Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146632.roa
File: AS146632.roa (raw, json)
Hash identifier: yUzCJElaQeIoSSdQt7RaBuPvTnXadCmmi6Lp7/OfJbM=
Subject key identifier: 72:08:36:38:BF:5A:8A:FA:8A:E8:D1:81:28:2D:88:27:57:19:68:AF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 613A7BE3E8F94DDE56EF11A82283DA3966F78971
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146632.roa
Signing time: Mon 25 May 2026 01:38:18 +0000
ROA not before: Mon 25 May 2026 01:33:18 +0000
ROA not after: Mon 24 May 2027 01:38:18 +0000
asID: 146632
IP address blocks: 240a:af8e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:3a:7b:e3:e8:f9:4d:de:56:ef:11:a8:22:83:da:39:66:f7:89:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:18 2026 GMT
Not After : May 24 01:38:18 2027 GMT
Subject: CN=72083638BF5A8AFA8AE8D181282D8827571968AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:56:6f:b5:da:24:9d:b0:a1:43:7f:21:48:
3d:6f:bc:31:2a:e4:ab:e9:54:ef:6b:76:31:8b:25:
fc:68:ec:12:4c:67:26:44:5b:6b:90:af:71:ff:20:
93:62:49:15:0f:72:ad:e0:30:f3:7e:ad:b6:b6:bd:
7e:96:3c:c7:b0:69:3c:02:7e:e0:03:9e:56:3d:43:
cf:3f:62:56:22:33:03:57:4e:37:1f:8d:79:48:d8:
b5:2f:f9:fd:c1:e4:27:44:17:96:bd:c7:35:af:ab:
c1:65:5d:f0:b4:ec:17:13:8b:43:c6:59:51:cd:38:
5e:fa:cb:c7:8b:45:81:ef:74:f8:0d:01:72:bb:e4:
f0:9f:2c:7f:24:5e:e9:79:1a:f8:38:f1:e0:38:f1:
a3:2c:37:1d:d1:7a:f3:b8:a9:2e:1e:a7:20:ba:b1:
ff:ec:61:07:57:38:1c:f5:ca:8a:37:af:61:21:25:
a7:cd:2f:d5:65:cc:0e:b4:ce:75:34:3a:c8:25:35:
cc:c8:d1:84:a5:40:09:5e:3e:c9:75:e7:69:82:34:
18:14:9e:5a:e9:c5:b5:2e:97:10:f7:f9:68:b0:c1:
b3:e6:35:0a:4f:ae:f6:fb:9f:67:5f:69:a2:8e:fc:
dc:13:94:9c:a1:b0:17:0d:8d:cd:0e:65:3a:fa:73:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:08:36:38:BF:5A:8A:FA:8A:E8:D1:81:28:2D:88:27:57:19:68:AF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af8e::/32
Signature Algorithm: sha256WithRSAEncryption
77:c2:95:85:f2:39:e4:47:52:d6:a6:45:78:13:8c:d6:3a:cd:
1a:f0:74:07:be:a9:10:51:db:c8:10:f9:80:2c:97:08:6d:7e:
d9:e8:73:11:69:b4:96:ca:fd:83:91:1a:40:e8:0e:7a:e3:2b:
01:6b:ab:46:cc:37:c7:5e:17:00:09:d4:ab:5c:13:87:91:41:
7c:c6:35:db:a3:df:46:3b:3b:ca:12:de:44:b6:0f:0e:0e:a1:
53:3e:50:37:b2:dd:3a:f9:32:88:df:1f:4a:fb:ed:9a:e9:13:
ea:a8:34:20:68:ee:54:1a:8a:06:80:57:09:c2:80:da:66:9b:
1c:05:57:89:b1:3c:59:04:d6:c4:f9:50:6e:30:0e:17:d9:c4:
5e:6b:6c:da:7b:82:e6:4f:b0:55:2c:08:fe:01:8f:e5:40:0c:
5f:e1:3c:d3:7f:48:5e:59:05:36:56:f0:b3:a0:c6:7e:8b:e7:
74:1d:ba:fe:f8:6b:cc:2f:f9:55:2c:69:7e:4e:5b:5c:ea:7a:
ea:67:ca:85:03:70:91:34:64:4d:a7:1f:0f:f8:e7:ad:4b:fd:
e9:96:6b:d0:21:a0:fd:44:df:23:60:e6:7c:e8:60:99:f0:07:
e5:93:d8:41:49:4c:aa:7a:b0:09:6e:3d:06:52:7f:cd:23:08:
38:89:95:6b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYTp74+j5Td5W7xGoIoPaOWb3iXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMThaFw0yNzA1MjQwMTM4MThaMDMxMTAvBgNV
BAMTKDcyMDgzNjM4QkY1QThBRkE4QUU4RDE4MTI4MkQ4ODI3NTcxOTY4QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS2VZvtdoknbChQ38hSD1vvDEq
5KvpVO9rdjGLJfxo7BJMZyZEW2uQr3H/IJNiSRUPcq3gMPN+rba2vX6WPMewaTwC
fuADnlY9Q88/YlYiMwNXTjcfjXlI2LUv+f3B5CdEF5a9xzWvq8FlXfC07BcTi0PG
WVHNOF76y8eLRYHvdPgNAXK75PCfLH8kXul5Gvg48eA48aMsNx3RevO4qS4epyC6
sf/sYQdXOBz1yoo3r2EhJafNL9VlzA60znU0OsglNczI0YSlQAlePsl152mCNBgU
nlrpxbUulxD3+WiwwbPmNQpPrvb7n2dfaaKO/NwTlJyhsBcNjc0OZTr6c2MXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcgg2OL9aivqK6NGBKC2IJ1cZaK8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvjjANBgkqhkiG9w0BAQsFAAOCAQEAd8KV
hfI55EdS1qZFeBOM1jrNGvB0B76pEFHbyBD5gCyXCG1+2ehzEWm0lsr9g5EaQOgO
euMrAWurRsw3x14XAAnUq1wTh5FBfMY126PfRjs7yhLeRLYPDg6hUz5QN7LdOvky
iN8fSvvtmukT6qg0IGjuVBqKBoBXCcKA2mabHAVXibE8WQTWxPlQbjAOF9nEXmts
2nuC5k+wVSwI/gGP5UAMX+E8039IXlkFNlbws6DGfovndB26/vhrzC/5VSxpfk5b
XOp66mfKhQNwkTRkTacfD/jnrUv96ZZr0CGg/UTfI2DmfOhgmfAH5ZPYQUlMqnqw
CW49BlJ/zSMIOImVaw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:23 2026 by rpki-client