Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146684.roa
File: AS146684.roa (raw, json)
Hash identifier: qWaB9hrJPQwRMqYdkDz9+mtLlTBib3jq4AnGyHtkHjw=
Subject key identifier: 2D:8B:10:1A:A0:12:0D:14:A1:46:FB:8F:33:46:B1:00:FA:1E:53:BF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30720A03690213D69FE55F4486E34FD30F585F90
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146684.roa
Signing time: Tue 26 May 2026 06:12:39 +0000
ROA not before: Tue 26 May 2026 06:07:39 +0000
ROA not after: Tue 25 May 2027 06:12:39 +0000
asID: 146684
IP address blocks: 240a:afc2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:72:0a:03:69:02:13:d6:9f:e5:5f:44:86:e3:4f:d3:0f:58:5f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:39 2026 GMT
Not After : May 25 06:12:39 2027 GMT
Subject: CN=2D8B101AA0120D14A146FB8F3346B100FA1E53BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:bd:6d:ce:e9:87:14:ee:26:39:3e:da:8c:
f4:01:b0:e6:70:c6:bc:08:21:85:24:74:fa:91:13:
08:44:7a:16:2e:84:f2:ef:3b:5c:de:b9:74:57:54:
99:30:18:ab:c2:54:10:16:a0:48:bc:e6:7a:bf:da:
b3:b3:19:78:5b:d5:85:ff:a8:a8:d3:8d:32:6b:6a:
f1:58:74:a1:cc:1c:01:e9:94:4d:23:f7:ed:ca:e7:
28:d2:15:9c:9c:23:5b:cf:b6:ed:3d:a7:30:da:12:
38:24:f8:9f:a7:42:0a:7c:3c:1b:6a:0c:f5:43:88:
14:d5:4d:e9:97:17:ed:e7:2a:f1:d2:35:ec:2b:6e:
a1:71:7e:a3:07:f7:5f:e5:e1:0b:a1:c4:78:62:18:
89:f3:59:4d:a4:62:19:23:39:4f:aa:0a:c0:26:fd:
d1:f2:b9:3d:02:7c:45:74:39:32:da:f4:8f:60:81:
5b:0e:93:35:cc:9d:e4:7b:bf:1e:d7:9a:46:89:55:
d9:d9:59:8d:cb:ea:87:19:f1:0f:4c:c3:c7:21:5b:
b3:d8:ca:b9:46:6b:b5:60:96:d3:eb:08:d6:fc:38:
19:e0:20:7a:da:4b:33:d2:f3:21:d5:be:46:ad:7c:
47:dc:05:f6:04:06:71:86:37:f3:a3:8c:e3:92:8e:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8B:10:1A:A0:12:0D:14:A1:46:FB:8F:33:46:B1:00:FA:1E:53:BF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146684.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afc2::/32
Signature Algorithm: sha256WithRSAEncryption
58:7f:fc:4e:1d:b8:a9:b9:cb:42:66:60:be:7c:cf:8b:05:a3:
db:39:d2:81:62:84:8e:40:df:b0:49:29:88:58:4a:9f:f3:c0:
d8:ba:b5:15:c9:d9:99:77:60:66:af:fd:40:ca:3f:f5:1a:38:
70:fc:b5:f6:5e:79:a7:42:13:b6:e3:38:30:cf:3a:4b:a9:0c:
e1:d0:af:7b:ec:1b:28:55:9c:b3:27:51:f2:94:ad:20:70:94:
8d:f4:db:0d:e3:39:68:dc:10:8c:a3:72:9b:61:0b:b2:a6:40:
c0:d0:54:b6:bd:e5:d7:d5:09:62:10:ef:2f:64:3b:22:f0:1b:
db:1e:b2:d5:5c:b7:76:d7:14:6b:94:77:48:cb:7a:a7:35:df:
e6:2f:c6:f7:f7:82:6d:2a:89:fc:ba:fd:62:94:a3:11:91:ed:
66:b4:53:09:43:90:20:b6:cf:3b:1a:32:33:72:d2:2f:10:64:
9d:d3:1e:ea:33:49:b9:73:27:de:80:d1:be:25:ff:f6:11:3d:
98:f2:c0:4c:37:5d:e4:f0:6e:53:45:a5:a0:68:fe:d8:0b:5d:
7d:9c:55:d1:bb:a4:64:fa:45:c7:43:bf:1a:40:a7:fa:61:37:
53:d8:31:fb:c6:20:66:5e:81:dc:f4:43:10:32:01:2e:51:84:
36:78:4c:0e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMHIKA2kCE9af5V9EhuNP0w9YX5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3MzlaFw0yNzA1MjUwNjEyMzlaMDMxMTAvBgNV
BAMTKDJEOEIxMDFBQTAxMjBEMTRBMTQ2RkI4RjMzNDZCMTAwRkExRTUzQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyL1tzumHFO4mOT7ajPQBsOZw
xrwIIYUkdPqREwhEehYuhPLvO1zeuXRXVJkwGKvCVBAWoEi85nq/2rOzGXhb1YX/
qKjTjTJravFYdKHMHAHplE0j9+3K5yjSFZycI1vPtu09pzDaEjgk+J+nQgp8PBtq
DPVDiBTVTemXF+3nKvHSNewrbqFxfqMH91/l4QuhxHhiGInzWU2kYhkjOU+qCsAm
/dHyuT0CfEV0OTLa9I9ggVsOkzXMneR7vx7XmkaJVdnZWY3L6ocZ8Q9Mw8chW7PY
yrlGa7VgltPrCNb8OBngIHraSzPS8yHVvkatfEfcBfYEBnGGN/OjjOOSjulfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULYsQGqASDRShRvuPM0axAPoeU78wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2Njg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvwjANBgkqhkiG9w0BAQsFAAOCAQEAWH/8
Th24qbnLQmZgvnzPiwWj2znSgWKEjkDfsEkpiFhKn/PA2Lq1FcnZmXdgZq/9QMo/
9Ro4cPy19l55p0ITtuM4MM86S6kM4dCve+wbKFWcsydR8pStIHCUjfTbDeM5aNwQ
jKNym2ELsqZAwNBUtr3l19UJYhDvL2Q7IvAb2x6y1Vy3dtcUa5R3SMt6pzXf5i/G
9/eCbSqJ/Lr9YpSjEZHtZrRTCUOQILbPOxoyM3LSLxBkndMe6jNJuXMn3oDRviX/
9hE9mPLATDdd5PBuU0WloGj+2AtdfZxV0bukZPpFx0O/GkCn+mE3U9gx+8YgZl6B
3PRDEDIBLlGENnhMDg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:48 2026 by rpki-client