Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146672.roa
File: AS146672.roa (raw, json)
Hash identifier: LWgav3UAx6uwFqHKkiK5eXbvcGEEkPhZvwosGARnrhM=
Subject key identifier: B1:53:AA:53:DA:AC:25:2D:1C:34:79:FE:4C:C2:46:7F:BE:CF:B9:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 61387048A44D3A56518DB4A48084E4A5170A3975
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146672.roa
Signing time: Fri 22 May 2026 01:50:41 +0000
ROA not before: Fri 22 May 2026 01:45:41 +0000
ROA not after: Fri 21 May 2027 01:50:41 +0000
asID: 146672
IP address blocks: 240a:afb6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:38:70:48:a4:4d:3a:56:51:8d:b4:a4:80:84:e4:a5:17:0a:39:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:41 2026 GMT
Not After : May 21 01:50:41 2027 GMT
Subject: CN=B153AA53DAAC252D1C3479FE4CC2467FBECFB925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:9e:53:70:7c:b6:65:b6:bc:70:a4:e9:58:
33:32:18:05:ce:c5:14:86:a5:8f:2a:43:c2:61:11:
ca:e3:0e:63:6c:91:8e:d8:c7:36:3b:97:46:27:5f:
3e:c4:8e:a5:d0:80:90:c7:73:c8:02:0e:f8:c4:85:
98:b7:63:da:17:ac:46:bf:3e:99:8f:1d:4c:96:01:
20:ad:15:f5:b4:f3:c2:09:32:73:75:92:a2:5c:28:
2f:02:03:7d:4f:3c:52:d4:5c:ff:76:b2:03:16:e7:
ab:b8:18:b0:bc:6b:51:47:1c:43:34:7c:7f:90:b2:
1d:d3:46:1c:28:f3:ad:17:1d:ab:7a:f4:8e:37:7d:
fb:a0:f7:64:9f:e3:0c:a7:f1:07:e2:d4:2d:57:cd:
5a:68:1c:cb:e4:e1:b2:7c:a7:f2:e9:3d:f1:29:7f:
6f:43:f7:05:f1:56:3d:b6:bb:ab:e2:8c:73:cb:f2:
f0:50:21:61:28:6f:90:c8:79:7d:c7:3f:0d:2a:cf:
19:fe:a2:46:76:69:60:dd:b5:c2:2c:f7:7f:76:03:
b7:d3:95:d8:b8:e3:7b:53:a9:7d:f6:94:e5:7e:3e:
2d:de:2f:66:3f:13:51:72:5e:3c:89:44:f8:4f:ae:
78:00:ad:bd:15:e7:1f:2e:88:a9:69:6a:59:de:f4:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:53:AA:53:DA:AC:25:2D:1C:34:79:FE:4C:C2:46:7F:BE:CF:B9:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afb6::/32
Signature Algorithm: sha256WithRSAEncryption
1d:d1:7a:a0:eb:d4:99:06:37:5c:8f:36:a2:5c:04:3c:a4:3f:
78:d8:7d:22:8d:82:55:62:54:b2:ab:6b:0e:e6:b2:87:1d:98:
14:cf:64:ed:87:72:c8:62:1d:01:5d:ee:c8:45:6f:15:2e:5c:
c0:05:8b:ce:20:2c:a4:ed:ee:1e:7f:fe:88:3e:6e:12:c6:a1:
7a:be:a7:cd:42:84:38:0c:c0:06:fe:57:71:a9:5b:e7:a8:6f:
81:28:df:f9:0b:3b:a6:11:d1:0c:f9:74:39:c1:eb:45:64:0f:
2c:20:8f:ce:72:79:7f:d4:99:33:62:38:c6:68:82:1f:21:b2:
d1:87:7f:bd:94:15:34:93:c4:3b:76:f3:5a:53:46:f4:8e:2e:
04:5f:12:d5:71:83:1d:18:8d:98:9a:3c:61:d2:6d:d1:bd:a0:
9e:9a:50:ce:77:be:89:f7:13:eb:51:34:0f:2c:5f:7d:e6:f3:
bc:57:0a:f9:13:0c:7d:ab:c0:9b:ec:d4:75:5b:19:9a:4e:f5:
00:67:e4:21:d1:bb:23:19:5a:a8:d9:c6:27:4e:85:a0:a6:0a:
27:f3:b4:f5:42:51:b5:63:21:39:8e:0a:62:fd:1b:d3:d4:8d:
c9:9e:fc:25:d1:70:99:75:cb:0d:b4:86:11:3d:83:30:59:33:
d2:98:18:7c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYThwSKRNOlZRjbSkgITkpRcKOXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1NDFaFw0yNzA1MjEwMTUwNDFaMDMxMTAvBgNV
BAMTKEIxNTNBQTUzREFBQzI1MkQxQzM0NzlGRTRDQzI0NjdGQkVDRkI5MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW855TcHy2Zba8cKTpWDMyGAXO
xRSGpY8qQ8JhEcrjDmNskY7YxzY7l0YnXz7EjqXQgJDHc8gCDvjEhZi3Y9oXrEa/
PpmPHUyWASCtFfW088IJMnN1kqJcKC8CA31PPFLUXP92sgMW56u4GLC8a1FHHEM0
fH+Qsh3TRhwo860XHat69I43ffug92Sf4wyn8Qfi1C1XzVpoHMvk4bJ8p/LpPfEp
f29D9wXxVj22u6vijHPL8vBQIWEob5DIeX3HPw0qzxn+okZ2aWDdtcIs9392A7fT
ldi443tTqX32lOV+Pi3eL2Y/E1FyXjyJRPhPrngArb0V5x8uiKlpalne9Hj3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUsVOqU9qsJS0cNHn+TMJGf77PuSUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NjcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvtjANBgkqhkiG9w0BAQsFAAOCAQEAHdF6
oOvUmQY3XI82olwEPKQ/eNh9Io2CVWJUsqtrDuayhx2YFM9k7YdyyGIdAV3uyEVv
FS5cwAWLziAspO3uHn/+iD5uEsaher6nzUKEOAzABv5Xcalb56hvgSjf+Qs7phHR
DPl0OcHrRWQPLCCPznJ5f9SZM2I4xmiCHyGy0Yd/vZQVNJPEO3bzWlNG9I4uBF8S
1XGDHRiNmJo8YdJt0b2gnppQzne+ifcT61E0DyxffebzvFcK+RMMfavAm+zUdVsZ
mk71AGfkIdG7IxlaqNnGJ06FoKYKJ/O09UJRtWMhOY4KYv0b09SNyZ78JdFwmXXL
DbSGET2DMFkz0pgYfA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:24 2026 by rpki-client