Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146642.roa
File: AS146642.roa (raw, json)
Hash identifier: Wcq6W9EsKs/GqDjhhEWrzqwEi2AwgzHBLtOvQa+AStE=
Subject key identifier: 14:1F:38:59:77:7D:61:BD:05:1B:C3:05:6E:0A:CC:32:39:15:8A:F1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3416D9471CB3E8ABA31A281058114EB51AB2C35E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146642.roa
Signing time: Tue 26 May 2026 06:31:05 +0000
ROA not before: Tue 26 May 2026 06:26:05 +0000
ROA not after: Tue 25 May 2027 06:31:05 +0000
asID: 146642
IP address blocks: 240a:af98::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:16:d9:47:1c:b3:e8:ab:a3:1a:28:10:58:11:4e:b5:1a:b2:c3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:05 2026 GMT
Not After : May 25 06:31:05 2027 GMT
Subject: CN=141F3859777D61BD051BC3056E0ACC3239158AF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:50:0f:82:a1:75:a0:ae:09:bd:dc:5e:c7:
21:22:86:9d:18:80:f8:5d:85:bf:9e:70:2c:37:52:
76:84:c8:5a:f8:5b:b9:47:19:14:bd:d5:93:1c:8a:
f0:03:4e:d3:c8:cf:fa:2d:af:1a:7e:ee:24:da:90:
3a:f8:ab:a6:55:17:7e:15:b6:2e:bd:90:eb:b7:41:
df:24:7d:05:04:c7:95:70:95:5f:27:07:c0:02:e3:
44:33:57:3b:a1:e9:df:c2:96:c2:55:cc:11:27:d0:
fd:1f:1d:dd:66:5c:4e:28:fe:43:75:a1:d8:0e:23:
9a:1b:e6:c2:84:d3:8f:48:3c:d6:60:b6:1f:2a:ad:
8f:bd:50:85:a8:21:6f:e4:76:01:c3:09:5f:34:eb:
95:ca:26:4d:7b:cc:ad:94:e3:31:ba:ba:c3:ef:d9:
c1:98:a1:e6:27:5c:41:9b:c3:b5:47:df:a2:88:f7:
54:f9:fa:e1:0d:b3:13:85:5b:db:23:44:16:1b:ca:
70:9f:c3:68:ce:65:40:02:a2:8d:26:3f:11:ce:d6:
0f:cf:d0:ad:91:d0:57:f1:18:29:36:8f:a9:c4:ae:
47:a2:6a:c6:d5:9b:16:cd:b3:82:e9:a0:67:3e:ee:
c0:5a:95:3e:f7:6d:63:ef:b4:6d:62:0d:91:d3:80:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1F:38:59:77:7D:61:BD:05:1B:C3:05:6E:0A:CC:32:39:15:8A:F1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af98::/32
Signature Algorithm: sha256WithRSAEncryption
af:cb:c1:d8:9d:f3:a7:31:33:c2:cc:f1:5c:cb:bd:ea:89:1b:
bb:a1:22:93:e7:7d:29:11:75:4b:b5:59:ea:dc:4f:26:c2:ef:
64:e4:cc:8f:a9:6a:f5:37:3c:1c:12:e7:69:23:89:b0:88:83:
79:49:c6:b7:a2:e6:c5:25:31:52:8c:3b:83:95:cd:9b:95:1e:
b7:a4:ab:4b:27:50:42:78:39:19:e2:72:c8:31:58:9c:bd:38:
a8:d7:d9:c9:d9:57:6b:1f:ee:75:d6:9b:e0:19:22:a2:b7:ee:
0c:c8:50:28:fd:2b:e0:88:1e:98:a1:12:c1:d4:2a:7e:af:3d:
be:5b:27:5e:07:b8:97:41:18:a2:de:e3:ef:6d:e0:d0:46:96:
b7:d0:ca:fb:6b:77:6e:60:02:d5:4c:fb:9b:ca:94:f2:b2:6f:
67:ba:cd:8f:08:12:15:69:dd:89:b4:e9:ef:bc:b0:6a:c9:bd:
e4:86:a4:39:b4:f2:11:86:6f:89:c9:42:c9:b5:9d:b7:c2:93:
c6:2b:04:42:76:b0:ae:b9:34:61:3b:52:ab:ab:1d:9a:7f:d7:
e2:02:ad:4d:d3:c5:28:81:af:86:e0:07:d7:cd:cd:29:80:7d:
d9:86:e6:0b:c2:a5:bf:61:b5:f9:8a:93:2d:1f:c3:2e:54:1a:
13:b6:47:4f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNBbZRxyz6KujGigQWBFOtRqyw14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI2MDVaFw0yNzA1MjUwNjMxMDVaMDMxMTAvBgNV
BAMTKDE0MUYzODU5Nzc3RDYxQkQwNTFCQzMwNTZFMEFDQzMyMzkxNThBRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVKVAPgqF1oK4JvdxexyEihp0Y
gPhdhb+ecCw3UnaEyFr4W7lHGRS91ZMcivADTtPIz/otrxp+7iTakDr4q6ZVF34V
ti69kOu3Qd8kfQUEx5VwlV8nB8AC40QzVzuh6d/ClsJVzBEn0P0fHd1mXE4o/kN1
odgOI5ob5sKE049IPNZgth8qrY+9UIWoIW/kdgHDCV8065XKJk17zK2U4zG6usPv
2cGYoeYnXEGbw7VH36KI91T5+uENsxOFW9sjRBYbynCfw2jOZUACoo0mPxHO1g/P
0K2R0FfxGCk2j6nErkeiasbVmxbNs4LpoGc+7sBalT73bWPvtG1iDZHTgAz7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUFB84WXd9Yb0FG8MFbgrMMjkVivEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvmDANBgkqhkiG9w0BAQsFAAOCAQEAr8vB
2J3zpzEzwszxXMu96okbu6Eik+d9KRF1S7VZ6txPJsLvZOTMj6lq9Tc8HBLnaSOJ
sIiDeUnGt6LmxSUxUow7g5XNm5Uet6SrSydQQng5GeJyyDFYnL04qNfZydlXax/u
ddab4BkiorfuDMhQKP0r4IgemKESwdQqfq89vlsnXge4l0EYot7j723g0EaWt9DK
+2t3bmAC1Uz7m8qU8rJvZ7rNjwgSFWndibTp77ywasm95IakObTyEYZviclCybWd
t8KTxisEQnawrrk0YTtSq6sdmn/X4gKtTdPFKIGvhuAH183NKYB92YbmC8Klv2G1
+YqTLR/DLlQaE7ZHTw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:41 2026 by rpki-client