Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146644.roa
File: AS146644.roa (raw, json)
Hash identifier: Y9N9uqsdaLLku6aq0KfUlgNNdE91oFG/9mw7W9jOcCU=
Subject key identifier: 59:32:06:4C:54:6B:9D:F6:E7:21:3E:7D:AF:EE:1D:EA:36:BE:F0:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0BEEBE38339607C8B2C7294384D124A6856C64B0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146644.roa
Signing time: Fri 22 May 2026 07:08:58 +0000
ROA not before: Fri 22 May 2026 07:03:58 +0000
ROA not after: Fri 21 May 2027 07:08:58 +0000
asID: 146644
IP address blocks: 240a:af9a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ee:be:38:33:96:07:c8:b2:c7:29:43:84:d1:24:a6:85:6c:64:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:58 2026 GMT
Not After : May 21 07:08:58 2027 GMT
Subject: CN=5932064C546B9DF6E7213E7DAFEE1DEA36BEF085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:92:de:c1:25:d1:f5:2d:90:00:46:c3:b4:
d5:10:d6:ab:f0:6a:24:9b:5d:38:7d:df:d2:2e:34:
28:64:28:68:01:34:44:cb:6b:d7:b1:e6:c3:df:7e:
b8:99:d2:1a:a6:f1:2e:d0:41:a2:b9:b5:e3:f0:f4:
c8:f6:9e:28:bc:01:08:c8:7b:e6:5e:7c:8a:ca:03:
4c:57:a9:ca:a8:64:83:47:8a:03:51:b2:ff:18:34:
bd:70:43:58:1a:8f:d7:97:51:5c:96:54:4c:dd:ec:
49:7e:4e:6b:ac:64:a3:0a:b4:d0:2f:67:0b:cf:43:
a5:24:94:d0:6b:53:bf:7f:9b:40:b5:cf:11:67:25:
a1:99:fd:2c:de:2e:57:4c:24:55:64:2b:5b:4f:78:
d8:17:b9:f8:b9:d6:43:7b:fa:cd:44:30:3c:ca:7e:
c4:b4:79:df:64:f9:a4:5b:8a:97:1f:c9:b7:34:bd:
d1:ac:38:72:65:08:87:f9:cc:6f:62:a6:f5:e5:ea:
f8:5b:0c:41:4d:bf:14:e8:a2:60:ae:8a:22:63:11:
d1:18:3b:5c:29:06:b4:e5:9f:ba:bc:40:a5:72:6e:
4a:74:be:06:32:bf:7b:3a:84:05:15:25:df:c8:c8:
c1:7f:73:e0:82:c3:15:74:b7:f3:0e:d0:fa:5d:9f:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:32:06:4C:54:6B:9D:F6:E7:21:3E:7D:AF:EE:1D:EA:36:BE:F0:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146644.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af9a::/32
Signature Algorithm: sha256WithRSAEncryption
4a:be:88:08:b8:67:e9:f9:7e:c3:4c:e4:e6:94:8c:f8:46:8d:
a9:cd:b7:b5:d0:1e:90:1e:c3:f4:a5:07:a6:fe:00:26:95:70:
df:f7:4a:b8:ee:96:83:c9:86:c2:b5:8f:fe:31:f7:c2:f1:67:
23:5b:ac:be:bb:61:d7:bf:5c:98:cc:10:23:8c:65:8a:42:26:
79:62:40:10:63:e7:5f:bb:9f:6c:40:cd:71:2a:7f:8b:f4:eb:
52:91:fb:51:e5:af:bc:6c:d2:90:3a:03:15:f2:78:75:77:a2:
30:ad:71:f1:a4:73:4c:23:48:e1:f1:ed:70:cf:2e:17:d6:a4:
84:d0:b7:31:ce:6e:42:76:7d:b0:ae:4e:94:b5:03:ee:21:08:
c5:be:99:d1:38:b4:94:cc:04:d0:b3:af:10:4d:93:75:fc:e9:
ee:0a:02:b3:b1:42:e8:37:1a:68:0e:52:0a:63:e9:05:09:68:
42:04:13:9f:f4:5e:18:ba:33:a9:cd:1b:a5:93:93:dd:54:76:
72:66:bd:d9:06:54:4a:cd:0d:46:09:e7:74:f5:70:57:a6:b8:
0a:a4:a6:32:7d:f6:a7:84:ab:a1:39:fa:28:90:22:54:a8:be:
5f:44:48:2a:44:95:c2:0f:b5:c6:0c:fa:ce:19:af:0e:60:28:
8e:5e:0a:4f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUC+6+ODOWB8iyxylDhNEkpoVsZLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNThaFw0yNzA1MjEwNzA4NThaMDMxMTAvBgNV
BAMTKDU5MzIwNjRDNTQ2QjlERjZFNzIxM0U3REFGRUUxREVBMzZCRUYwODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4ZLewSXR9S2QAEbDtNUQ1qvw
aiSbXTh939IuNChkKGgBNETLa9ex5sPffriZ0hqm8S7QQaK5tePw9Mj2nii8AQjI
e+ZefIrKA0xXqcqoZINHigNRsv8YNL1wQ1gaj9eXUVyWVEzd7El+TmusZKMKtNAv
ZwvPQ6UklNBrU79/m0C1zxFnJaGZ/SzeLldMJFVkK1tPeNgXufi51kN7+s1EMDzK
fsS0ed9k+aRbipcfybc0vdGsOHJlCIf5zG9ipvXl6vhbDEFNvxToomCuiiJjEdEY
O1wpBrTln7q8QKVybkp0vgYyv3s6hAUVJd/IyMF/c+CCwxV0t/MO0Ppdn2BvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUWTIGTFRrnfbnIT59r+4d6ja+8IUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjQ0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvmjANBgkqhkiG9w0BAQsFAAOCAQEASr6I
CLhn6fl+w0zk5pSM+EaNqc23tdAekB7D9KUHpv4AJpVw3/dKuO6Wg8mGwrWP/jH3
wvFnI1usvrth179cmMwQI4xlikImeWJAEGPnX7ufbEDNcSp/i/TrUpH7UeWvvGzS
kDoDFfJ4dXeiMK1x8aRzTCNI4fHtcM8uF9akhNC3Mc5uQnZ9sK5OlLUD7iEIxb6Z
0Ti0lMwE0LOvEE2Tdfzp7goCs7FC6DcaaA5SCmPpBQloQgQTn/ReGLozqc0bpZOT
3VR2cma92QZUSs0NRgnndPVwV6a4CqSmMn32p4SroTn6KJAiVKi+X0RIKkSVwg+1
xgz6zhmvDmAojl4KTw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:59 2026 by rpki-client