Route Origin Authorization
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa
File: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (raw, json)
Hash identifier: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=
Subject key identifier: 9A:FE:7B:34:32:27:E0:50:68:C3:6B:21:91:1D:2F:2C:2D:88:F7:16
Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial: 011F39DCC9CE8A97382D2560FCE043CDDE5269D1
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa
Signing time: Wed 25 Feb 2026 13:28:49 +0000
ROA not before: Wed 25 Feb 2026 13:23:49 +0000
ROA not after: Wed 24 Feb 2027 13:28:49 +0000
asID: 4842
IP address blocks: 2a13:1801:180::/43 maxlen: 43
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1f:39:dc:c9:ce:8a:97:38:2d:25:60:fc:e0:43:cd:de:52:69:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Validity
Not Before: Feb 25 13:23:49 2026 GMT
Not After : Feb 24 13:28:49 2027 GMT
Subject: CN=9AFE7B343227E05068C36B21911D2F2C2D88F716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:11:f5:e8:91:cb:bb:44:fa:d5:52:e6:62:4c:
77:eb:12:2a:59:54:d0:77:e3:17:45:db:0b:71:e2:
94:0f:6a:34:1c:c3:1e:61:09:e0:2a:a8:d9:1d:ca:
db:37:e3:98:da:2c:27:28:9d:ec:b0:e3:d4:0d:f5:
89:b6:ce:27:2b:ef:6e:5b:32:f1:6a:99:c4:e4:5c:
15:40:60:00:47:b7:30:0f:0f:69:58:c8:cf:a7:d0:
4a:03:66:70:55:30:9c:39:b5:5b:be:10:66:aa:97:
9c:13:3b:3f:ca:56:03:4b:b5:ba:be:e7:85:7e:d3:
57:d1:f3:70:5a:82:29:b1:9e:cc:e6:c8:d7:ef:f6:
09:73:21:b6:38:04:f5:ec:ba:24:25:3a:bb:b8:bf:
64:ef:80:8a:4d:ba:b2:bf:3d:94:83:a2:53:23:b2:
ed:9f:c3:e0:24:1c:06:10:b8:4a:ca:fe:fd:e0:52:
c6:ba:86:81:3a:24:dc:29:47:d2:3f:2f:02:49:0e:
92:d3:41:f7:af:95:67:6f:67:db:49:91:99:56:7a:
87:ac:32:7a:2d:81:39:a3:c7:c0:38:1b:3f:55:e7:
a1:fe:85:2b:b9:66:64:b4:bf:b6:03:6f:51:aa:a5:
37:87:72:8b:6f:3d:c6:75:45:9d:b1:88:fb:b5:a3:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FE:7B:34:32:27:E0:50:68:C3:6B:21:91:1D:2F:2C:2D:88:F7:16
X509v3 Authority Key Identifier:
keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1801:180::/43
Signature Algorithm: sha256WithRSAEncryption
a9:6d:f1:10:4f:3a:f9:17:24:41:a5:29:49:00:98:ad:e3:b4:
6c:ea:c9:12:40:8c:28:f7:a9:dd:58:08:1a:0e:a2:6f:cd:6d:
6a:3b:8b:46:ed:40:3a:e3:d1:b1:cb:29:fc:fb:b7:aa:e5:a4:
e1:55:de:77:16:7e:4e:77:71:3b:40:c3:33:0a:57:d1:b6:d2:
e7:68:02:2d:56:07:09:63:fb:37:28:0c:0b:97:39:cd:cc:90:
9c:57:cd:7d:9d:00:e1:f1:db:f7:14:9f:6c:c8:5b:41:1a:c7:
25:0b:08:df:5b:fe:63:ed:c7:10:36:e8:ff:97:e6:68:cc:97:
a9:17:ec:6c:c3:2c:e2:1f:0c:3d:47:ad:ed:07:17:90:e2:97:
b8:8c:fe:54:25:e8:ab:1f:84:9a:91:13:38:9c:d4:63:ec:2c:
55:4d:8a:63:38:9c:72:2c:5c:6e:c5:df:5a:e7:93:86:af:8d:
d2:06:0f:35:bd:e2:8f:e0:77:e5:25:c2:7d:d4:f8:5d:f8:e3:
d5:ca:ea:cc:cb:a3:71:d4:92:f6:9b:40:72:f3:38:d8:92:09:
ce:77:5f:fb:87:10:ed:8c:43:6d:ac:52:8d:e1:ec:6d:ab:f2:
20:be:3a:80:2c:f5:46:c2:b2:42:7d:a5:8e:f1:5b:0c:6e:a0:
a2:ef:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:21 2026 by rpki-client