Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146648.roa
File: AS146648.roa (raw, json)
Hash identifier: iAfWf6r+LhLiC4C+p8h3y6pyBma5U2fQ5liTVYzZ4OY=
Subject key identifier: 8A:A9:FD:50:AD:67:6C:D7:36:C5:3A:48:0E:9C:3F:67:AE:5A:10:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C34ACE3A54B6D2EC48EBAA5967F2E83435A9C2F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146648.roa
Signing time: Tue 26 May 2026 03:16:58 +0000
ROA not before: Tue 26 May 2026 03:11:58 +0000
ROA not after: Tue 25 May 2027 03:16:58 +0000
asID: 146648
IP address blocks: 240a:af9e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:34:ac:e3:a5:4b:6d:2e:c4:8e:ba:a5:96:7f:2e:83:43:5a:9c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:58 2026 GMT
Not After : May 25 03:16:58 2027 GMT
Subject: CN=8AA9FD50AD676CD736C53A480E9C3F67AE5A10DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:c3:31:ed:4b:f0:94:25:76:01:6e:73:7b:
1b:c7:2b:6c:8c:ac:b3:45:e1:72:6f:c8:41:0f:5c:
6a:fe:bd:7b:41:17:68:c9:e1:14:4c:c0:4f:82:35:
e7:f4:ac:88:28:bb:10:bb:1e:8d:dd:18:31:ff:97:
45:1a:bc:d9:e4:42:c5:82:db:58:9d:d7:56:a9:9c:
a7:e6:57:74:05:fa:81:08:fd:65:e5:7e:48:95:e3:
4e:81:cd:ee:e4:d1:52:70:bd:02:fd:3c:f6:de:fa:
5a:e8:5b:55:bf:3a:87:62:dd:3e:77:cf:cb:9b:51:
4a:71:d2:b7:40:64:06:42:0a:4b:a1:c5:fb:03:39:
62:d6:5f:4f:0e:e8:49:d4:2c:7a:30:84:b9:ec:93:
68:40:ce:2a:38:bb:53:30:3b:39:b2:52:bf:d9:78:
e1:13:60:1a:4a:8c:d8:c8:f1:91:f4:e9:36:a7:38:
47:07:77:d3:09:40:e5:75:5e:fe:34:36:d0:e4:c7:
a8:92:5f:c9:79:94:5c:8f:60:23:1c:5c:27:d0:b9:
57:47:6b:ba:65:a5:2e:4e:89:59:2b:83:87:84:70:
fc:95:94:14:95:b8:42:86:02:4e:00:73:3f:9f:ba:
5f:d4:b5:66:e0:e1:83:55:12:56:f7:ea:9b:f5:0c:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A9:FD:50:AD:67:6C:D7:36:C5:3A:48:0E:9C:3F:67:AE:5A:10:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af9e::/32
Signature Algorithm: sha256WithRSAEncryption
32:34:32:93:b0:c6:34:29:cd:d1:d5:3f:11:bb:59:f0:fe:12:
35:a2:37:58:7a:16:81:43:c3:96:a0:25:44:bd:5e:8d:5e:a6:
75:46:fd:ab:fd:21:0f:5f:75:cf:4e:60:98:53:26:5c:09:49:
28:db:42:04:e7:aa:dc:87:3a:4e:f0:e4:a6:83:86:63:7e:5b:
89:3a:1a:3c:4d:11:86:17:3c:46:2d:8a:5c:74:e4:8c:65:3b:
a8:9c:a2:5b:87:ab:1b:20:df:fa:5c:b5:df:6d:ec:8f:25:47:
64:44:d7:ae:af:53:f1:6c:1d:04:e8:7a:4c:a7:89:f5:87:61:
5e:cf:bb:a4:f8:24:06:f4:33:d8:20:30:6b:64:31:97:f0:c4:
e2:4c:d0:37:c9:42:04:0a:3f:b1:6c:09:6d:f9:fa:67:40:d2:
99:d6:f1:fa:a3:f1:59:ef:d7:3c:19:34:b4:d5:74:98:28:c1:
b4:c6:ce:1f:69:c7:c8:2e:90:8b:a2:3b:d6:a7:d3:8f:82:22:
1e:b8:5d:34:90:bb:19:6b:31:a1:80:fb:d3:8e:a7:19:17:bf:
e5:63:6a:61:da:f5:dd:15:6e:5b:79:18:43:6b:50:94:58:1e:
1c:f5:88:49:3d:ad:df:5f:3c:88:e2:ac:e5:ea:22:41:71:da:
22:94:1c:59
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPDSs46VLbS7Ejrqlln8ug0NanC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNThaFw0yNzA1MjUwMzE2NThaMDMxMTAvBgNV
BAMTKDhBQTlGRDUwQUQ2NzZDRDczNkM1M0E0ODBFOUMzRjY3QUU1QTEwREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY88Mx7UvwlCV2AW5zexvHK2yM
rLNF4XJvyEEPXGr+vXtBF2jJ4RRMwE+CNef0rIgouxC7Ho3dGDH/l0UavNnkQsWC
21id11apnKfmV3QF+oEI/WXlfkiV406Bze7k0VJwvQL9PPbe+lroW1W/Oodi3T53
z8ubUUpx0rdAZAZCCkuhxfsDOWLWX08O6EnULHowhLnsk2hAzio4u1MwOzmyUr/Z
eOETYBpKjNjI8ZH06TanOEcHd9MJQOV1Xv40NtDkx6iSX8l5lFyPYCMcXCfQuVdH
a7plpS5OiVkrg4eEcPyVlBSVuEKGAk4Acz+ful/UtWbg4YNVElb36pv1DJzXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUiqn9UK1nbNc2xTpIDpw/Z65aEN4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvnjANBgkqhkiG9w0BAQsFAAOCAQEAMjQy
k7DGNCnN0dU/EbtZ8P4SNaI3WHoWgUPDlqAlRL1ejV6mdUb9q/0hD191z05gmFMm
XAlJKNtCBOeq3Ic6TvDkpoOGY35biToaPE0Rhhc8Ri2KXHTkjGU7qJyiW4erGyDf
+ly1323sjyVHZETXrq9T8WwdBOh6TKeJ9YdhXs+7pPgkBvQz2CAwa2Qxl/DE4kzQ
N8lCBAo/sWwJbfn6Z0DSmdbx+qPxWe/XPBk0tNV0mCjBtMbOH2nHyC6Qi6I71qfT
j4IiHrhdNJC7GWsxoYD7046nGRe/5WNqYdr13RVuW3kYQ2tQlFgeHPWIST2t3188
iOKs5eoiQXHaIpQcWQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:37 2026 by rpki-client