Route Origin Authorization

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa
File:                     3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (raw, json)
Hash identifier:          UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=
Subject key identifier:   59:3F:25:37:74:52:6D:A7:44:D6:3F:77:04:EA:BA:27:17:FD:A4:B4
Certificate issuer:       /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial:       630B2DC11DE02104D43349E6F6786DF5A1E9120D
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa
Signing time:             Wed 25 Feb 2026 13:28:50 +0000
ROA not before:           Wed 25 Feb 2026 13:23:50 +0000
ROA not after:            Wed 24 Feb 2027 13:28:50 +0000
asID:                     4842
IP address blocks:        103.150.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 15:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0b:2d:c1:1d:e0:21:04:d4:33:49:e6:f6:78:6d:f5:a1:e9:12:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
        Validity
            Not Before: Feb 25 13:23:50 2026 GMT
            Not After : Feb 24 13:28:50 2027 GMT
        Subject: CN=593F253774526DA744D63F7704EABA2717FDA4B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:3a:50:fe:6b:4d:45:2d:b4:94:e7:bf:e9:
                    a9:55:06:f9:28:68:33:e9:fb:ec:68:f0:a5:73:ae:
                    c3:f3:41:e2:d9:9f:b1:51:51:ab:7e:09:7d:7d:15:
                    d9:42:97:e2:0b:f5:27:1f:c7:5d:8e:5a:5a:1d:68:
                    3d:c3:62:45:f8:1a:7f:1a:1c:8a:e6:51:b9:cf:7e:
                    b6:f9:7d:cd:85:78:e7:7a:54:82:46:a5:a4:af:9a:
                    d8:a4:fe:cd:14:ab:0a:83:b0:f1:ee:98:8e:fb:df:
                    57:35:5c:7b:cb:24:ce:6d:92:72:7b:d7:18:17:98:
                    34:08:84:c7:e2:ad:96:af:8e:34:a0:59:24:8b:61:
                    65:85:71:5a:89:de:f4:23:5e:2d:16:67:4f:63:f6:
                    59:18:4a:6f:21:ed:b5:66:c9:16:6a:a2:0f:2d:d9:
                    3b:7a:23:74:a5:de:a8:69:c7:06:31:5d:8a:09:14:
                    59:cc:12:58:ba:32:70:43:e2:72:c5:56:88:26:eb:
                    e1:0d:5e:2d:0e:c1:f6:b1:c9:5f:47:d3:d2:1b:ae:
                    05:c7:94:69:a6:cb:ce:72:ed:57:6d:50:f5:1b:7f:
                    41:d2:0b:d0:02:f4:e3:91:f9:b1:e6:a6:5c:c2:40:
                    af:a5:e7:d9:4e:1f:7a:d7:e9:9c:ec:55:a5:ba:63:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3F:25:37:74:52:6D:A7:44:D6:3F:77:04:EA:BA:27:17:FD:A4:B4
            X509v3 Authority Key Identifier:
                keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:f5:aa:93:2c:f1:2b:49:38:d0:1f:38:0a:86:2d:27:1d:a3:
         21:3e:ce:b4:fb:9b:d3:3a:65:d6:3c:ff:e4:72:75:5b:a4:68:
         25:e2:6b:0a:fd:b0:7b:af:7d:a0:31:09:0b:24:76:b0:b9:6a:
         d7:fb:14:f5:02:84:b8:aa:35:3e:3d:86:5b:a7:ee:d5:dc:00:
         c9:ad:b9:90:f2:3a:44:44:4a:39:2f:e8:9a:04:82:ee:8b:30:
         9d:43:f6:61:85:02:73:ff:e1:3d:e1:85:9f:21:a9:12:50:2b:
         53:25:a4:ec:d7:dd:c0:2a:a4:21:02:45:6d:cd:a2:d4:ba:e4:
         7c:ca:25:47:0c:bd:c3:92:0d:b6:4d:87:b2:a0:f5:43:61:89:
         b9:b4:a8:2f:b9:b1:c0:80:ea:aa:c8:70:1b:45:21:89:f3:ce:
         bb:d5:57:1b:6a:6c:93:ba:ac:17:87:63:e8:79:81:63:03:ec:
         8d:25:dd:a7:e8:d6:c4:91:49:c1:80:40:29:f4:1b:9a:f8:c2:
         d8:93:a8:10:11:63:19:5f:0e:d2:d8:71:59:3f:f1:66:e0:95:
         11:c1:48:e9:5f:35:22:fb:28:8e:14:23:05:67:fb:11:c6:ee:
         d5:41:3b:6d:da:75:89:80:a5:7d:ab:6a:01:15:05:b0:ac:40:
         66:2f:e5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:19 2026 by rpki-client