Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146714.roa
File: AS146714.roa (raw, json)
Hash identifier: uZT4BPzcdhGgLMqnWcT+X3d9R3AbdDztfwrCikxUhvQ=
Subject key identifier: 52:50:BB:C7:E5:38:B9:BA:83:47:A7:D8:10:65:CC:E8:C1:53:55:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3DD860057F14B70B28702C4B0E08206AA85941E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146714.roa
Signing time: Mon 25 May 2026 01:38:35 +0000
ROA not before: Mon 25 May 2026 01:33:35 +0000
ROA not after: Mon 24 May 2027 01:38:35 +0000
asID: 146714
IP address blocks: 240a:afe0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d8:60:05:7f:14:b7:0b:28:70:2c:4b:0e:08:20:6a:a8:59:41:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:35 2026 GMT
Not After : May 24 01:38:35 2027 GMT
Subject: CN=5250BBC7E538B9BA8347A7D81065CCE8C153555B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:09:82:31:10:36:8b:72:75:66:43:d2:59:
70:74:48:e6:57:88:da:68:ca:5f:f3:0d:be:ce:3b:
61:0c:96:7c:42:fa:dd:20:07:56:19:1a:84:85:b6:
80:25:a4:5e:70:7c:1d:ca:95:11:e8:58:10:95:0b:
d9:5d:8b:21:bb:fe:6b:de:3c:1e:04:bb:51:47:40:
0a:60:49:38:24:77:84:2b:5e:18:7a:fd:e6:f6:c3:
16:1e:0c:92:0c:61:d5:c0:6b:96:fd:3b:1d:f5:71:
c3:7d:01:82:fd:95:8f:d0:08:86:aa:07:e0:33:69:
da:db:ab:15:0b:e6:72:cb:21:47:af:d1:1e:61:90:
c1:f5:d5:08:01:db:5d:fd:3f:d0:a4:75:59:cd:4c:
ec:ac:3d:1d:50:57:20:fa:72:b3:da:d0:5c:1d:62:
83:a7:e7:67:9a:12:98:4a:e6:74:64:67:2a:10:bd:
05:16:ad:c3:15:ef:7c:15:1e:27:c4:82:af:89:d7:
45:17:94:4f:43:cd:f7:ce:77:31:65:6b:b8:ef:aa:
47:38:f1:11:c8:75:d1:a3:4e:c7:72:3e:b5:8b:66:
e8:e6:d7:c3:b4:fc:19:f3:89:58:e1:c1:50:d6:06:
55:33:94:d2:f7:28:70:53:40:13:32:d8:c8:99:c9:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:50:BB:C7:E5:38:B9:BA:83:47:A7:D8:10:65:CC:E8:C1:53:55:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146714.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afe0::/32
Signature Algorithm: sha256WithRSAEncryption
42:6c:ac:c2:ab:9d:1b:c5:d2:18:19:5e:77:34:89:71:56:c0:
72:88:8c:b8:70:32:aa:5f:f5:35:01:12:cf:6f:20:89:b7:5a:
ec:15:b6:44:12:da:25:c7:a5:85:d7:16:7a:7b:55:8e:11:4b:
cd:31:1a:a5:8a:d6:5e:cc:20:b6:da:6b:69:d8:55:49:88:51:
d9:38:c3:1f:ca:6d:44:ae:97:13:82:12:b1:d8:9c:18:55:da:
c4:4d:68:ad:65:d9:0c:08:fa:1f:2a:2f:c9:cb:fb:c7:e8:bb:
12:0a:12:51:28:a9:42:bd:41:70:15:50:56:b3:16:7d:64:89:
09:f9:68:c6:58:e9:7e:a2:7e:b3:52:cc:b6:72:c9:a7:31:a9:
87:af:c7:b0:ee:be:d9:8d:05:80:1b:88:e3:0c:2d:a9:2d:15:
e0:fa:c4:48:b9:c2:a7:57:9d:4d:98:cc:c8:f3:aa:a1:45:b9:
e1:a7:dc:78:58:51:fe:9e:c0:ec:0e:af:6e:8f:16:06:f4:39:
c0:21:c7:5d:ae:e3:f5:d5:fb:fa:93:2a:1d:66:05:b1:5d:f7:
7d:7c:93:86:7d:0f:58:26:54:bc:00:e1:53:a7:71:cc:b5:e1:
c8:7a:23:ee:7f:8c:25:c3:16:ba:e8:d7:a4:7e:19:8e:8c:bd:
ff:98:c7:25
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPdhgBX8UtwsocCxLDgggaqhZQeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMzVaFw0yNzA1MjQwMTM4MzVaMDMxMTAvBgNV
BAMTKDUyNTBCQkM3RTUzOEI5QkE4MzQ3QTdEODEwNjVDQ0U4QzE1MzU1NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUVQmCMRA2i3J1ZkPSWXB0SOZX
iNpoyl/zDb7OO2EMlnxC+t0gB1YZGoSFtoAlpF5wfB3KlRHoWBCVC9ldiyG7/mve
PB4Eu1FHQApgSTgkd4QrXhh6/eb2wxYeDJIMYdXAa5b9Ox31ccN9AYL9lY/QCIaq
B+AzadrbqxUL5nLLIUev0R5hkMH11QgB2139P9CkdVnNTOysPR1QVyD6crPa0Fwd
YoOn52eaEphK5nRkZyoQvQUWrcMV73wVHifEgq+J10UXlE9DzffOdzFla7jvqkc4
8RHIddGjTsdyPrWLZujm18O0/BnziVjhwVDWBlUzlNL3KHBTQBMy2MiZySPBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUUlC7x+U4ubqDR6fYEGXM6MFTVVswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NzE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqv4DANBgkqhkiG9w0BAQsFAAOCAQEAQmys
wqudG8XSGBledzSJcVbAcoiMuHAyql/1NQESz28gibda7BW2RBLaJcelhdcWentV
jhFLzTEapYrWXswgttpradhVSYhR2TjDH8ptRK6XE4ISsdicGFXaxE1orWXZDAj6
Hyovycv7x+i7EgoSUSipQr1BcBVQVrMWfWSJCfloxljpfqJ+s1LMtnLJpzGph6/H
sO6+2Y0FgBuI4wwtqS0V4PrESLnCp1edTZjMyPOqoUW54afceFhR/p7A7A6vbo8W
BvQ5wCHHXa7j9dX7+pMqHWYFsV33fXyThn0PWCZUvADhU6dxzLXhyHoj7n+MJcMW
uujXpH4Zjoy9/5jHJQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:31 2026 by rpki-client