
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa
File: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (raw, json)
Hash identifier: UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=
Subject key identifier: 59:3F:25:37:74:52:6D:A7:44:D6:3F:77:04:EA:BA:27:17:FD:A4:B4
Certificate issuer: /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial: 630B2DC11DE02104D43349E6F6786DF5A1E9120D
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa
Signing time: Wed 25 Feb 2026 13:28:50 +0000
ROA not before: Wed 25 Feb 2026 13:23:50 +0000
ROA not after: Wed 24 Feb 2027 13:28:50 +0000
asID: 4842
IP address blocks: 103.150.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0b:2d:c1:1d:e0:21:04:d4:33:49:e6:f6:78:6d:f5:a1:e9:12:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Validity
Not Before: Feb 25 13:23:50 2026 GMT
Not After : Feb 24 13:28:50 2027 GMT
Subject: CN=593F253774526DA744D63F7704EABA2717FDA4B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:3a:50:fe:6b:4d:45:2d:b4:94:e7:bf:e9:
a9:55:06:f9:28:68:33:e9:fb:ec:68:f0:a5:73:ae:
c3:f3:41:e2:d9:9f:b1:51:51:ab:7e:09:7d:7d:15:
d9:42:97:e2:0b:f5:27:1f:c7:5d:8e:5a:5a:1d:68:
3d:c3:62:45:f8:1a:7f:1a:1c:8a:e6:51:b9:cf:7e:
b6:f9:7d:cd:85:78:e7:7a:54:82:46:a5:a4:af:9a:
d8:a4:fe:cd:14:ab:0a:83:b0:f1:ee:98:8e:fb:df:
57:35:5c:7b:cb:24:ce:6d:92:72:7b:d7:18:17:98:
34:08:84:c7:e2:ad:96:af:8e:34:a0:59:24:8b:61:
65:85:71:5a:89:de:f4:23:5e:2d:16:67:4f:63:f6:
59:18:4a:6f:21:ed:b5:66:c9:16:6a:a2:0f:2d:d9:
3b:7a:23:74:a5:de:a8:69:c7:06:31:5d:8a:09:14:
59:cc:12:58:ba:32:70:43:e2:72:c5:56:88:26:eb:
e1:0d:5e:2d:0e:c1:f6:b1:c9:5f:47:d3:d2:1b:ae:
05:c7:94:69:a6:cb:ce:72:ed:57:6d:50:f5:1b:7f:
41:d2:0b:d0:02:f4:e3:91:f9:b1:e6:a6:5c:c2:40:
af:a5:e7:d9:4e:1f:7a:d7:e9:9c:ec:55:a5:ba:63:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3F:25:37:74:52:6D:A7:44:D6:3F:77:04:EA:BA:27:17:FD:A4:B4
X509v3 Authority Key Identifier:
keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.172.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:f5:aa:93:2c:f1:2b:49:38:d0:1f:38:0a:86:2d:27:1d:a3:
21:3e:ce:b4:fb:9b:d3:3a:65:d6:3c:ff:e4:72:75:5b:a4:68:
25:e2:6b:0a:fd:b0:7b:af:7d:a0:31:09:0b:24:76:b0:b9:6a:
d7:fb:14:f5:02:84:b8:aa:35:3e:3d:86:5b:a7:ee:d5:dc:00:
c9:ad:b9:90:f2:3a:44:44:4a:39:2f:e8:9a:04:82:ee:8b:30:
9d:43:f6:61:85:02:73:ff:e1:3d:e1:85:9f:21:a9:12:50:2b:
53:25:a4:ec:d7:dd:c0:2a:a4:21:02:45:6d:cd:a2:d4:ba:e4:
7c:ca:25:47:0c:bd:c3:92:0d:b6:4d:87:b2:a0:f5:43:61:89:
b9:b4:a8:2f:b9:b1:c0:80:ea:aa:c8:70:1b:45:21:89:f3:ce:
bb:d5:57:1b:6a:6c:93:ba:ac:17:87:63:e8:79:81:63:03:ec:
8d:25:dd:a7:e8:d6:c4:91:49:c1:80:40:29:f4:1b:9a:f8:c2:
d8:93:a8:10:11:63:19:5f:0e:d2:d8:71:59:3f:f1:66:e0:95:
11:c1:48:e9:5f:35:22:fb:28:8e:14:23:05:67:fb:11:c6:ee:
d5:41:3b:6d:da:75:89:80:a5:7d:ab:6a:01:15:05:b0:ac:40:
66:2f:e5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:19 2026 by rpki-client