Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146734.roa
File: AS146734.roa (raw, json)
Hash identifier: DXjCR+HO1RxkQ3qp7y29h8xsmbAeTFizllNKgfwkMb8=
Subject key identifier: 52:75:D0:9F:49:66:2D:71:EE:41:35:36:66:44:54:26:92:F7:8F:F1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0E2F87CC65B5B7EFC722E5513367B93177624CBD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146734.roa
Signing time: Mon 25 May 2026 01:38:42 +0000
ROA not before: Mon 25 May 2026 01:33:42 +0000
ROA not after: Mon 24 May 2027 01:38:42 +0000
asID: 146734
IP address blocks: 240a:aff4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2f:87:cc:65:b5:b7:ef:c7:22:e5:51:33:67:b9:31:77:62:4c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:42 2026 GMT
Not After : May 24 01:38:42 2027 GMT
Subject: CN=5275D09F49662D71EE4135366644542692F78FF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:af:a3:29:da:ef:a8:f2:17:75:4a:9e:29:
05:e8:07:52:a2:86:b1:80:dc:d6:6c:cb:76:a7:0e:
98:03:70:3b:7f:62:4d:6c:89:d8:c2:64:ed:bb:49:
b1:32:5f:d9:45:7e:6c:6f:f8:86:e7:c0:eb:b1:83:
f0:10:fa:b8:ea:da:68:1d:c9:84:73:9b:cc:50:06:
d1:7e:a6:55:c4:0e:82:c4:e2:41:9d:78:48:a6:2e:
da:7e:f4:3a:9f:38:63:e2:51:64:75:f4:35:ca:f1:
18:9e:0e:f8:3f:e0:90:43:8f:52:4b:56:db:ec:8b:
9d:94:82:05:f5:60:ae:cd:1f:60:79:2d:be:86:97:
9b:e4:d2:ea:dd:eb:4f:22:97:d0:b9:0c:97:cc:a6:
2c:9c:31:58:0f:cc:e1:08:4d:c3:17:5a:bc:83:d7:
47:83:ce:4d:6a:94:5e:10:eb:28:e7:02:87:15:a7:
11:ea:40:5e:ea:d1:9f:f6:0b:4c:fb:7a:5c:0d:23:
bf:ae:4c:e3:37:a4:eb:45:3a:06:27:de:0c:74:bf:
29:a4:e3:4c:53:97:5a:5d:1f:1f:81:2f:15:0a:86:
25:fc:55:6c:2d:79:ca:f0:d1:09:17:9f:57:7b:59:
09:c1:dc:0b:12:32:0d:fc:3b:2f:90:4c:cd:17:7d:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:75:D0:9F:49:66:2D:71:EE:41:35:36:66:44:54:26:92:F7:8F:F1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aff4::/32
Signature Algorithm: sha256WithRSAEncryption
11:ea:79:94:b9:52:55:3a:0c:45:9d:5d:93:12:8c:63:94:b3:
89:bc:ce:aa:67:f8:a3:64:38:54:ff:bd:c2:81:79:40:a3:14:
ee:14:af:a2:d3:a9:14:b0:6e:2c:38:78:a2:f0:36:91:53:af:
97:1e:96:de:a2:d1:5a:38:4b:58:12:6e:1e:de:4c:65:a5:ad:
d8:26:99:f5:65:65:e7:8f:0f:da:0a:e5:79:10:2c:9d:e8:55:
b6:44:50:a9:6d:75:39:91:c0:5b:1b:8c:da:6a:61:84:4e:0f:
4c:f1:ff:4c:dc:7c:f5:54:fe:b2:df:87:f0:b6:b9:24:5d:51:
f3:4a:75:73:83:04:28:8a:28:ae:4c:ff:03:ce:d3:87:2e:de:
06:ed:7f:33:16:34:44:ca:cc:52:d8:a0:92:c3:99:78:0b:19:
7f:7c:82:83:b5:85:9d:14:93:19:dd:7d:f1:37:e6:96:b3:0f:
62:ef:28:6f:df:1e:37:e1:68:03:02:fa:98:66:d1:3c:b6:d8:
f0:c0:36:23:7b:53:a7:d1:3d:eb:00:99:40:b6:bb:29:46:35:
f0:68:ee:86:1c:ba:a8:74:97:a8:4f:c7:d1:6d:97:71:53:cd:
0a:59:d5:b0:8b:63:1a:f4:f1:5a:2c:cd:09:d8:0e:6f:af:45:
ee:e2:6c:3f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDi+HzGW1t+/HIuVRM2e5MXdiTL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzNDJaFw0yNzA1MjQwMTM4NDJaMDMxMTAvBgNV
BAMTKDUyNzVEMDlGNDk2NjJENzFFRTQxMzUzNjY2NDQ1NDI2OTJGNzhGRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDe6+jKdrvqPIXdUqeKQXoB1Ki
hrGA3NZsy3anDpgDcDt/Yk1sidjCZO27SbEyX9lFfmxv+IbnwOuxg/AQ+rjq2mgd
yYRzm8xQBtF+plXEDoLE4kGdeEimLtp+9DqfOGPiUWR19DXK8RieDvg/4JBDj1JL
Vtvsi52UggX1YK7NH2B5Lb6Gl5vk0urd608il9C5DJfMpiycMVgPzOEITcMXWryD
10eDzk1qlF4Q6yjnAocVpxHqQF7q0Z/2C0z7elwNI7+uTOM3pOtFOgYn3gx0vymk
40xTl1pdHx+BLxUKhiX8VWwtecrw0QkXn1d7WQnB3AsSMg38Oy+QTM0XfUSNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUUnXQn0lmLXHuQTU2ZkRUJpL3j/EwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqv9DANBgkqhkiG9w0BAQsFAAOCAQEAEep5
lLlSVToMRZ1dkxKMY5SzibzOqmf4o2Q4VP+9woF5QKMU7hSvotOpFLBuLDh4ovA2
kVOvlx6W3qLRWjhLWBJuHt5MZaWt2CaZ9WVl548P2grleRAsnehVtkRQqW11OZHA
WxuM2mphhE4PTPH/TNx89VT+st+H8La5JF1R80p1c4MEKIoorkz/A87Thy7eBu1/
MxY0RMrMUtigksOZeAsZf3yCg7WFnRSTGd198TfmlrMPYu8ob98eN+FoAwL6mGbR
PLbY8MA2I3tTp9E96wCZQLa7KUY18Gjuhhy6qHSXqE/H0W2XcVPNClnVsItjGvTx
WizNCdgOb69F7uJsPw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:30 2026 by rpki-client