Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146588.roa
File: AS146588.roa (raw, json)
Hash identifier: jcGbFGu6J2zMhNtmzIGY/G+wNyDLma2bCUqKcdYIQns=
Subject key identifier: 4D:8D:9E:27:D4:D1:A1:B9:51:4B:E2:10:1E:05:E3:31:50:2D:A0:B1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0E2FFE5975B98CECF9750234EAD59E25A5FFA6CE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146588.roa
Signing time: Mon 25 May 2026 02:22:47 +0000
ROA not before: Mon 25 May 2026 02:17:47 +0000
ROA not after: Mon 24 May 2027 02:22:47 +0000
asID: 146588
IP address blocks: 240a:af62::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2f:fe:59:75:b9:8c:ec:f9:75:02:34:ea:d5:9e:25:a5:ff:a6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:47 2026 GMT
Not After : May 24 02:22:47 2027 GMT
Subject: CN=4D8D9E27D4D1A1B9514BE2101E05E331502DA0B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:5a:5e:86:c5:cd:f0:a0:ac:5d:ab:5c:5f:
11:6f:90:3d:ab:92:04:c0:79:35:03:0c:86:0a:3b:
3f:5d:e8:08:45:cf:89:e5:1e:31:28:a9:5f:05:c4:
64:d1:c6:a0:25:df:63:23:c4:ca:bc:db:73:13:9e:
6e:5b:f0:ac:1b:7b:33:7c:d4:51:d2:7d:5d:88:a6:
73:71:64:0c:74:f2:69:89:16:a1:67:df:04:4b:91:
d7:a1:74:1c:ff:08:aa:00:cf:6c:aa:1d:c2:31:18:
d9:5b:7e:4d:4b:75:f5:1e:1f:0d:b4:5e:87:a6:ac:
8f:1a:34:24:82:c8:a6:93:a6:14:df:3f:85:cd:35:
ff:13:4a:dd:40:15:98:7a:4d:f8:f1:2c:51:d6:79:
45:af:58:e4:22:eb:46:6a:d4:a3:86:58:a5:53:7e:
cd:91:89:e8:f4:64:cc:14:bd:83:28:1d:12:1d:e7:
a2:08:06:c1:63:07:3c:48:da:4e:8f:4c:bc:5c:22:
6c:ee:38:31:af:8c:bd:f2:77:44:74:3c:aa:33:c4:
d5:3b:56:ef:e4:01:7e:51:88:0e:52:42:31:cb:7b:
af:c9:d4:5a:20:7c:9a:3d:b8:05:56:09:41:77:58:
6b:4e:c1:d8:8f:a7:bc:78:af:36:98:18:59:6a:ba:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:9E:27:D4:D1:A1:B9:51:4B:E2:10:1E:05:E3:31:50:2D:A0:B1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146588.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af62::/32
Signature Algorithm: sha256WithRSAEncryption
06:f4:85:65:96:aa:b6:bd:8a:6b:ce:ad:90:5f:af:85:2a:7a:
c3:d1:61:28:a2:74:f8:fe:89:8c:f3:13:dd:25:4f:ae:1e:f1:
09:eb:b8:dc:13:42:7d:3d:a1:4d:01:81:f7:51:66:bb:86:96:
ed:e9:17:7c:9c:4c:32:52:01:65:01:3e:dc:d4:51:99:20:12:
ff:0c:db:fb:08:b8:8f:9d:c5:dc:ce:8e:ce:bd:ef:21:80:22:
08:f9:20:10:c7:9b:90:89:2a:35:53:15:dc:8d:e0:f6:47:15:
aa:7e:2f:c5:f1:63:30:42:64:cd:ed:45:45:9e:21:fe:17:7a:
31:88:a5:41:50:37:c0:ed:cf:b3:29:21:46:61:7b:1b:2a:5a:
37:ad:73:5e:7c:07:8b:31:8e:a7:8c:b9:60:19:18:5e:d4:61:
10:69:b8:38:9c:0b:6a:9f:b9:fb:5b:35:d5:de:b8:7f:b2:27:
06:c8:aa:99:ca:82:ee:00:77:d2:8a:bd:75:5b:7a:eb:49:41:
b9:a7:33:75:6e:73:af:48:b6:01:6b:61:a7:0a:eb:8e:a4:f5:
2c:d8:a5:f9:d6:aa:28:5f:69:8a:b6:be:cb:d7:0d:08:a1:5d:
75:49:6f:35:94:76:90:eb:73:d0:86:23:a9:26:7a:72:c3:37:
f0:b7:bd:e8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDi/+WXW5jOz5dQI06tWeJaX/ps4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3NDdaFw0yNzA1MjQwMjIyNDdaMDMxMTAvBgNV
BAMTKDREOEQ5RTI3RDREMUExQjk1MTRCRTIxMDFFMDVFMzMxNTAyREEwQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgAFpehsXN8KCsXatcXxFvkD2r
kgTAeTUDDIYKOz9d6AhFz4nlHjEoqV8FxGTRxqAl32MjxMq823MTnm5b8KwbezN8
1FHSfV2IpnNxZAx08mmJFqFn3wRLkdehdBz/CKoAz2yqHcIxGNlbfk1LdfUeHw20
XoemrI8aNCSCyKaTphTfP4XNNf8TSt1AFZh6TfjxLFHWeUWvWOQi60Zq1KOGWKVT
fs2Riej0ZMwUvYMoHRId56IIBsFjBzxI2k6PTLxcImzuODGvjL3yd0R0PKozxNU7
Vu/kAX5RiA5SQjHLe6/J1FogfJo9uAVWCUF3WGtOwdiPp7x4rzaYGFlquhkbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTY2eJ9TRoblRS+IQHgXjMVAtoLEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTg4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvYjANBgkqhkiG9w0BAQsFAAOCAQEABvSF
ZZaqtr2Ka86tkF+vhSp6w9FhKKJ0+P6JjPMT3SVPrh7xCeu43BNCfT2hTQGB91Fm
u4aW7ekXfJxMMlIBZQE+3NRRmSAS/wzb+wi4j53F3M6Ozr3vIYAiCPkgEMebkIkq
NVMV3I3g9kcVqn4vxfFjMEJkze1FRZ4h/hd6MYilQVA3wO3PsykhRmF7GypaN61z
XnwHizGOp4y5YBkYXtRhEGm4OJwLap+5+1s11d64f7InBsiqmcqC7gB30oq9dVt6
60lBuaczdW5zr0i2AWthpwrrjqT1LNil+daqKF9pira+y9cNCKFddUlvNZR2kOtz
0IYjqSZ6csM38Le96A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:52 2026 by rpki-client