Route Origin Authorization
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa
File: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (raw, json)
Hash identifier: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=
Subject key identifier: 8D:4C:41:64:C7:2D:97:70:7D:FE:21:E5:8A:21:22:CF:39:8F:28:9F
Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial: 075E08F8C35B2FC7EBFF4A0819FA92FA4A8A2460
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa
Signing time: Wed 25 Feb 2026 13:28:50 +0000
ROA not before: Wed 25 Feb 2026 13:23:50 +0000
ROA not after: Wed 24 Feb 2027 13:28:50 +0000
asID: 4842
IP address blocks: 2a13:1800:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5e:08:f8:c3:5b:2f:c7:eb:ff:4a:08:19:fa:92:fa:4a:8a:24:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Validity
Not Before: Feb 25 13:23:50 2026 GMT
Not After : Feb 24 13:28:50 2027 GMT
Subject: CN=8D4C4164C72D97707DFE21E58A2122CF398F289F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:ba:6c:d3:af:4e:4f:45:f2:a2:a0:28:38:
b7:ea:1e:69:23:c5:3d:33:64:da:05:a8:9e:e1:ff:
f6:c1:85:6f:c2:25:2e:5d:74:b4:9e:aa:2d:91:43:
f3:1d:ee:f9:26:fd:fb:15:b9:fa:34:d4:82:50:da:
f3:ca:c7:a7:62:00:2f:a2:ed:a7:92:35:16:c6:47:
82:63:bb:71:16:2f:e9:6d:74:ed:66:ab:ac:ea:d7:
d3:bf:9f:43:64:d4:01:dd:9c:69:39:e8:6e:70:94:
bd:fd:46:c8:8b:5c:19:8a:df:4a:4c:d7:43:9e:6b:
51:b1:62:6f:de:43:8c:5d:e8:0f:a4:6d:3a:7e:c6:
05:aa:c4:6d:52:90:c3:1f:11:0d:f7:aa:ee:07:30:
0e:b9:63:fa:4d:4a:82:96:1a:0d:01:9e:69:20:cc:
3d:00:fb:c8:7b:28:4f:27:b5:df:73:12:32:14:5a:
54:8c:14:c8:5d:25:69:af:5a:cd:18:96:24:f0:2d:
0a:ff:ff:3c:37:8a:39:f5:95:be:37:96:8f:da:49:
99:b9:6b:de:0d:6e:ea:10:20:df:25:d6:b5:e7:e7:
23:3c:38:8d:1d:b5:de:28:10:da:22:13:74:bd:45:
9d:fe:ff:06:d2:d3:01:3f:37:55:47:58:67:70:ad:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4C:41:64:C7:2D:97:70:7D:FE:21:E5:8A:21:22:CF:39:8F:28:9F
X509v3 Authority Key Identifier:
keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1800:10::/48
Signature Algorithm: sha256WithRSAEncryption
4f:5a:57:12:ba:7b:13:08:49:d9:3c:e0:34:da:a0:9c:79:cb:
df:19:0e:75:09:f6:57:32:8b:3d:44:b2:5b:8e:92:6a:39:8e:
ec:1b:e2:97:39:a8:78:97:d3:6e:99:93:fe:8c:8d:f8:14:a8:
b2:9e:77:1a:8f:9b:04:ed:ba:3b:4a:9a:b2:a2:f5:d1:3a:bc:
c6:87:16:90:e3:74:e0:78:57:dc:6f:a0:48:c1:42:24:e4:07:
a1:c5:8f:32:8d:7b:ed:d2:c9:46:36:18:81:07:3a:03:e5:ce:
59:3e:bf:31:01:30:36:3e:f2:48:67:92:99:26:70:3e:d2:42:
9c:bc:fb:e2:e9:1c:9d:b1:c8:ac:9e:42:60:ab:4c:c1:19:51:
cb:8c:bb:b3:dd:f4:bf:6c:60:47:16:46:9b:d0:ee:e2:3b:08:
49:4a:7b:7e:a0:62:04:90:cc:51:58:86:ee:6f:6a:28:e3:d5:
f3:e9:a0:6f:d0:9b:96:fe:dc:1f:3b:21:72:7b:c6:db:82:0a:
61:0e:82:9f:d0:60:58:19:09:65:7b:b3:9e:86:05:c1:89:8a:
27:f9:d9:e5:a2:ee:39:87:3b:ba:a4:e1:9f:d3:fd:bd:31:8d:
bb:29:e3:cf:9c:4c:b4:b2:10:af:46:4b:a7:f8:a0:b4:25:42:
4a:c0:88:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:33 2026 by rpki-client