Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146742.roa
File: AS146742.roa (raw, json)
Hash identifier: 12f5VpcvygChpEZ9Ha9yrbljo6XHAO5yhZDDhJ1Ugto=
Subject key identifier: 29:20:E0:BF:28:BB:0F:C4:4A:51:98:99:7E:22:38:B5:4C:72:98:50
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 27CC5CE67E599753EAB9B411D8A1AE78F1B04A66
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146742.roa
Signing time: Fri 22 May 2026 06:28:07 +0000
ROA not before: Fri 22 May 2026 06:23:07 +0000
ROA not after: Fri 21 May 2027 06:28:07 +0000
asID: 146742
IP address blocks: 240a:affc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:cc:5c:e6:7e:59:97:53:ea:b9:b4:11:d8:a1:ae:78:f1:b0:4a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:07 2026 GMT
Not After : May 21 06:28:07 2027 GMT
Subject: CN=2920E0BF28BB0FC44A5198997E2238B54C729850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:75:e6:c8:ff:83:0e:7d:e6:65:4b:c2:82:
41:f6:ab:6d:82:f7:c6:cf:6c:96:a5:e3:1f:91:ef:
23:af:53:f2:7e:64:a3:b0:9c:b9:a3:7c:09:df:77:
f1:08:cd:24:f7:02:a6:a0:02:43:f0:16:97:d4:51:
18:e3:70:ba:33:93:a0:28:b0:9c:e6:8c:00:a9:a4:
96:72:fa:dc:b8:8b:1e:e8:f7:a0:8f:11:c4:1c:89:
59:cf:28:7b:eb:88:51:de:4b:06:65:1c:3b:9d:a0:
45:bc:a5:f6:37:db:6f:e9:e7:ef:40:65:56:4b:1c:
4f:21:03:ad:85:a7:33:0c:84:de:c3:60:e1:27:6e:
05:c8:55:be:a5:c2:69:ab:d2:dc:9e:91:a8:71:d3:
3c:c7:c0:82:ba:7f:7c:14:ca:79:0b:7c:ef:ce:41:
c5:22:9e:b8:d9:20:ab:74:c3:73:89:34:e6:9e:44:
32:b0:8a:c8:77:87:27:2e:63:08:d5:7a:0f:c5:f4:
23:14:9f:a2:84:5b:44:46:24:2a:72:d9:72:25:35:
b1:a3:8f:2c:1d:b8:93:b9:12:b7:82:7d:00:28:17:
f1:f4:1d:cd:d8:a0:ab:10:b5:a9:b5:ba:a3:9b:08:
a4:78:84:37:ca:82:bc:5e:d8:d2:13:ec:42:7e:ba:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:20:E0:BF:28:BB:0F:C4:4A:51:98:99:7E:22:38:B5:4C:72:98:50
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146742.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:affc::/32
Signature Algorithm: sha256WithRSAEncryption
70:22:2d:06:67:0e:bc:3c:e9:c6:a8:78:fd:75:f9:32:90:e5:
0c:bd:ad:e6:9b:9d:ae:af:b0:15:2b:33:c6:d8:3c:67:06:77:
58:7f:2c:ab:91:e8:32:ba:f2:17:c8:95:51:ce:51:62:67:b7:
83:16:8a:17:01:98:64:84:20:b7:b3:99:4a:ac:b2:1d:d7:7a:
3e:6d:70:ad:95:ea:e1:73:2e:8a:71:08:4c:a6:23:81:ea:66:
f2:4f:6e:65:8f:57:0f:e3:8d:b9:61:63:78:49:c5:78:64:2c:
2d:1b:53:fd:f0:b7:89:df:0d:c6:f8:70:c8:48:97:ca:aa:e7:
7f:5c:0e:7e:6f:fb:44:ef:26:5c:58:d6:8d:1e:8e:59:a1:e2:
0b:50:b7:a8:d8:f2:aa:78:dc:fd:e6:36:34:dd:9a:c6:c4:49:
1a:cd:2d:d7:df:45:b2:26:9e:0b:71:73:96:20:83:36:1b:83:
55:ff:71:dc:b2:cc:76:11:ff:61:b9:4a:8d:ce:6d:f4:5f:37:
5b:72:b3:b0:20:b1:d8:89:c5:f4:56:95:b7:83:38:b3:04:b8:
0f:8f:5a:42:f3:d2:9e:df:b2:ac:1d:1d:b6:2d:ec:a1:f4:ed:
1d:c5:ee:95:14:41:95:52:a7:9a:bb:a9:88:83:21:08:46:cb:
de:81:e7:7b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJ8xc5n5Zl1PqubQR2KGuePGwSmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIzMDdaFw0yNzA1MjEwNjI4MDdaMDMxMTAvBgNV
BAMTKDI5MjBFMEJGMjhCQjBGQzQ0QTUxOTg5OTdFMjIzOEI1NEM3Mjk4NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxHXmyP+DDn3mZUvCgkH2q22C
98bPbJal4x+R7yOvU/J+ZKOwnLmjfAnfd/EIzST3AqagAkPwFpfUURjjcLozk6Ao
sJzmjACppJZy+ty4ix7o96CPEcQciVnPKHvriFHeSwZlHDudoEW8pfY322/p5+9A
ZVZLHE8hA62FpzMMhN7DYOEnbgXIVb6lwmmr0tyekahx0zzHwIK6f3wUynkLfO/O
QcUinrjZIKt0w3OJNOaeRDKwish3hycuYwjVeg/F9CMUn6KEW0RGJCpy2XIlNbGj
jywduJO5EreCfQAoF/H0Hc3YoKsQtam1uqObCKR4hDfKgrxe2NIT7EJ+umoFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUKSDgvyi7D8RKUZiZfiI4tUxymFAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ2NzQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqv/DANBgkqhkiG9w0BAQsFAAOCAQEAcCIt
BmcOvDzpxqh4/XX5MpDlDL2t5pudrq+wFSszxtg8ZwZ3WH8sq5HoMrryF8iVUc5R
Yme3gxaKFwGYZIQgt7OZSqyyHdd6Pm1wrZXq4XMuinEITKYjgepm8k9uZY9XD+ON
uWFjeEnFeGQsLRtT/fC3id8NxvhwyEiXyqrnf1wOfm/7RO8mXFjWjR6OWaHiC1C3
qNjyqnjc/eY2NN2axsRJGs0t199FsiaeC3FzliCDNhuDVf9x3LLMdhH/YblKjc5t
9F83W3KzsCCx2InF9FaVt4M4swS4D49aQvPSnt+yrB0dti3sofTtHcXulRRBlVKn
mrupiIMhCEbL3oHnew==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:23 2026 by rpki-client