Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146596.roa
File: AS146596.roa (raw, json)
Hash identifier: CdkBUKpbLzLxO1ri0UrdTBmKx3/yI+xDXHKgLPDdPPw=
Subject key identifier: E0:C7:FE:96:81:C0:B8:B8:21:E5:89:B9:FD:F1:23:D6:B5:8F:28:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77395400CEB9F5BE3792ED984D7AEC071447F9EC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146596.roa
Signing time: Fri 22 May 2026 07:40:47 +0000
ROA not before: Fri 22 May 2026 07:35:47 +0000
ROA not after: Fri 21 May 2027 07:40:47 +0000
asID: 146596
IP address blocks: 240a:af6a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:39:54:00:ce:b9:f5:be:37:92:ed:98:4d:7a:ec:07:14:47:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:47 2026 GMT
Not After : May 21 07:40:47 2027 GMT
Subject: CN=E0C7FE9681C0B8B821E589B9FDF123D6B58F28E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:c0:ca:ab:77:7f:f1:0b:5a:3e:be:d2:24:
9c:10:1d:07:53:a2:ee:7e:18:7b:d4:67:69:28:7e:
6e:35:66:72:69:72:a1:0e:aa:4a:ba:13:c1:1f:ce:
01:e5:53:47:f6:d8:3e:00:a8:13:76:09:06:1d:f3:
fc:05:02:38:1c:f7:e9:10:f3:a2:f0:17:fe:9c:95:
dd:0c:d3:09:0f:6e:b6:9d:6d:64:76:48:e8:c6:ed:
29:a3:2c:f1:fd:a2:6a:51:55:b2:08:84:34:d3:ab:
67:a3:ea:85:fc:73:04:01:fa:90:0c:93:86:3b:39:
53:bf:f5:2a:d8:13:b3:03:09:e4:17:77:fd:ce:99:
af:b0:c6:57:75:f9:3c:b0:d5:d9:4a:96:fc:e0:96:
4e:f6:5e:be:ef:20:33:8d:23:ea:7d:1e:9e:62:5c:
70:41:c2:cd:2b:05:ef:fa:26:f4:c8:62:63:ae:d3:
de:21:59:e5:25:b5:9d:0e:58:85:37:5b:71:e4:27:
f7:70:5d:ad:ed:cb:9b:25:21:ed:ca:77:e5:4f:44:
3b:67:38:34:69:d1:80:3a:96:03:26:f8:77:c8:77:
d1:f0:a5:c1:12:be:3e:15:0c:dc:44:cb:e7:fd:bb:
ee:6c:69:e3:6d:eb:2a:70:dd:7f:f1:0c:bc:7e:f2:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:FE:96:81:C0:B8:B8:21:E5:89:B9:FD:F1:23:D6:B5:8F:28:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146596.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af6a::/32
Signature Algorithm: sha256WithRSAEncryption
60:d3:79:0a:e5:3b:e0:25:34:14:a4:e7:9b:2a:e5:b1:ba:a9:
c0:61:17:d7:8f:6d:3d:5d:3b:72:dd:74:2c:50:b9:77:74:ca:
3e:3a:51:56:6d:e0:a9:08:a1:32:7a:65:51:68:36:8e:b7:d0:
07:7f:c8:64:92:77:13:c1:e2:56:d9:18:52:6f:ea:ca:19:83:
85:01:ed:a2:fb:2b:55:ee:2f:c8:b3:3b:7e:fd:d0:dc:ba:75:
c8:89:18:78:d6:eb:d5:fa:97:c8:8c:cb:94:c5:23:28:89:39:
0f:3b:17:54:43:4d:cf:e2:b3:a1:a3:12:3a:7b:c7:fb:2e:3c:
15:c1:3c:75:98:84:f6:2f:7b:a0:8c:e6:a8:ca:e1:91:06:1a:
ab:b8:34:a2:0a:ed:b8:d5:c9:de:2a:67:b7:b2:59:17:78:98:
33:8f:2b:5c:8e:3f:8d:c1:a4:7e:66:a9:fd:69:81:18:21:eb:
66:9e:05:a2:3e:a1:a4:98:46:a6:ce:d7:c4:ea:88:57:5e:e1:
b5:51:c8:48:d1:0c:c8:99:64:ae:02:88:49:e3:df:66:03:4d:
37:f9:0d:03:10:30:d9:c5:b1:65:34:b5:0d:4f:81:fb:65:0b:
b4:6b:3d:1e:ac:35:52:55:b9:28:30:f5:07:2e:83:59:1e:d8:
8a:0c:e5:d2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdzlUAM659b43ku2YTXrsBxRH+ewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NDdaFw0yNzA1MjEwNzQwNDdaMDMxMTAvBgNV
BAMTKEUwQzdGRTk2ODFDMEI4QjgyMUU1ODlCOUZERjEyM0Q2QjU4RjI4RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMcDKq3d/8QtaPr7SJJwQHQdT
ou5+GHvUZ2kofm41ZnJpcqEOqkq6E8EfzgHlU0f22D4AqBN2CQYd8/wFAjgc9+kQ
86LwF/6cld0M0wkPbradbWR2SOjG7SmjLPH9ompRVbIIhDTTq2ej6oX8cwQB+pAM
k4Y7OVO/9SrYE7MDCeQXd/3Oma+wxld1+Tyw1dlKlvzglk72Xr7vIDONI+p9Hp5i
XHBBws0rBe/6JvTIYmOu094hWeUltZ0OWIU3W3HkJ/dwXa3ty5slIe3Kd+VPRDtn
ODRp0YA6lgMm+HfId9HwpcESvj4VDNxEy+f9u+5saeNt6ypw3X/xDLx+8qCDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU4Mf+loHAuLgh5Ym5/fEj1rWPKOUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NTk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvajANBgkqhkiG9w0BAQsFAAOCAQEAYNN5
CuU74CU0FKTnmyrlsbqpwGEX149tPV07ct10LFC5d3TKPjpRVm3gqQihMnplUWg2
jrfQB3/IZJJ3E8HiVtkYUm/qyhmDhQHtovsrVe4vyLM7fv3Q3Lp1yIkYeNbr1fqX
yIzLlMUjKIk5DzsXVENNz+KzoaMSOnvH+y48FcE8dZiE9i97oIzmqMrhkQYaq7g0
ogrtuNXJ3ipnt7JZF3iYM48rXI4/jcGkfmap/WmBGCHrZp4Foj6hpJhGps7XxOqI
V17htVHISNEMyJlkrgKISePfZgNNN/kNAxAw2cWxZTS1DU+B+2ULtGs9Hqw1UlW5
KDD1By6DWR7Yigzl0g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:41 2026 by rpki-client