5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUUlax+U+YOIrFcOHj6wlJTb9mg4IwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvMDANBgkqhkiG9w0BAQsFAAOCAQEAsIZV
cSfOnTO8VYov6ao/nmtypvzvCPRukDKzBPwrKZ1W6mdSXODvlHjCZR+uTNqD0vqe
KgTsYamJxgdsfhLwYMWDdrcpBshu1WlcvmfGNJl3W+EuQDuGcoFjVgkhWHT2jkej
C+gMSEVB8wGudht+qcJyTqQ3dHtUMSxpkDrLxf5u6REZomEdvVJ99ShxDP8+lW/f
vkVNsJ5RpGUHvamKk1GkjH5XItcrO1XfPXuG2Od6q/mAjGk3PJDjk2GJtGHCGD4B
Uo2WlB1dqUkkjPwajBUMFIVLErNMQvXjEpcwyak8UqIIsNHJ895PGY7hEhVDu3zG
dwJe+rq4dP4U83SYSg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:51 2026 by rpki-client