Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146726.roa
File: AS146726.roa (raw, json)
Hash identifier: 9MKmeFpa8+CzH+Rfldh9GB5dBTCbkz5bmzjI+im1Q6c=
Subject key identifier: B7:AC:FD:3F:D7:ED:53:60:79:C3:E8:80:DD:5B:FE:5D:85:B1:20:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7C2586CE79CB5FEB21732AB7088E18BB34BD2880
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146726.roa
Signing time: Fri 22 May 2026 04:07:54 +0000
ROA not before: Fri 22 May 2026 04:02:54 +0000
ROA not after: Fri 21 May 2027 04:07:54 +0000
asID: 146726
IP address blocks: 240a:afec::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:25:86:ce:79:cb:5f:eb:21:73:2a:b7:08:8e:18:bb:34:bd:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:54 2026 GMT
Not After : May 21 04:07:54 2027 GMT
Subject: CN=B7ACFD3FD7ED536079C3E880DD5BFE5D85B12088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:02:65:02:ed:81:fc:06:0f:5f:b8:e9:e4:
03:8d:c1:b2:5d:43:82:ac:b1:09:00:c1:f2:f3:48:
94:36:db:3d:db:df:fb:3f:40:c3:8b:e8:6c:0b:d0:
f6:44:57:21:9d:78:93:19:fd:40:b4:79:88:1d:0c:
9d:68:aa:ad:d0:e1:79:7f:b2:39:78:b2:b5:f6:04:
95:df:bc:80:92:24:4a:40:e7:e9:66:4b:a8:4e:ea:
01:82:40:37:cc:65:da:95:74:a8:3b:e9:66:74:af:
4b:5d:37:c1:b6:d1:78:8e:ca:4c:e1:f1:6f:78:6f:
3e:2a:52:b0:8e:14:4e:00:0b:4a:ae:ce:e3:be:91:
31:77:3d:2e:0e:35:76:df:1f:c3:fa:1b:82:03:20:
b6:a3:22:7b:a0:22:89:2a:a3:1b:18:06:4c:6c:b3:
22:75:c4:c8:4b:c6:57:a4:e1:26:54:d3:9e:de:d1:
06:a1:a6:01:dd:8a:68:57:98:53:d3:55:d4:6c:14:
09:a0:d3:24:88:3a:04:e4:95:3d:0f:c7:64:8e:71:
45:b6:6c:32:d2:39:23:d7:ef:cc:ce:53:c4:8f:78:
61:4b:8e:84:0b:90:45:4a:f4:6b:f7:96:3d:51:a9:
34:5d:75:66:f4:5e:87:1e:34:6e:5f:09:f1:e1:3c:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AC:FD:3F:D7:ED:53:60:79:C3:E8:80:DD:5B:FE:5D:85:B1:20:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:afec::/32
Signature Algorithm: sha256WithRSAEncryption
0a:11:19:2c:ac:a4:16:3c:3d:e8:04:de:18:97:6b:f2:d1:68:
a2:88:73:e8:c0:02:8e:d7:06:8c:36:77:23:34:12:36:de:df:
d0:fd:b5:aa:05:31:49:13:35:e2:93:f1:32:5c:2e:c3:b3:67:
b0:6b:cf:59:e1:d3:6b:b8:74:50:e0:26:c0:16:e1:56:e2:51:
c2:8a:37:1c:81:21:a1:0c:28:f3:52:c5:91:08:72:64:8b:43:
c2:c1:64:d5:03:95:c1:6d:30:bf:28:5c:ff:73:68:41:15:ae:
dc:46:17:ec:09:54:c4:67:fb:c9:9f:05:4e:d1:18:23:66:32:
f9:7f:f6:4e:f8:97:77:be:d1:07:fb:aa:cb:76:12:e6:37:bd:
93:7c:18:52:62:5b:ac:3e:07:55:6c:48:65:97:eb:bf:8e:29:
3b:8d:a7:31:c8:b8:71:31:fb:90:67:3c:22:a0:a4:74:60:c8:
40:fc:b7:3c:36:de:9f:5d:fa:48:b9:b9:64:5c:5f:02:d6:2d:
99:33:40:af:fb:86:0b:1f:90:e2:0d:4e:e2:6e:3c:b7:19:95:
d7:e3:1c:c7:3c:5b:f3:a1:11:96:4b:37:3d:cf:64:bf:aa:b0:
66:2a:bb:29:21:ae:ca:85:0c:f6:ea:67:a1:cd:31:5c:3d:9c:
a6:75:01:e0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfCWGznnLX+shcyq3CI4YuzS9KIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAyNTRaFw0yNzA1MjEwNDA3NTRaMDMxMTAvBgNV
BAMTKEI3QUNGRDNGRDdFRDUzNjA3OUMzRTg4MERENUJGRTVEODVCMTIwODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTuwJlAu2B/AYPX7jp5AONwbJd
Q4KssQkAwfLzSJQ22z3b3/s/QMOL6GwL0PZEVyGdeJMZ/UC0eYgdDJ1oqq3Q4Xl/
sjl4srX2BJXfvICSJEpA5+lmS6hO6gGCQDfMZdqVdKg76WZ0r0tdN8G20XiOykzh
8W94bz4qUrCOFE4AC0quzuO+kTF3PS4ONXbfH8P6G4IDILajInugIokqoxsYBkxs
syJ1xMhLxlek4SZU057e0QahpgHdimhXmFPTVdRsFAmg0ySIOgTklT0Px2SOcUW2
bDLSOSPX78zOU8SPeGFLjoQLkEVK9Gv3lj1RqTRddWb0XoceNG5fCfHhPEUxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUt6z9P9ftU2B5w+iA3Vv+XYWxIIgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NzI2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqv7DANBgkqhkiG9w0BAQsFAAOCAQEAChEZ
LKykFjw96ATeGJdr8tFooohz6MACjtcGjDZ3IzQSNt7f0P21qgUxSRM14pPxMlwu
w7NnsGvPWeHTa7h0UOAmwBbhVuJRwoo3HIEhoQwo81LFkQhyZItDwsFk1QOVwW0w
vyhc/3NoQRWu3EYX7AlUxGf7yZ8FTtEYI2Yy+X/2TviXd77RB/uqy3YS5je9k3wY
UmJbrD4HVWxIZZfrv44pO42nMci4cTH7kGc8IqCkdGDIQPy3PDben136SLm5ZFxf
AtYtmTNAr/uGCx+Q4g1O4m48txmV1+Mcxzxb86ERlks3Pc9kv6qwZiq7KSGuyoUM
9upnoc0xXD2cpnUB4A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:51 2026 by rpki-client