Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146641.roa
File: AS146641.roa (raw, json)
Hash identifier: rBVdDhdTl1xQbHYOBL8rWd0rj1EhZYcmMspYbKKIfKs=
Subject key identifier: 1A:03:EA:59:88:64:D2:49:53:96:E8:A0:88:1C:FC:2C:C8:60:23:AA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3230849C051377092857088CE69AF0BF851D7285
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146641.roa
Signing time: Tue 26 May 2026 01:13:12 +0000
ROA not before: Tue 26 May 2026 01:08:12 +0000
ROA not after: Tue 25 May 2027 01:13:12 +0000
asID: 146641
IP address blocks: 240a:af97::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:30:84:9c:05:13:77:09:28:57:08:8c:e6:9a:f0:bf:85:1d:72:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:12 2026 GMT
Not After : May 25 01:13:12 2027 GMT
Subject: CN=1A03EA598864D2495396E8A0881CFC2CC86023AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:4c:49:06:e7:da:81:14:da:c4:2e:71:90:
82:52:8f:f1:db:0b:11:04:82:2d:e4:b9:e8:d2:15:
f2:5b:06:4e:92:fc:a2:19:67:59:14:7c:b2:1d:68:
0e:0b:a8:95:68:cd:6b:6e:a9:b8:91:5e:43:0e:44:
ed:8f:cc:3e:d1:62:53:a2:24:a9:7a:21:68:01:f8:
32:b1:36:93:d2:1c:69:14:6a:a3:ef:f7:41:12:ee:
e1:74:54:90:90:64:ba:20:f1:6c:76:eb:5e:fa:f5:
c7:17:3e:57:00:bb:86:13:d6:98:e5:19:1c:3a:6a:
43:66:09:c9:ce:cf:09:d2:22:0e:86:2e:94:46:05:
85:ff:1d:dd:7b:04:95:3f:51:b9:f5:be:7a:04:75:
44:a5:62:53:48:96:f8:0f:58:7a:a9:0a:35:01:d6:
ed:22:58:0a:94:3d:f1:b0:f6:28:2a:15:80:7f:b1:
a4:d5:1a:64:f6:a3:8b:a8:d5:0f:e3:9c:3f:60:9e:
c7:ca:7d:85:80:36:ff:bd:68:d6:32:02:fc:42:ff:
58:78:1b:c0:b9:4d:d2:b4:68:45:be:90:cd:b4:41:
aa:d4:ee:a0:d8:a6:ec:a8:92:87:15:a4:7d:5d:0c:
03:b1:16:7c:14:bc:35:cd:6d:b0:db:e1:b7:0b:03:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:03:EA:59:88:64:D2:49:53:96:E8:A0:88:1C:FC:2C:C8:60:23:AA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af97::/32
Signature Algorithm: sha256WithRSAEncryption
39:ca:80:d1:89:7b:e1:63:e1:40:ea:22:0a:6b:6b:f9:94:16:
e1:13:2c:ef:04:66:d3:3f:b8:de:06:7e:6e:25:64:c6:65:77:
da:bc:cc:48:be:14:a9:28:57:21:13:9d:74:40:fd:f5:8d:d2:
ff:f1:a9:7b:59:22:6e:2e:76:3c:41:5d:22:95:c8:5e:17:9e:
2f:0e:2c:50:3b:e6:6f:9c:50:11:69:bf:82:99:ec:bb:32:1c:
22:f0:c0:da:f1:17:3b:03:96:2f:11:1f:d3:d5:06:d3:99:6d:
8f:ed:be:68:6e:ed:d6:08:e0:fb:49:31:74:00:6d:e1:1b:21:
cc:a4:25:26:1e:c7:53:9a:14:11:11:ab:05:ac:b7:dd:ab:fb:
58:31:80:8f:39:35:89:ab:54:ab:63:80:ff:1c:86:37:ae:66:
04:3a:d7:5e:c8:c7:d7:06:c0:d9:99:04:0b:88:0d:95:25:3d:
5e:17:bb:e3:d6:1a:40:e5:77:64:82:77:84:4d:14:d8:10:8e:
b7:82:72:78:c3:e2:a2:94:77:39:f0:2e:fb:dc:62:4f:13:d4:
32:2f:01:30:a4:3f:9e:cb:0b:51:62:eb:93:c6:e2:36:17:1b:
08:2f:89:1d:74:fa:18:7b:2f:28:6d:83:58:53:13:97:d8:66:
b4:05:a7:c8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMjCEnAUTdwkoVwiM5prwv4UdcoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MTJaFw0yNzA1MjUwMTEzMTJaMDMxMTAvBgNV
BAMTKDFBMDNFQTU5ODg2NEQyNDk1Mzk2RThBMDg4MUNGQzJDQzg2MDIzQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmUxJBufagRTaxC5xkIJSj/Hb
CxEEgi3kuejSFfJbBk6S/KIZZ1kUfLIdaA4LqJVozWtuqbiRXkMORO2PzD7RYlOi
JKl6IWgB+DKxNpPSHGkUaqPv90ES7uF0VJCQZLog8Wx261769ccXPlcAu4YT1pjl
GRw6akNmCcnOzwnSIg6GLpRGBYX/Hd17BJU/Ubn1vnoEdUSlYlNIlvgPWHqpCjUB
1u0iWAqUPfGw9igqFYB/saTVGmT2o4uo1Q/jnD9gnsfKfYWANv+9aNYyAvxC/1h4
G8C5TdK0aEW+kM20QarU7qDYpuyokocVpH1dDAOxFnwUvDXNbbDb4bcLAwNZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUGgPqWYhk0klTluigiBz8LMhgI6owHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvlzANBgkqhkiG9w0BAQsFAAOCAQEAOcqA
0Yl74WPhQOoiCmtr+ZQW4RMs7wRm0z+43gZ+biVkxmV32rzMSL4UqShXIROddED9
9Y3S//Gpe1kibi52PEFdIpXIXheeLw4sUDvmb5xQEWm/gpnsuzIcIvDA2vEXOwOW
LxEf09UG05ltj+2+aG7t1gjg+0kxdABt4RshzKQlJh7HU5oUERGrBay33av7WDGA
jzk1iatUq2OA/xyGN65mBDrXXsjH1wbA2ZkEC4gNlSU9Xhe749YaQOV3ZIJ3hE0U
2BCOt4JyeMPiopR3OfAu+9xiTxPUMi8BMKQ/nssLUWLrk8biNhcbCC+JHXT6GHsv
KG2DWFMTl9hmtAWnyA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:09 2026 by rpki-client