Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146545.roa
File: AS146545.roa (raw, json)
Hash identifier: qrveEYEUonIXt9B8ZZwFaNof/15XuSjFNWOPJCznNRc=
Subject key identifier: CE:FD:EF:C0:E9:D9:32:E3:5E:7C:6B:2B:7A:23:8A:F0:0F:FE:C1:FB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C03F718BFF94F5D03C16D56125F282DB2C19675
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146545.roa
Signing time: Fri 22 May 2026 06:05:37 +0000
ROA not before: Fri 22 May 2026 06:00:37 +0000
ROA not after: Fri 21 May 2027 06:05:37 +0000
asID: 146545
IP address blocks: 240a:af37::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:03:f7:18:bf:f9:4f:5d:03:c1:6d:56:12:5f:28:2d:b2:c1:96:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:37 2026 GMT
Not After : May 21 06:05:37 2027 GMT
Subject: CN=CEFDEFC0E9D932E35E7C6B2B7A238AF00FFEC1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:e4:8a:2d:d5:f8:12:a7:2d:4c:9c:1e:74:
99:9f:54:a1:80:9a:8c:ec:be:a5:51:07:1c:1f:34:
7b:49:a0:06:45:16:ee:00:bc:70:7b:27:69:83:dc:
19:04:f6:58:9c:79:c1:7e:66:d6:54:a2:23:ca:28:
24:ad:73:e4:38:c1:5d:4d:23:34:16:c3:53:63:18:
36:9f:bd:d9:21:39:cd:f2:21:1d:1c:94:77:b5:5c:
58:ff:88:5b:c2:af:42:a4:fd:60:3e:0b:c6:f9:19:
6a:f4:c5:43:73:38:d9:de:c8:fb:00:f1:5c:44:ef:
67:14:64:51:b0:06:c8:df:3a:4d:e2:79:1a:72:a5:
ca:d6:9c:da:65:3f:57:fe:c6:88:77:eb:eb:3f:63:
ba:ad:ce:ed:ad:65:04:a0:dd:d5:1c:51:2f:38:d3:
c8:45:0d:7b:01:6a:e9:36:4f:c7:c2:76:2e:98:3c:
b5:63:a2:f8:ac:99:33:5f:92:ce:b4:da:3f:85:aa:
58:92:65:d3:cb:b0:7d:54:37:d5:05:33:f2:19:d3:
1c:03:29:af:77:2c:6f:71:2f:51:0b:40:93:df:cd:
20:85:42:83:39:c6:4c:53:d1:47:23:1d:a7:f2:46:
91:10:ec:b3:01:3b:fd:a0:3a:b6:d4:de:03:42:3a:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:EF:C0:E9:D9:32:E3:5E:7C:6B:2B:7A:23:8A:F0:0F:FE:C1:FB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af37::/32
Signature Algorithm: sha256WithRSAEncryption
4d:c5:6a:3c:43:64:74:02:5b:25:83:05:cb:1c:87:4f:cc:5c:
50:45:29:1c:a6:5d:7d:dd:6c:aa:bd:32:ea:b5:c3:41:f6:e6:
e5:ba:4a:53:a2:31:4b:aa:75:9c:e4:74:f3:20:54:e0:be:5e:
99:94:61:d3:6f:0a:e8:8e:7f:c9:1d:94:e1:05:93:5c:1e:b7:
eb:b5:89:ea:d4:9c:fb:43:79:48:c1:1c:33:c6:66:74:db:9e:
a1:8d:29:50:22:4a:a6:36:9d:49:b9:f0:d1:c5:4c:76:6b:1c:
95:1d:bd:05:6f:6a:b8:51:38:4e:20:07:17:d2:be:ec:af:cc:
af:27:8b:72:8c:8b:23:fa:41:69:bd:a3:66:b8:f5:20:da:a9:
86:2d:92:c8:f8:5b:74:cd:73:d5:ed:aa:d7:19:d0:50:27:1f:
b9:28:d2:6f:6c:2c:3c:e3:d6:ff:99:89:ac:db:e9:08:eb:50:
5f:bb:fc:c3:4a:ef:9c:85:c6:3c:e6:c5:b6:fd:43:c0:2c:ef:
e2:7f:57:1c:62:b9:39:8a:ef:0d:14:bb:2f:f4:97:10:7d:37:
89:7d:59:3d:2d:2e:a3:83:19:41:3d:2b:b3:57:db:c0:10:7a:
ca:88:cd:03:a7:46:b4:68:db:1a:7c:01:6c:78:27:32:e2:fc:
31:4e:41:f0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUHAP3GL/5T10DwW1WEl8oLbLBlnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMzdaFw0yNzA1MjEwNjA1MzdaMDMxMTAvBgNV
BAMTKENFRkRFRkMwRTlEOTMyRTM1RTdDNkIyQjdBMjM4QUYwMEZGRUMxRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SuSKLdX4EqctTJwedJmfVKGA
mozsvqVRBxwfNHtJoAZFFu4AvHB7J2mD3BkE9licecF+ZtZUoiPKKCStc+Q4wV1N
IzQWw1NjGDafvdkhOc3yIR0clHe1XFj/iFvCr0Kk/WA+C8b5GWr0xUNzONneyPsA
8VxE72cUZFGwBsjfOk3ieRpypcrWnNplP1f+xoh36+s/Y7qtzu2tZQSg3dUcUS84
08hFDXsBauk2T8fCdi6YPLVjovismTNfks602j+FqliSZdPLsH1UN9UFM/IZ0xwD
Ka93LG9xL1ELQJPfzSCFQoM5xkxT0UcjHafyRpEQ7LMBO/2gOrbU3gNCOl0DAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUzv3vwOnZMuNefGsreiOK8A/+wfswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvNzANBgkqhkiG9w0BAQsFAAOCAQEATcVq
PENkdAJbJYMFyxyHT8xcUEUpHKZdfd1sqr0y6rXDQfbm5bpKU6IxS6p1nOR08yBU
4L5emZRh028K6I5/yR2U4QWTXB6367WJ6tSc+0N5SMEcM8ZmdNueoY0pUCJKpjad
Sbnw0cVMdmsclR29BW9quFE4TiAHF9K+7K/MryeLcoyLI/pBab2jZrj1INqphi2S
yPhbdM1z1e2q1xnQUCcfuSjSb2wsPOPW/5mJrNvpCOtQX7v8w0rvnIXGPObFtv1D
wCzv4n9XHGK5OYrvDRS7L/SXEH03iX1ZPS0uo4MZQT0rs1fbwBB6yojNA6dGtGjb
GnwBbHgnMuL8MU5B8A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:39 2026 by rpki-client