Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146736.roa
File: AS146736.roa (raw, json)
Hash identifier: A2BBapFA4qZRnzMfqb+JDaw0fyETpsEc21vvNazWMME=
Subject key identifier: 96:88:F3:C2:13:20:01:D9:84:EF:F8:DB:63:83:1F:D7:99:59:41:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 380FF98E00D50473F1CD5E47FC2AD384E230C8EE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146736.roa
Signing time: Fri 22 May 2026 07:09:05 +0000
ROA not before: Fri 22 May 2026 07:04:05 +0000
ROA not after: Fri 21 May 2027 07:09:05 +0000
asID: 146736
IP address blocks: 240a:aff6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:0f:f9:8e:00:d5:04:73:f1:cd:5e:47:fc:2a:d3:84:e2:30:c8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:05 2026 GMT
Not After : May 21 07:09:05 2027 GMT
Subject: CN=9688F3C2132001D984EFF8DB63831FD79959413D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:1a:3c:d7:15:69:8b:aa:bc:a6:e8:cb:0a:
f5:7c:f5:42:ce:4b:82:d8:ee:8b:d9:8c:1c:9f:0a:
f3:8e:21:db:29:c8:07:bb:d6:26:4c:c5:d7:8e:fb:
81:c2:11:1f:76:e1:a5:d7:04:d4:59:76:be:95:77:
a3:07:5c:dc:13:f3:5f:79:9f:87:60:4a:73:cc:69:
47:6b:a4:06:a3:21:5b:22:c3:c5:f4:b4:60:91:bc:
72:cc:b7:a1:fe:b8:ea:72:7c:c6:fd:27:aa:d0:9a:
f1:51:cd:8e:03:1b:b9:a2:5a:69:8b:ca:a0:8a:17:
57:c1:14:14:f2:8e:56:98:89:f1:39:3a:ac:88:26:
db:5a:f9:94:2d:20:9f:66:94:8f:c0:bb:63:4c:f9:
62:0a:a6:19:98:1e:21:9c:2c:75:ae:d0:ae:f5:4b:
55:99:64:c1:f2:84:ea:11:5e:43:87:5d:37:44:9d:
55:1c:64:a1:ee:6c:b0:0b:99:2c:6c:4a:e6:d3:ae:
b4:57:0f:44:21:d9:dd:52:fc:4e:e7:ea:df:36:67:
b4:cb:3c:d9:c3:2d:a0:6b:d7:79:c5:f7:ce:a8:26:
3e:a6:18:94:65:5b:e8:51:d9:e5:10:4e:cd:1a:cf:
cb:61:b1:5e:76:fd:ca:e3:74:8d:6e:0f:94:40:71:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:88:F3:C2:13:20:01:D9:84:EF:F8:DB:63:83:1F:D7:99:59:41:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aff6::/32
Signature Algorithm: sha256WithRSAEncryption
49:96:92:37:0b:30:ee:fb:08:54:01:d7:e1:bd:9a:76:97:d5:
22:d5:c3:2c:0a:ba:84:b7:d1:23:de:39:e8:68:74:3e:ec:af:
b2:87:43:2a:40:fe:5e:30:45:d7:f5:97:53:bb:e7:c4:a7:37:
02:16:e3:f7:cd:e0:07:69:1a:91:06:81:5e:65:db:22:94:ce:
ae:ae:f7:d5:09:4b:84:28:11:d4:49:f1:6a:f8:02:3b:a6:80:
52:3c:65:b7:89:e7:eb:0d:c2:f3:e0:79:ed:ed:da:c4:f9:7a:
0f:e5:b4:43:c5:44:e8:5d:0e:0e:51:c7:6b:7a:fe:ab:5e:4d:
07:9e:48:3a:70:64:10:64:91:03:04:f4:b0:45:d2:72:90:03:
df:1b:1d:83:d5:c7:45:4b:57:0d:6f:63:c2:0f:ad:95:7f:62:
e1:e6:be:62:5d:24:ed:f6:e1:10:8e:f8:74:8a:dc:27:a9:94:
b9:81:2b:ef:2a:c0:ad:22:1a:23:51:e2:07:8f:28:9a:6c:97:
1e:b3:92:00:7c:39:53:cf:6d:c2:71:96:68:96:3c:e0:3f:c4:
61:0e:5d:a7:ea:e3:14:c2:c1:d6:50:87:94:9b:dd:18:37:e6:
b4:0d:9c:0f:fc:5e:87:db:cb:3e:9d:9d:86:92:90:43:1c:89:
75:c6:bd:bd
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOA/5jgDVBHPxzV5H/CrThOIwyO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MDVaFw0yNzA1MjEwNzA5MDVaMDMxMTAvBgNV
BAMTKDk2ODhGM0MyMTMyMDAxRDk4NEVGRjhEQjYzODMxRkQ3OTk1OTQxM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fRo81xVpi6q8pujLCvV89ULO
S4LY7ovZjByfCvOOIdspyAe71iZMxdeO+4HCER924aXXBNRZdr6Vd6MHXNwT8195
n4dgSnPMaUdrpAajIVsiw8X0tGCRvHLMt6H+uOpyfMb9J6rQmvFRzY4DG7miWmmL
yqCKF1fBFBTyjlaYifE5OqyIJtta+ZQtIJ9mlI/Au2NM+WIKphmYHiGcLHWu0K71
S1WZZMHyhOoRXkOHXTdEnVUcZKHubLALmSxsSubTrrRXD0Qh2d1S/E7n6t82Z7TL
PNnDLaBr13nF986oJj6mGJRlW+hR2eUQTs0az8thsV52/crjdI1uD5RAcWH5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUlojzwhMgAdmE7/jbY4Mf15lZQT0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqv9jANBgkqhkiG9w0BAQsFAAOCAQEASZaS
Nwsw7vsIVAHX4b2adpfVItXDLAq6hLfRI9456Gh0PuyvsodDKkD+XjBF1/WXU7vn
xKc3Ahbj983gB2kakQaBXmXbIpTOrq731QlLhCgR1EnxavgCO6aAUjxlt4nn6w3C
8+B57e3axPl6D+W0Q8VE6F0ODlHHa3r+q15NB55IOnBkEGSRAwT0sEXScpAD3xsd
g9XHRUtXDW9jwg+tlX9i4ea+Yl0k7fbhEI74dIrcJ6mUuYEr7yrArSIaI1HiB48o
mmyXHrOSAHw5U89twnGWaJY84D/EYQ5dp+rjFMLB1lCHlJvdGDfmtA2cD/xeh9vL
Pp2dhpKQQxyJdca9vQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:08 2026 by rpki-client