
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa
File: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (raw, json)
Hash identifier: IC14R/7PisX2xUgxvpoOXBZj7EziWG1xk34G0Uwi2U4=
Subject key identifier: F8:88:DC:F1:AF:1E:0D:9B:18:33:49:16:67:E2:0B:7D:F1:6D:62:99
Certificate issuer: /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial: 68308EEF30AFBF0CAA17B74AC7952B8B461FBFC6
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa
Signing time: Wed 25 Feb 2026 13:28:50 +0000
ROA not before: Wed 25 Feb 2026 13:23:50 +0000
ROA not after: Wed 24 Feb 2027 13:28:50 +0000
asID: 38008
IP address blocks: 103.150.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 19:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:30:8e:ef:30:af:bf:0c:aa:17:b7:4a:c7:95:2b:8b:46:1f:bf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Validity
Not Before: Feb 25 13:23:50 2026 GMT
Not After : Feb 24 13:28:50 2027 GMT
Subject: CN=F888DCF1AF1E0D9B1833491667E20B7DF16D6299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:0a:0a:5d:eb:54:bb:da:03:ea:1a:2c:5b:09:
75:64:bb:49:9e:a9:d0:c1:60:04:99:e2:aa:f4:0d:
9d:f1:89:40:26:43:d4:79:bb:0b:3a:bd:c5:9c:23:
a1:6a:8a:7f:c8:c7:fb:5f:93:53:66:aa:51:58:d9:
90:64:dd:ee:64:b3:62:b7:c8:a1:d4:21:9b:64:9c:
29:21:21:5a:f7:29:8c:08:9c:79:78:cb:8b:8d:14:
89:45:96:97:62:f3:d6:fc:df:be:88:a1:41:6f:d4:
c3:c4:6c:7e:46:c1:fd:24:ed:8a:d5:74:5e:ea:87:
c0:bd:45:e1:1f:f5:05:da:64:50:b8:ea:78:25:1c:
ac:56:83:03:28:92:73:3e:ad:e6:93:a9:af:e6:d5:
8f:1a:c3:05:09:d6:92:73:8d:08:c7:3f:a1:91:76:
db:2f:01:83:4b:76:44:8f:80:73:cb:4d:04:4c:3f:
58:7e:e6:d1:05:5f:2d:68:24:32:4c:de:e3:d4:1a:
57:53:23:2a:6e:7a:2c:d3:92:d2:f2:73:2b:8e:9b:
4b:c6:69:21:05:95:97:c2:c1:71:e1:39:bd:fb:28:
18:0d:12:08:8b:4e:b4:5f:41:eb:fe:57:2c:d1:0d:
e5:d6:3e:db:5f:9e:5e:bd:45:c7:d8:6f:34:cf:b3:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:DC:F1:AF:1E:0D:9B:18:33:49:16:67:E2:0B:7D:F1:6D:62:99
X509v3 Authority Key Identifier:
keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.172.0/23
Signature Algorithm: sha256WithRSAEncryption
be:17:8f:f3:66:af:1c:80:a7:d0:73:5b:d4:c7:8d:d8:c8:a7:
39:27:79:09:a2:9a:f9:a3:e2:05:54:de:c6:bd:a4:c3:63:ae:
6e:00:38:b7:c1:83:c3:7b:74:8b:30:a1:a8:88:ee:a5:8f:9e:
1e:b0:68:f8:df:fb:0b:05:99:e7:1c:db:58:1d:4b:8b:bf:55:
58:00:e9:ec:fb:28:41:64:88:d2:84:b3:74:61:df:7e:b6:ae:
b6:64:83:89:e0:86:74:a9:98:d3:e3:19:5d:5a:a0:2e:56:5f:
0a:1e:39:bd:07:4b:06:ac:0b:ab:83:6b:c0:42:4e:05:d6:e6:
d1:c4:60:c5:d6:e0:af:cf:07:c8:b7:d8:33:db:3e:2e:57:a3:
e7:29:9b:fe:bc:2a:91:59:b7:a4:12:99:c5:74:88:94:5d:5d:
26:06:37:e8:b1:86:5a:80:f6:e3:04:c6:a5:c1:0b:cc:97:24:
8b:36:e5:e6:a9:68:92:06:a4:bd:6d:69:42:5a:ef:4a:02:a9:
4f:a0:1b:c7:0f:71:25:c8:d4:5c:e4:53:12:9e:e3:64:12:00:
ac:9a:17:f0:f8:ef:e0:6e:56:40:9e:df:90:cd:09:fc:af:f9:
e3:90:f5:9b:61:d2:81:b0:3a:ef:a8:37:ad:e0:fb:a3:e2:81:
da:c3:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:44 2026 by rpki-client