Route Origin Authorization

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa
File:                     323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa (raw, json)
Hash identifier:          O1Qc6NM/hedKx5n8P2TcJKymQoYIgoGcEleUexrHAa4=
Subject key identifier:   A5:84:74:FD:56:CF:CB:28:85:A5:D8:53:D7:31:3E:E8:B8:86:72:5B
Certificate issuer:       /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial:       2BEFBC99C59C77F95D603E29BE31FD395E832BF8
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa
Signing time:             Sun 01 Mar 2026 17:13:43 +0000
ROA not before:           Sun 01 Mar 2026 17:08:43 +0000
ROA not after:            Sun 28 Feb 2027 17:13:43 +0000
asID:                     4842
IP address blocks:        2401:20:1330::/44 maxlen: 46
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 15:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ef:bc:99:c5:9c:77:f9:5d:60:3e:29:be:31:fd:39:5e:83:2b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
        Validity
            Not Before: Mar  1 17:08:43 2026 GMT
            Not After : Feb 28 17:13:43 2027 GMT
        Subject: CN=A58474FD56CFCB2885A5D853D7313EE8B886725B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:0e:f0:ae:92:b0:66:bc:94:09:10:39:30:
                    bc:5c:9c:31:47:b7:f2:56:d6:97:fd:69:26:32:a5:
                    01:18:0a:96:ad:65:e6:80:d1:54:04:60:74:f4:c8:
                    d4:96:4b:2a:47:fd:8c:dd:b9:84:54:f8:24:c9:ed:
                    7c:df:af:57:f7:61:70:57:05:2c:9a:c7:1c:7a:89:
                    6a:15:ca:f9:0f:04:94:40:10:ba:65:73:56:6a:59:
                    d0:58:48:12:fb:92:a9:e6:db:3e:73:b0:d9:7f:c8:
                    70:2b:71:06:d9:65:25:d9:b2:7b:22:b9:fe:96:34:
                    87:40:24:6b:f6:72:e1:8c:5d:c2:26:59:b3:4b:a0:
                    12:cc:5e:b9:ea:d9:8e:5c:87:af:21:55:db:a7:f7:
                    bd:00:a3:6f:f1:67:f5:dc:8b:03:d1:7b:7e:2c:2e:
                    31:af:b4:85:39:a3:14:c1:bd:cc:19:16:e9:65:fe:
                    fe:fb:a6:d5:f2:94:33:9e:5f:0a:a4:57:f3:09:bd:
                    69:e5:da:54:71:e1:5e:19:eb:dd:9f:dc:da:9d:40:
                    0e:1f:75:a7:43:18:c5:27:fe:34:e4:d0:c2:8b:21:
                    56:db:f3:7f:ed:fb:78:04:bb:2c:ab:c3:ea:a6:75:
                    e5:c5:aa:50:d6:fe:39:85:a2:ba:8d:34:0f:38:9f:
                    04:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:84:74:FD:56:CF:CB:28:85:A5:D8:53:D7:31:3E:E8:B8:86:72:5B
            X509v3 Authority Key Identifier:
                keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:20:1330::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:43:96:64:24:7f:05:ff:81:ad:38:9d:a1:43:a9:30:e3:b9:
         53:23:9d:bb:82:08:16:e9:11:c4:e2:09:36:30:5b:56:09:35:
         30:ed:45:57:5f:4c:74:10:9c:66:bb:a4:9a:87:20:d6:ee:82:
         b2:68:49:41:21:5d:9d:00:9f:5e:6c:02:b3:50:cb:d4:6b:8b:
         08:17:84:e7:82:f3:50:f3:87:95:20:8b:42:b0:89:2e:24:bb:
         82:a4:ed:d0:4c:e1:05:e1:d5:cc:43:12:45:32:de:c9:05:e8:
         ef:68:e9:3c:0d:55:aa:04:3e:a0:2c:2e:b4:af:a8:80:ff:32:
         84:78:c3:88:7a:c9:4a:46:d1:f8:82:60:a8:99:85:0a:66:3d:
         ee:7e:6c:fa:49:81:ba:54:a5:f3:1b:5b:b6:1b:23:92:10:b5:
         49:a2:2d:1b:45:06:22:ec:bb:84:be:1b:db:b7:7c:95:7f:ed:
         4b:0d:9b:dc:0e:a0:97:25:bf:2c:6f:a6:30:74:9c:7c:53:96:
         e0:19:c7:0c:ce:12:a0:8e:b9:74:e9:17:ae:99:5a:db:8b:20:
         7c:10:b2:54:64:39:e4:de:f5:8e:f5:22:ef:81:45:5f:67:a8:
         55:23:05:37:2d:be:c5:bd:c0:b4:ac:bc:ac:95:42:06:3f:d2:
         2f:96:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:54 2026 by rpki-client