Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146677.roa
File: AS146677.roa (raw, json)
Hash identifier: rwPnvBmcK3eFNRAidSF9TAU65RN7N35ZWP0O5yO2BLs=
Subject key identifier: 49:DA:9C:C1:12:F3:73:4F:BC:DB:26:A5:DB:9D:83:16:56:92:80:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E63563BDB38F3563C7176A6022D37D7890784AC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146677.roa
Signing time: Fri 22 May 2026 02:47:46 +0000
ROA not before: Fri 22 May 2026 02:42:46 +0000
ROA not after: Fri 21 May 2027 02:47:46 +0000
asID: 146677
IP address blocks: 240a:afbb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:63:56:3b:db:38:f3:56:3c:71:76:a6:02:2d:37:d7:89:07:84:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:46 2026 GMT
Not After : May 21 02:47:46 2027 GMT
Subject: CN=49DA9CC112F3734FBCDB26A5DB9D831656928092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:cf:75:51:63:36:89:42:9d:b2:65:88:d0:
06:62:25:fb:bf:0b:64:92:b7:40:df:6e:02:4e:4c:
4c:6a:7d:c4:41:fa:6a:ff:2f:e7:bd:73:7c:a2:31:
2f:ac:0b:42:17:85:6a:1f:7f:a1:44:64:4c:7e:6c:
ae:b6:4e:95:06:16:af:e7:33:16:22:9b:64:e3:c1:
f4:45:b4:17:9d:51:df:ed:d4:ee:99:a0:fe:d1:19:
43:56:06:53:ad:0f:92:b7:9c:c2:b4:e6:36:e8:ba:
ee:5b:a3:2c:59:ac:39:7a:30:71:8d:3f:5a:42:29:
2b:78:ee:49:da:6b:63:10:a5:22:71:17:d4:07:ec:
45:4b:c4:dc:32:63:f9:2b:ce:a5:ef:11:95:6b:37:
2b:38:0d:3f:11:50:73:79:b7:a7:cb:97:83:80:82:
43:e3:56:ba:5e:c2:67:be:df:a3:ee:31:14:94:2d:
00:8b:67:a6:eb:3c:30:f9:90:df:4f:c5:7d:c8:13:
e3:e9:d6:aa:60:14:d4:c3:c4:84:c4:60:05:34:db:
66:30:5f:04:a5:f5:d6:79:2b:19:a6:97:15:0f:a6:
0c:92:00:a6:2a:0b:dd:7b:c5:d0:d1:7c:7a:f0:86:
98:b4:c8:ed:cf:fc:0d:87:f7:11:a9:b8:3d:cd:c1:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DA:9C:C1:12:F3:73:4F:BC:DB:26:A5:DB:9D:83:16:56:92:80:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afbb::/32
Signature Algorithm: sha256WithRSAEncryption
12:d1:7b:e2:37:ba:2c:71:a6:e8:62:88:b8:81:c6:87:da:f0:
ba:45:7d:8a:1a:b0:81:bf:91:25:2e:a1:6d:55:37:91:59:f7:
a5:e3:33:4d:e9:d6:85:78:b9:28:2d:e8:95:a7:bc:d8:ce:e6:
79:5d:38:f3:2a:4b:66:28:0d:32:1d:ae:d2:88:e5:74:fc:cf:
6f:68:b9:17:59:32:29:98:fd:ec:02:a1:47:94:e0:1d:84:d2:
02:f5:a9:b7:9e:b9:7a:13:cd:e6:48:7d:7d:9b:5d:09:8c:f1:
cd:3c:fb:b0:eb:16:a2:7c:74:a5:3f:ff:09:74:38:1d:6f:ec:
aa:7e:9c:33:ba:55:1b:59:2e:50:28:93:0b:61:6c:88:96:8f:
35:cf:99:77:64:7a:07:70:86:1e:b4:c3:aa:d4:40:63:59:a3:
2a:83:b3:ef:46:b7:76:a9:cd:15:89:7c:f8:0c:17:49:2a:15:
ab:50:23:5c:b9:e2:3b:56:b1:b3:46:06:78:f9:14:5c:67:df:
d2:55:06:90:d6:12:8f:e0:aa:1b:2c:79:60:b3:f7:b4:ba:53:
5e:23:69:10:b6:10:c6:bf:18:b0:22:77:92:3b:d6:40:6e:f6:
d1:67:ab:78:14:27:72:f5:bf:39:dd:f3:29:7f:2f:c5:03:62:
6e:ba:79:90
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfmNWO9s481Y8cXamAi0314kHhKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyNDZaFw0yNzA1MjEwMjQ3NDZaMDMxMTAvBgNV
BAMTKDQ5REE5Q0MxMTJGMzczNEZCQ0RCMjZBNURCOUQ4MzE2NTY5MjgwOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY3M91UWM2iUKdsmWI0AZiJfu/
C2SSt0DfbgJOTExqfcRB+mr/L+e9c3yiMS+sC0IXhWoff6FEZEx+bK62TpUGFq/n
MxYim2TjwfRFtBedUd/t1O6ZoP7RGUNWBlOtD5K3nMK05jbouu5boyxZrDl6MHGN
P1pCKSt47knaa2MQpSJxF9QH7EVLxNwyY/krzqXvEZVrNys4DT8RUHN5t6fLl4OA
gkPjVrpewme+36PuMRSULQCLZ6brPDD5kN9PxX3IE+Pp1qpgFNTDxITEYAU022Yw
XwSl9dZ5KxmmlxUPpgySAKYqC917xdDRfHrwhpi0yO3P/A2H9xGpuD3NwQzfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSdqcwRLzc0+82yal252DFlaSgJIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2Njc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvuzANBgkqhkiG9w0BAQsFAAOCAQEAEtF7
4je6LHGm6GKIuIHGh9rwukV9ihqwgb+RJS6hbVU3kVn3peMzTenWhXi5KC3olae8
2M7meV048ypLZigNMh2u0ojldPzPb2i5F1kyKZj97AKhR5TgHYTSAvWpt565ehPN
5kh9fZtdCYzxzTz7sOsWonx0pT//CXQ4HW/sqn6cM7pVG1kuUCiTC2FsiJaPNc+Z
d2R6B3CGHrTDqtRAY1mjKoOz70a3dqnNFYl8+AwXSSoVq1AjXLniO1axs0YGePkU
XGff0lUGkNYSj+CqGyx5YLP3tLpTXiNpELYQxr8YsCJ3kjvWQG720WereBQncvW/
Od3zKX8vxQNibrp5kA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:02 2026 by rpki-client