Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146567.roa
File: AS146567.roa (raw, json)
Hash identifier: JVHhqtU8AQqeJsHKdSeSjkozwuY6PBre6bYhmfiaX5Q=
Subject key identifier: E0:93:B3:F6:F2:14:B9:EE:22:EE:B4:50:6C:3E:FC:1F:C5:B6:29:FC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 41B2C2AC21043C16025A41E7F68141732B38A17D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146567.roa
Signing time: Tue 26 May 2026 02:35:10 +0000
ROA not before: Tue 26 May 2026 02:30:10 +0000
ROA not after: Tue 25 May 2027 02:35:10 +0000
asID: 146567
IP address blocks: 240a:af4d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b2:c2:ac:21:04:3c:16:02:5a:41:e7:f6:81:41:73:2b:38:a1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:10 2026 GMT
Not After : May 25 02:35:10 2027 GMT
Subject: CN=E093B3F6F214B9EE22EEB4506C3EFC1FC5B629FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:5f:a0:20:4f:63:ab:ed:6d:8f:f3:ec:90:
5c:bc:ab:9e:72:43:c1:22:c6:0a:b4:e8:7a:8f:94:
d2:04:4e:31:4f:e7:07:8d:44:90:e8:98:e4:47:c3:
31:ac:6b:01:26:33:63:0b:22:07:3e:26:a1:04:66:
1e:12:cc:c4:2f:ef:41:12:73:cf:1f:6f:83:0a:df:
20:c9:8f:0a:f7:9c:17:df:f3:3e:9a:2b:87:91:df:
2f:f2:27:f2:b6:cb:de:4c:c6:4a:b5:81:16:ef:74:
0c:88:74:a4:26:39:50:71:97:dc:78:a5:26:f5:9b:
14:b8:f2:69:25:61:c6:0f:86:78:76:af:7f:7d:fd:
e5:1d:f5:25:4d:f7:5d:06:71:d0:d4:7a:e4:2d:3c:
57:57:87:c0:9b:07:67:76:7c:7e:fb:cd:b1:82:b1:
2b:87:29:dc:31:81:9a:31:1b:66:2f:6c:eb:10:0e:
5b:ce:16:fc:62:90:d8:b2:6e:96:4d:7d:99:7a:81:
05:4a:a0:8e:46:47:ed:c1:85:3e:e7:a3:42:19:13:
97:79:6f:0f:fc:d5:dd:ae:c0:75:f2:7e:fd:62:9f:
d0:fa:54:08:21:17:93:81:a8:4e:c5:1a:01:76:10:
eb:ca:67:5f:61:eb:2a:14:4a:e5:f6:25:e9:47:4d:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:93:B3:F6:F2:14:B9:EE:22:EE:B4:50:6C:3E:FC:1F:C5:B6:29:FC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146567.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af4d::/32
Signature Algorithm: sha256WithRSAEncryption
11:50:05:bd:cf:e2:5d:7b:54:55:02:ee:d8:68:fb:44:5b:56:
80:5e:b4:ac:c6:4f:85:37:c3:5c:90:21:80:08:43:a5:39:47:
3a:d5:d4:9f:29:ea:b7:7f:d6:ff:1e:30:26:0f:e8:93:b5:8d:
18:df:55:c8:20:49:2f:b1:93:f0:7d:65:bc:2c:de:43:8f:19:
65:53:21:e0:99:89:56:0a:60:7e:16:43:8c:9a:53:2e:39:61:
6e:4b:7b:88:ef:21:77:ab:e1:70:1a:c1:ad:da:8e:f7:9b:84:
db:e4:5b:53:81:68:b9:df:1b:e5:9c:b3:dc:f2:ba:94:d6:81:
8e:66:68:7c:bf:d5:b3:03:d1:f3:92:f3:dd:a7:1c:29:54:9b:
5c:9a:3c:65:3c:52:2f:50:4a:ef:a0:6b:68:d6:b0:4a:05:3e:
3a:cf:a3:18:82:bd:f9:40:b2:d7:4f:f0:6c:31:a9:e8:02:9d:
d1:85:3e:80:be:8d:ab:9e:48:87:b9:05:48:7d:c0:66:b8:33:
3e:71:32:a8:92:f3:80:bc:40:77:2e:5b:4e:85:4f:c3:1d:26:
57:9a:d7:ad:26:1c:44:9c:9c:a2:1a:10:ae:6c:c2:fd:64:92:
1b:a4:9c:9a:fa:15:f2:2a:04:d7:fa:99:50:9e:d6:cf:f8:25:
1e:46:d6:2e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQbLCrCEEPBYCWkHn9oFBcys4oX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMTBaFw0yNzA1MjUwMjM1MTBaMDMxMTAvBgNV
BAMTKEUwOTNCM0Y2RjIxNEI5RUUyMkVFQjQ1MDZDM0VGQzFGQzVCNjI5RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+F+gIE9jq+1tj/PskFy8q55y
Q8Eixgq06HqPlNIETjFP5weNRJDomORHwzGsawEmM2MLIgc+JqEEZh4SzMQv70ES
c88fb4MK3yDJjwr3nBff8z6aK4eR3y/yJ/K2y95Mxkq1gRbvdAyIdKQmOVBxl9x4
pSb1mxS48mklYcYPhnh2r399/eUd9SVN910GcdDUeuQtPFdXh8CbB2d2fH77zbGC
sSuHKdwxgZoxG2YvbOsQDlvOFvxikNiybpZNfZl6gQVKoI5GR+3BhT7no0IZE5d5
bw/81d2uwHXyfv1in9D6VAghF5OBqE7FGgF2EOvKZ19h6yoUSuX2JelHTXP3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU4JOz9vIUue4i7rRQbD78H8W2KfwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvTTANBgkqhkiG9w0BAQsFAAOCAQEAEVAF
vc/iXXtUVQLu2Gj7RFtWgF60rMZPhTfDXJAhgAhDpTlHOtXUnynqt3/W/x4wJg/o
k7WNGN9VyCBJL7GT8H1lvCzeQ48ZZVMh4JmJVgpgfhZDjJpTLjlhbkt7iO8hd6vh
cBrBrdqO95uE2+RbU4Foud8b5Zyz3PK6lNaBjmZofL/VswPR85Lz3accKVSbXJo8
ZTxSL1BK76BraNawSgU+Os+jGIK9+UCy10/wbDGp6AKd0YU+gL6Nq55Ih7kFSH3A
ZrgzPnEyqJLzgLxAdy5bToVPwx0mV5rXrSYcRJycohoQrmzC/WSSG6ScmvoV8ioE
1/qZUJ7Wz/glHkbWLg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:34 2026 by rpki-client