Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146689.roa
File: AS146689.roa (raw, json)
Hash identifier: 2U2hSXA8A7ZRVb87acLG4jZrbtHcs03t3i25ADOff4Q=
Subject key identifier: 37:FD:FB:45:04:F1:02:B1:76:6C:A4:D3:2D:3F:08:DE:AA:6E:CA:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7F38B2FBD12D8704B12FC0AA5E7BEC9A0D59C2F8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146689.roa
Signing time: Fri 22 May 2026 07:40:57 +0000
ROA not before: Fri 22 May 2026 07:35:57 +0000
ROA not after: Fri 21 May 2027 07:40:57 +0000
asID: 146689
IP address blocks: 240a:afc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:38:b2:fb:d1:2d:87:04:b1:2f:c0:aa:5e:7b:ec:9a:0d:59:c2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:57 2026 GMT
Not After : May 21 07:40:57 2027 GMT
Subject: CN=37FDFB4504F102B1766CA4D32D3F08DEAA6ECA23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:ef:ce:64:63:dd:a1:de:db:ea:4b:8e:07:
15:6a:e5:00:ec:2a:65:1d:87:e6:f5:b8:a4:5b:7f:
a9:a2:cd:f2:44:74:79:b2:14:af:7e:44:30:87:48:
19:cf:4e:e2:8f:e3:f5:ce:1d:4c:3d:fa:39:7c:70:
ee:86:f0:3b:c7:38:1c:69:46:44:05:5c:1d:ae:40:
33:23:0d:59:17:44:dc:1a:ab:15:e6:9d:79:24:a9:
e3:13:68:0d:0e:b8:7f:06:07:f3:31:b7:0b:cf:fd:
a0:b0:ca:ad:87:d4:21:bc:3a:0e:c4:e3:4c:04:f2:
e9:d9:f6:84:1c:3d:e1:57:12:b9:24:73:bb:93:96:
4b:ea:ab:52:31:10:ea:6f:15:49:eb:d8:15:32:49:
49:1e:04:44:c1:91:f8:87:39:5a:0d:da:c6:e7:5b:
89:0c:fd:85:fa:18:27:b8:e6:fa:1f:57:29:a9:1c:
b2:8a:c0:31:00:07:df:39:a6:c2:b8:15:f8:22:d8:
01:ab:66:93:8b:1d:ca:e2:72:37:f0:70:59:4f:5e:
96:7b:9c:07:42:ba:72:ef:f1:5d:a2:58:71:7e:5b:
4f:54:1d:66:74:f1:40:e5:5e:09:d9:22:b4:9a:b1:
93:43:fc:2b:38:59:b8:f7:19:4d:1b:53:70:8a:18:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FD:FB:45:04:F1:02:B1:76:6C:A4:D3:2D:3F:08:DE:AA:6E:CA:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afc7::/32
Signature Algorithm: sha256WithRSAEncryption
a1:e6:94:2d:56:1f:fd:5c:46:af:8d:14:ec:82:cd:36:ad:8f:
6b:9f:3f:7e:7e:db:cf:63:8b:82:f8:0a:b8:62:26:e4:d7:1f:
15:9f:56:51:b3:87:3f:a1:23:59:a9:41:73:da:79:32:c5:77:
34:1c:b2:fc:d3:d9:00:54:66:50:e4:b9:7b:e8:b4:b0:51:28:
37:d1:ca:64:f3:b1:36:1e:e2:20:2c:c5:a1:48:df:ee:c4:e1:
6e:49:23:b8:e3:dd:29:a9:df:a4:6b:2a:f2:39:01:c1:e5:7c:
37:c4:b9:42:75:82:f6:dd:92:eb:fa:0c:1e:8d:e1:c2:66:72:
2f:27:cd:7e:b7:5d:25:1d:1f:f3:88:09:3c:9c:16:67:83:ea:
47:ac:53:54:97:05:e8:83:2c:81:54:48:18:a0:32:7f:b8:54:
09:0d:0e:77:28:d1:ea:c9:a6:ff:7d:f1:52:b2:5d:f7:89:14:
99:15:95:24:0e:74:bb:6d:e9:df:2c:15:d9:10:42:fa:02:dc:
17:b2:a1:7a:90:76:5f:30:a6:c8:dd:07:b5:06:5f:aa:a5:3c:
b6:5e:fd:5f:ac:35:6a:80:1f:cd:10:6c:13:82:93:83:12:e0:
93:85:90:2f:5f:81:62:bb:00:15:a8:dd:98:dc:8d:52:11:b3:
f3:1e:4c:96
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfziy+9EthwSxL8CqXnvsmg1ZwvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM1NTdaFw0yNzA1MjEwNzQwNTdaMDMxMTAvBgNV
BAMTKDM3RkRGQjQ1MDRGMTAyQjE3NjZDQTREMzJEM0YwOERFQUE2RUNBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU8e/OZGPdod7b6kuOBxVq5QDs
KmUdh+b1uKRbf6mizfJEdHmyFK9+RDCHSBnPTuKP4/XOHUw9+jl8cO6G8DvHOBxp
RkQFXB2uQDMjDVkXRNwaqxXmnXkkqeMTaA0OuH8GB/MxtwvP/aCwyq2H1CG8Og7E
40wE8unZ9oQcPeFXErkkc7uTlkvqq1IxEOpvFUnr2BUySUkeBETBkfiHOVoN2sbn
W4kM/YX6GCe45vofVympHLKKwDEAB985psK4Ffgi2AGrZpOLHcricjfwcFlPXpZ7
nAdCunLv8V2iWHF+W09UHWZ08UDlXgnZIrSasZND/Cs4Wbj3GU0bU3CKGGenAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUN/37RQTxArF2bKTTLT8I3qpuyiMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2Njg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqvxzANBgkqhkiG9w0BAQsFAAOCAQEAoeaU
LVYf/VxGr40U7ILNNq2Pa58/fn7bz2OLgvgKuGIm5NcfFZ9WUbOHP6EjWalBc9p5
MsV3NByy/NPZAFRmUOS5e+i0sFEoN9HKZPOxNh7iICzFoUjf7sThbkkjuOPdKanf
pGsq8jkBweV8N8S5QnWC9t2S6/oMHo3hwmZyLyfNfrddJR0f84gJPJwWZ4PqR6xT
VJcF6IMsgVRIGKAyf7hUCQ0OdyjR6smm/33xUrJd94kUmRWVJA50u23p3ywV2RBC
+gLcF7KhepB2XzCmyN0HtQZfqqU8tl79X6w1aoAfzRBsE4KTgxLgk4WQL1+BYrsA
FajdmNyNUhGz8x5Mlg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:26 2026 by rpki-client