Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146655.roa
File: AS146655.roa (raw, json)
Hash identifier: OVr+chsfYZard7a/jtoObiQXwxC/OWLFszTPVGv2ldQ=
Subject key identifier: 5B:B4:57:17:52:C2:A8:4D:DE:D7:90:C6:E5:C4:9B:C5:CF:15:A8:09
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7401FA458ECC35CB9E1516F7C1021591591382CA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146655.roa
Signing time: Fri 22 May 2026 06:28:08 +0000
ROA not before: Fri 22 May 2026 06:23:08 +0000
ROA not after: Fri 21 May 2027 06:28:08 +0000
asID: 146655
IP address blocks: 240a:afa5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:01:fa:45:8e:cc:35:cb:9e:15:16:f7:c1:02:15:91:59:13:82:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:08 2026 GMT
Not After : May 21 06:28:08 2027 GMT
Subject: CN=5BB4571752C2A84DDED790C6E5C49BC5CF15A809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:49:be:f7:ca:0a:5b:2c:e9:35:60:5d:47:
8f:f2:f1:ef:38:35:59:d0:85:3d:82:59:25:6f:41:
9d:61:7d:61:c2:c1:33:cf:c3:6c:9f:83:c5:1f:8a:
e6:95:b7:f3:de:db:42:3f:b2:c0:9e:33:da:31:fa:
d8:1e:4c:32:5f:20:f1:41:9c:86:75:0f:de:17:14:
03:f9:01:0a:a0:54:fc:72:ff:a2:5f:b2:3c:d2:bf:
4e:29:6c:ac:b0:f4:51:a5:81:3b:71:ee:98:c8:8f:
8b:35:57:19:3c:28:af:4c:49:f3:d2:fc:bb:9b:a5:
21:35:63:a0:ff:b2:77:d5:97:56:b3:f8:27:4a:d4:
1c:47:a1:5a:f0:1e:c6:1b:40:d7:a0:76:66:42:3a:
e7:f2:70:a1:8c:b8:ef:76:c9:b0:d7:7a:ad:49:f4:
ae:d0:9e:95:e0:74:55:69:81:f8:c4:b0:b0:23:70:
eb:f6:4f:aa:59:13:85:62:76:88:a8:4c:fe:2d:fa:
8b:10:4a:87:19:dd:bd:6b:03:c2:0f:9c:cd:93:fb:
39:77:58:3c:1f:0a:82:ee:46:e8:7b:e0:7d:2c:73:
4b:82:e0:40:ea:d5:93:ad:5b:bb:95:03:09:65:1c:
e7:28:cd:bc:39:d9:4b:62:b2:2c:fd:f3:32:28:9d:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B4:57:17:52:C2:A8:4D:DE:D7:90:C6:E5:C4:9B:C5:CF:15:A8:09
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afa5::/32
Signature Algorithm: sha256WithRSAEncryption
88:bb:b0:f1:9b:c7:99:78:1f:b3:f1:8a:e9:0d:a1:6a:48:ae:
81:d1:4b:57:cc:00:b0:62:40:1a:af:0b:6b:f9:03:02:35:3a:
38:e2:0a:5f:d3:64:ae:a9:14:22:60:1b:29:94:40:7e:94:03:
08:4b:99:da:e0:9f:e5:77:c7:d9:b6:32:ea:ff:80:db:5f:03:
aa:b5:62:3d:56:58:98:b3:b3:a2:be:ee:5a:c1:1e:d5:d6:f1:
78:98:d7:0c:d4:43:da:13:f2:97:a5:e7:96:a9:74:d3:be:e4:
70:e2:aa:05:db:24:b2:80:6c:2e:2f:96:ba:9a:f1:1e:b9:f1:
ac:e6:6f:bf:3b:7e:e8:a4:bd:ff:3d:d7:82:4c:0f:49:98:2b:
73:a6:92:cb:3a:db:68:fd:75:1c:4b:77:c8:13:b5:50:f8:ee:
24:ce:7b:ab:61:ef:9f:6e:b1:4d:41:0c:5f:31:4e:1a:ac:a4:
8d:b9:14:40:d8:6d:9f:e5:0f:0a:33:b2:90:60:8e:f6:39:ec:
f0:c6:69:0b:44:8f:a6:a6:16:42:9f:c3:84:e9:9d:23:f1:98:
28:ae:78:5c:7e:f2:89:bd:6a:ba:d0:85:0c:2e:fc:3f:06:31:
bd:1a:cd:c3:d4:34:49:75:d5:40:80:f8:b0:38:bd:ee:78:c1:
18:4f:62:8b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdAH6RY7MNcueFRb3wQIVkVkTgsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIzMDhaFw0yNzA1MjEwNjI4MDhaMDMxMTAvBgNV
BAMTKDVCQjQ1NzE3NTJDMkE4NERERUQ3OTBDNkU1QzQ5QkM1Q0YxNUE4MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd70m+98oKWyzpNWBdR4/y8e84
NVnQhT2CWSVvQZ1hfWHCwTPPw2yfg8UfiuaVt/Pe20I/ssCeM9ox+tgeTDJfIPFB
nIZ1D94XFAP5AQqgVPxy/6JfsjzSv04pbKyw9FGlgTtx7pjIj4s1Vxk8KK9MSfPS
/LubpSE1Y6D/snfVl1az+CdK1BxHoVrwHsYbQNegdmZCOufycKGMuO92ybDXeq1J
9K7QnpXgdFVpgfjEsLAjcOv2T6pZE4VidoioTP4t+osQSocZ3b1rA8IPnM2T+zl3
WDwfCoLuRuh74H0sc0uC4EDq1ZOtW7uVAwllHOcozbw52Utisiz98zIonQ83AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUW7RXF1LCqE3e15DG5cSbxc8VqAkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvpTANBgkqhkiG9w0BAQsFAAOCAQEAiLuw
8ZvHmXgfs/GK6Q2hakiugdFLV8wAsGJAGq8La/kDAjU6OOIKX9NkrqkUImAbKZRA
fpQDCEuZ2uCf5XfH2bYy6v+A218DqrViPVZYmLOzor7uWsEe1dbxeJjXDNRD2hPy
l6Xnlql0077kcOKqBdsksoBsLi+WuprxHrnxrOZvvzt+6KS9/z3XgkwPSZgrc6aS
yzrbaP11HEt3yBO1UPjuJM57q2Hvn26xTUEMXzFOGqykjbkUQNhtn+UPCjOykGCO
9jns8MZpC0SPpqYWQp/DhOmdI/GYKK54XH7yib1qutCFDC78PwYxvRrNw9Q0SXXV
QID4sDi97njBGE9iiw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client