Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146594.roa
File: AS146594.roa (raw, json)
Hash identifier: XsVZhUVniVtqf2/8nbAFAzSBEpyUV4bspOB/ErEftgU=
Subject key identifier: E9:31:66:BB:CA:C6:5E:90:34:E6:1B:CE:04:C3:B6:02:F0:89:9B:72
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A3EED677A20EA66CFDAA6B07217452EE3BF9C33
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146594.roa
Signing time: Fri 22 May 2026 06:27:46 +0000
ROA not before: Fri 22 May 2026 06:22:46 +0000
ROA not after: Fri 21 May 2027 06:27:46 +0000
asID: 146594
IP address blocks: 240a:af68::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:3e:ed:67:7a:20:ea:66:cf:da:a6:b0:72:17:45:2e:e3:bf:9c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:46 2026 GMT
Not After : May 21 06:27:46 2027 GMT
Subject: CN=E93166BBCAC65E9034E61BCE04C3B602F0899B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:95:6b:a0:29:b8:18:e3:5e:48:44:49:25:
a4:8e:14:cb:27:06:2f:a4:b2:7d:a4:cb:74:ae:c5:
38:7a:c6:63:86:36:51:45:f3:d8:35:bf:8c:7f:fe:
3c:f6:92:54:3d:60:a7:f8:7d:3e:bb:fa:34:6f:22:
a6:fa:09:df:7e:ba:d2:df:6d:fb:d9:7b:42:e9:76:
1f:60:17:5b:a1:6a:aa:04:4a:fc:01:e0:10:2e:ef:
d1:59:9a:22:6f:0d:6a:41:0c:b3:34:21:14:26:22:
29:fe:82:cd:d3:ee:85:ab:26:aa:15:b5:4b:1a:0a:
ca:71:6e:22:40:92:8a:ff:e4:b6:90:90:5a:4c:a3:
67:2c:3c:a5:a3:bf:d5:a2:62:50:ef:45:eb:30:0d:
71:28:eb:25:f0:0a:38:a3:cb:93:de:fb:34:a2:e1:
1d:d4:29:11:ea:a6:74:e2:87:81:95:07:d4:e9:8f:
c8:7b:4d:b3:ea:01:3a:c1:62:e2:ec:77:f2:df:b0:
f2:07:e4:51:d1:23:bf:31:d6:47:a9:24:30:30:53:
f7:99:dd:ea:cc:55:5c:2f:e9:21:b4:8c:73:f1:68:
1c:c8:b2:90:3b:ec:39:22:7f:16:82:77:e4:bd:05:
ad:7f:45:3f:55:b5:25:61:0f:c4:1e:2b:0d:56:2d:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:66:BB:CA:C6:5E:90:34:E6:1B:CE:04:C3:B6:02:F0:89:9B:72
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af68::/32
Signature Algorithm: sha256WithRSAEncryption
43:88:f5:15:cc:18:df:38:a7:76:fe:b1:4f:af:41:e8:80:89:
f4:ec:d7:89:fa:b9:bd:21:d2:cc:cd:24:2f:c9:50:c6:ce:cf:
ff:07:18:69:9e:79:37:b8:06:86:3d:83:d4:80:d6:8a:ca:af:
38:bc:1d:6f:df:7e:ac:73:8e:dd:7a:5f:a2:ff:80:61:fc:6c:
32:5e:65:4f:71:5c:83:40:50:93:9a:fe:c8:e5:44:6e:51:94:
99:a0:d5:df:6b:7a:e2:c0:bc:6e:17:de:8b:68:17:5e:1d:68:
a8:a9:1c:8e:1d:cd:a9:25:25:0b:aa:1d:c0:a1:5a:1c:52:cb:
f1:e1:92:f8:c4:31:69:df:25:75:b3:38:fb:b1:38:4b:fc:fc:
e6:e0:36:50:94:2a:4f:79:7d:b8:5d:c5:99:d5:51:b4:a7:fd:
fd:68:22:cd:27:a1:b0:09:ac:57:c0:e8:d6:1a:e5:ca:8f:90:
79:99:78:c9:36:d3:d1:b2:c2:28:04:3d:ba:a4:d5:16:73:16:
5d:b3:74:fe:13:5a:00:d1:8e:1a:71:07:1d:72:50:c0:8f:4d:
db:af:49:a6:1b:a6:a6:2f:0e:50:c1:0f:2f:f0:b6:87:d4:9a:
6d:d2:d9:5a:67:8e:79:5a:05:50:4d:e8:f1:00:63:7e:f8:b7:
fa:65:30:43
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOj7tZ3og6mbP2qawchdFLuO/nDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNDZaFw0yNzA1MjEwNjI3NDZaMDMxMTAvBgNV
BAMTKEU5MzE2NkJCQ0FDNjVFOTAzNEU2MUJDRTA0QzNCNjAyRjA4OTlCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/5VroCm4GONeSERJJaSOFMsn
Bi+ksn2ky3SuxTh6xmOGNlFF89g1v4x//jz2klQ9YKf4fT67+jRvIqb6Cd9+utLf
bfvZe0Lpdh9gF1uhaqoESvwB4BAu79FZmiJvDWpBDLM0IRQmIin+gs3T7oWrJqoV
tUsaCspxbiJAkor/5LaQkFpMo2csPKWjv9WiYlDvReswDXEo6yXwCjijy5Pe+zSi
4R3UKRHqpnTih4GVB9Tpj8h7TbPqATrBYuLsd/LfsPIH5FHRI78x1kepJDAwU/eZ
3erMVVwv6SG0jHPxaBzIspA77DkifxaCd+S9Ba1/RT9VtSVhD8QeKw1WLU4LAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU6TFmu8rGXpA05hvOBMO2AvCJm3IwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvaDANBgkqhkiG9w0BAQsFAAOCAQEAQ4j1
FcwY3zindv6xT69B6ICJ9OzXifq5vSHSzM0kL8lQxs7P/wcYaZ55N7gGhj2D1IDW
isqvOLwdb99+rHOO3Xpfov+AYfxsMl5lT3Fcg0BQk5r+yOVEblGUmaDV32t64sC8
bhfei2gXXh1oqKkcjh3NqSUlC6odwKFaHFLL8eGS+MQxad8ldbM4+7E4S/z85uA2
UJQqT3l9uF3FmdVRtKf9/WgizSehsAmsV8Do1hrlyo+QeZl4yTbT0bLCKAQ9uqTV
FnMWXbN0/hNaANGOGnEHHXJQwI9N269Jphumpi8OUMEPL/C2h9SabdLZWmeOeVoF
UE3o8QBjfvi3+mUwQw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:45 2026 by rpki-client