Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146702.roa
File: AS146702.roa (raw, json)
Hash identifier: oQOVb1jIuZ6uK9/M6cdSA0FO7RSw6ZKxI+l8LTLDPVw=
Subject key identifier: B6:1F:07:EB:B2:94:70:94:A9:F7:67:34:48:87:93:01:17:45:9F:EF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6E73D272361C64F1DC67C25EB545567E22B30A82
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146702.roa
Signing time: Mon 25 May 2026 01:38:07 +0000
ROA not before: Mon 25 May 2026 01:33:07 +0000
ROA not after: Mon 24 May 2027 01:38:07 +0000
asID: 146702
IP address blocks: 240a:afd4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:73:d2:72:36:1c:64:f1:dc:67:c2:5e:b5:45:56:7e:22:b3:0a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:07 2026 GMT
Not After : May 24 01:38:07 2027 GMT
Subject: CN=B61F07EBB2947094A9F767344887930117459FEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:bd:e7:65:e0:9a:44:22:a7:89:88:05:ef:
f6:16:47:b8:00:7f:12:00:83:f6:c8:3e:68:43:61:
0e:0d:79:b4:fc:d2:ac:f6:8a:c3:39:7c:59:51:2e:
30:85:2c:39:19:e6:50:f1:9c:dd:33:47:3f:7f:3b:
80:7a:37:75:3d:b0:95:73:c0:43:2f:dd:8e:0a:46:
e5:47:1e:4d:66:81:1d:fa:27:17:5d:5f:ed:26:ea:
69:ac:bd:52:c7:78:e2:07:91:b5:c2:c6:24:e3:37:
95:3d:72:22:3e:7b:24:18:e4:c5:6e:58:75:92:87:
d5:d7:fb:ef:51:0c:62:ee:ac:80:0d:34:1e:b0:68:
30:48:c1:c7:1f:61:a8:8e:d7:1a:2e:b3:8f:8e:f0:
c4:6a:76:77:5c:34:37:18:0a:e0:b4:69:7a:90:89:
08:d1:25:22:85:c2:65:0d:f0:fd:5e:42:f5:ae:b3:
73:1b:3c:07:d6:d0:94:3a:d5:0d:e8:f9:c6:76:d9:
b6:75:e1:7b:c7:9e:d4:87:0d:95:68:6a:f2:62:5c:
18:15:5c:59:db:af:f4:5b:37:9f:67:4d:22:3d:a5:
c8:31:93:09:cb:4c:be:4b:a6:41:6b:b6:79:df:1b:
9c:b8:27:53:c9:dd:7e:86:34:18:79:87:dc:3d:5f:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:07:EB:B2:94:70:94:A9:F7:67:34:48:87:93:01:17:45:9F:EF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afd4::/32
Signature Algorithm: sha256WithRSAEncryption
07:73:d3:39:9d:54:56:6e:d5:ad:e4:a2:45:b7:30:64:b3:79:
63:42:aa:0b:78:0e:2d:17:46:c4:64:d6:0d:86:bc:87:ca:0b:
fa:ec:cd:0b:bc:80:56:2e:88:89:54:16:1a:8d:ad:6e:e3:bd:
8c:fc:6d:b8:f0:c3:1a:14:a7:2c:1c:88:ab:79:6e:78:82:31:
9c:51:7b:84:42:60:cf:b8:69:1b:cf:db:a8:05:16:46:75:8c:
5b:6d:9a:02:3d:44:e3:98:ec:d1:0a:82:ca:e2:c6:f8:c8:89:
36:41:58:4e:71:9f:15:cd:04:90:72:fd:49:f7:b7:9d:80:57:
32:45:0d:a1:d9:a8:43:52:49:b9:f0:7e:f7:31:37:8d:fa:95:
04:18:73:bc:d3:1e:4a:22:f1:85:e2:59:24:22:43:9f:ac:3d:
19:cd:dc:2f:58:79:08:41:5f:74:0b:4e:42:95:7c:11:8e:80:
82:94:8a:fb:51:ad:da:bf:c9:0d:32:93:17:39:b3:fb:13:ad:
5d:53:80:0e:69:4d:e1:c4:f2:bb:e1:af:ae:00:11:77:8f:7d:
27:a2:a2:72:93:85:0a:82:0e:05:37:f5:42:f1:0c:0e:5b:8e:
c5:77:c1:bc:0f:29:d7:81:b5:9f:ea:5a:ba:4c:d9:89:4c:a7:
30:ea:06:33
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbnPScjYcZPHcZ8JetUVWfiKzCoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMDdaFw0yNzA1MjQwMTM4MDdaMDMxMTAvBgNV
BAMTKEI2MUYwN0VCQjI5NDcwOTRBOUY3NjczNDQ4ODc5MzAxMTc0NTlGRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafL3nZeCaRCKniYgF7/YWR7gA
fxIAg/bIPmhDYQ4NebT80qz2isM5fFlRLjCFLDkZ5lDxnN0zRz9/O4B6N3U9sJVz
wEMv3Y4KRuVHHk1mgR36JxddX+0m6mmsvVLHeOIHkbXCxiTjN5U9ciI+eyQY5MVu
WHWSh9XX++9RDGLurIANNB6waDBIwccfYaiO1xous4+O8MRqdndcNDcYCuC0aXqQ
iQjRJSKFwmUN8P1eQvWus3MbPAfW0JQ61Q3o+cZ22bZ14XvHntSHDZVoavJiXBgV
XFnbr/RbN59nTSI9pcgxkwnLTL5LpkFrtnnfG5y4J1PJ3X6GNBh5h9w9X6MBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUth8H67KUcJSp92c0SIeTARdFn+8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NzAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqv1DANBgkqhkiG9w0BAQsFAAOCAQEAB3PT
OZ1UVm7VreSiRbcwZLN5Y0KqC3gOLRdGxGTWDYa8h8oL+uzNC7yAVi6IiVQWGo2t
buO9jPxtuPDDGhSnLByIq3lueIIxnFF7hEJgz7hpG8/bqAUWRnWMW22aAj1E45js
0QqCyuLG+MiJNkFYTnGfFc0EkHL9Sfe3nYBXMkUNodmoQ1JJufB+9zE3jfqVBBhz
vNMeSiLxheJZJCJDn6w9Gc3cL1h5CEFfdAtOQpV8EY6AgpSK+1Gt2r/JDTKTFzmz
+xOtXVOADmlN4cTyu+GvrgARd499J6KicpOFCoIOBTf1QvEMDluOxXfBvA8p14G1
n+paukzZiUynMOoGMw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:12 2026 by rpki-client