Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146666.roa
File: AS146666.roa (raw, json)
Hash identifier: RfKioa7XH0jmjAm1ad22hxpLUfP0V4N0hd/ctQyp3E8=
Subject key identifier: E1:1D:59:A1:81:D9:7C:1C:37:1B:13:9C:53:F7:43:A2:E4:04:22:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 597A22B5E01722A55272E631D4550A79FDDC808D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146666.roa
Signing time: Mon 25 May 2026 06:48:47 +0000
ROA not before: Mon 25 May 2026 06:43:47 +0000
ROA not after: Mon 24 May 2027 06:48:47 +0000
asID: 146666
IP address blocks: 240a:afb0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7a:22:b5:e0:17:22:a5:52:72:e6:31:d4:55:0a:79:fd:dc:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:47 2026 GMT
Not After : May 24 06:48:47 2027 GMT
Subject: CN=E11D59A181D97C1C371B139C53F743A2E4042225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:1a:f1:70:b2:06:93:52:c3:8f:17:47:63:
06:87:32:16:32:b6:e4:3c:b1:63:2e:00:22:c3:7b:
fb:ac:33:aa:11:96:d9:93:48:02:a0:78:a2:be:f7:
bb:7f:5a:0d:05:29:c5:3c:3a:7e:f9:2d:b3:e5:3a:
be:73:85:cd:68:14:f9:89:88:31:3a:81:4d:6b:7e:
ec:77:3e:25:f8:8e:d0:c0:70:e7:72:82:cc:aa:47:
2a:4b:12:05:7e:85:d4:52:a8:8c:ab:12:5f:04:68:
fd:6a:bd:ce:44:9c:56:6b:a8:26:23:11:96:40:00:
94:50:a0:da:b4:c7:56:89:af:ea:35:32:66:5e:d4:
2b:68:48:8c:97:f2:71:8e:d3:3f:19:b2:61:ef:27:
92:5c:c6:bc:ed:2b:e3:81:6c:5b:d8:79:b2:a5:a0:
26:42:b0:e6:20:fc:61:09:87:26:c4:9a:60:b2:06:
73:bb:6c:c9:c5:64:fd:66:bb:4d:cc:44:80:6b:df:
bc:1f:8c:4f:d7:0d:cd:31:ae:a2:d1:3e:a7:c8:29:
d0:6d:2d:62:23:cf:c5:1c:81:c2:c1:8d:4e:e5:f1:
e4:7a:1d:b3:89:90:19:ca:98:fb:52:5d:2b:cd:3a:
13:45:89:fe:ba:92:2a:02:80:c1:40:65:90:02:2b:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1D:59:A1:81:D9:7C:1C:37:1B:13:9C:53:F7:43:A2:E4:04:22:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afb0::/32
Signature Algorithm: sha256WithRSAEncryption
04:60:5b:0c:1e:60:e7:18:45:df:8e:77:77:b2:f0:7f:4f:f0:
ac:35:3a:45:b6:2a:56:b6:9b:cf:1c:db:42:5e:f9:6c:b2:04:
14:af:27:4d:fe:64:47:fc:de:3e:65:f0:6f:7c:36:f0:24:e1:
22:a6:ce:a4:68:c0:f3:5e:2b:78:04:0a:fb:85:e4:7d:86:36:
c3:f8:80:ce:06:60:fe:a3:cd:ad:32:ee:4e:61:e0:4e:50:fe:
2f:c5:7c:1a:f9:07:43:b3:31:92:2a:9d:b6:96:9a:08:56:7b:
6f:91:08:73:9c:fc:b6:f3:95:47:5c:c3:11:bd:95:04:f8:95:
98:92:2e:ba:1c:36:00:d6:1a:01:bb:dd:75:28:2b:a1:03:ed:
92:11:19:6e:e5:ca:b5:a7:f3:fd:05:d8:70:2d:b9:5a:f8:ac:
04:3b:58:6e:5f:56:e1:52:c3:7a:9c:b5:45:18:e0:24:0e:00:
cd:86:68:d9:7b:e2:4c:ef:22:d0:26:f4:d4:b2:8a:2b:6d:de:
d5:e9:86:83:6e:ef:03:91:93:76:a1:65:98:2f:e4:68:df:d3:
54:e9:e7:b2:32:fd:8f:88:97:33:34:a6:28:23:b6:85:06:28:
91:89:1b:5b:65:73:06:fd:a8:29:d9:8a:50:b1:1d:cc:b4:fe:
99:3f:f0:51
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWXoiteAXIqVScuYx1FUKef3cgI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNDdaFw0yNzA1MjQwNjQ4NDdaMDMxMTAvBgNV
BAMTKEUxMUQ1OUExODFEOTdDMUMzNzFCMTM5QzUzRjc0M0EyRTQwNDIyMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12xrxcLIGk1LDjxdHYwaHMhYy
tuQ8sWMuACLDe/usM6oRltmTSAKgeKK+97t/Wg0FKcU8On75LbPlOr5zhc1oFPmJ
iDE6gU1rfux3PiX4jtDAcOdygsyqRypLEgV+hdRSqIyrEl8EaP1qvc5EnFZrqCYj
EZZAAJRQoNq0x1aJr+o1MmZe1CtoSIyX8nGO0z8ZsmHvJ5JcxrztK+OBbFvYebKl
oCZCsOYg/GEJhybEmmCyBnO7bMnFZP1mu03MRIBr37wfjE/XDc0xrqLRPqfIKdBt
LWIjz8UcgcLBjU7l8eR6HbOJkBnKmPtSXSvNOhNFif66kioCgMFAZZACKzZpAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU4R1ZoYHZfBw3GxOcU/dDouQEIiUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvsDANBgkqhkiG9w0BAQsFAAOCAQEABGBb
DB5g5xhF3453d7Lwf0/wrDU6RbYqVrabzxzbQl75bLIEFK8nTf5kR/zePmXwb3w2
8CThIqbOpGjA814reAQK+4XkfYY2w/iAzgZg/qPNrTLuTmHgTlD+L8V8GvkHQ7Mx
kiqdtpaaCFZ7b5EIc5z8tvOVR1zDEb2VBPiVmJIuuhw2ANYaAbvddSgroQPtkhEZ
buXKtafz/QXYcC25WvisBDtYbl9W4VLDepy1RRjgJA4AzYZo2XviTO8i0Cb01LKK
K23e1emGg27vA5GTdqFlmC/kaN/TVOnnsjL9j4iXMzSmKCO2hQYokYkbW2VzBv2o
KdmKULEdzLT+mT/wUQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:28 2026 by rpki-client