Route Origin Authorization

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/323430313a32303a323130303a3a2f34302d3436203d3e2034383432.roa
File:                     323430313a32303a323130303a3a2f34302d3436203d3e2034383432.roa (raw, json)
Hash identifier:          SEejvwTPwEWmlVU00XxArrAxuxhHMWNjBmmOq6g53WI=
Subject key identifier:   6E:8B:7A:2A:BD:49:1C:CF:5E:B2:29:8B:2E:2C:5D:CF:24:9C:46:7F
Certificate issuer:       /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial:       75FDC3422E490D983B9ABB02727922F21C3596A2
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/323430313a32303a323130303a3a2f34302d3436203d3e2034383432.roa
Signing time:             Sat 13 Jun 2026 17:10:05 +0000
ROA not before:           Sat 13 Jun 2026 17:05:05 +0000
ROA not after:            Sat 12 Jun 2027 17:10:05 +0000
asID:                     4842
IP address blocks:        2401:20:2100::/40 maxlen: 46
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fd:c3:42:2e:49:0d:98:3b:9a:bb:02:72:79:22:f2:1c:35:96:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
        Validity
            Not Before: Jun 13 17:05:05 2026 GMT
            Not After : Jun 12 17:10:05 2027 GMT
        Subject: CN=6E8B7A2ABD491CCF5EB2298B2E2C5DCF249C467F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a6:e1:ea:04:22:a4:95:5c:49:97:5d:ee:e0:
                    b4:c7:4b:97:88:76:f1:56:19:77:93:5d:92:de:c1:
                    16:e1:df:83:ca:22:79:75:b8:d3:4e:bb:8d:1c:5a:
                    66:84:2e:03:fb:cd:5a:a9:4d:fc:c0:db:6f:7a:46:
                    84:07:f9:62:16:71:0a:8d:5e:29:d6:0c:85:19:f1:
                    66:e2:66:e5:0c:47:bc:3e:40:a7:b9:c7:f1:cd:51:
                    ad:19:12:b8:d2:74:e3:d8:81:43:8b:69:a8:e5:31:
                    d5:ed:c1:3b:9e:4e:b7:58:e9:f6:6e:14:10:da:96:
                    3c:50:ff:e3:c8:25:65:79:c3:67:03:a3:0c:e4:8e:
                    c7:b1:ca:19:3f:9f:46:70:7b:18:95:14:ac:0a:17:
                    17:70:18:d6:eb:ad:47:d5:01:bb:8e:50:f7:91:9d:
                    f5:74:2e:fe:36:ee:4c:ab:5a:59:fd:87:65:43:71:
                    57:d5:fe:3a:e0:21:2e:4f:a9:e7:8a:34:d3:fd:18:
                    97:4d:86:af:3f:af:ca:83:e2:7e:47:85:52:28:69:
                    97:24:05:34:fa:1c:97:0d:64:4e:ed:b6:2f:b3:d2:
                    5b:46:cf:17:a7:49:91:67:14:c7:a6:aa:4c:50:4d:
                    41:96:92:ea:f7:6f:13:38:61:f6:8a:43:8a:30:61:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8B:7A:2A:BD:49:1C:CF:5E:B2:29:8B:2E:2C:5D:CF:24:9C:46:7F
            X509v3 Authority Key Identifier:
                keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/323430313a32303a323130303a3a2f34302d3436203d3e2034383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:20:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:65:d7:f0:24:36:a1:20:d2:4a:53:d6:72:a6:c8:16:95:9b:
         af:a1:c8:74:c5:1a:15:45:95:d9:38:83:86:44:dd:ab:55:1d:
         bc:89:7c:3e:31:17:42:4c:fe:4d:89:4d:6d:72:08:be:a3:85:
         1c:96:13:ca:18:a0:12:de:19:ee:ca:8c:c1:8b:23:02:df:b6:
         15:9f:65:eb:19:13:67:ed:bc:c9:0e:3d:d1:27:72:4e:8d:42:
         36:54:8d:c4:ee:99:a4:c0:f4:4f:b4:21:ca:56:66:ed:59:67:
         81:88:d1:21:6e:20:ac:54:7e:1a:c7:9c:77:4f:72:01:43:e8:
         27:20:47:d7:1a:ed:f0:08:96:ad:de:31:e7:20:98:8e:5c:45:
         68:c7:72:79:24:87:99:53:65:ba:f1:eb:43:07:47:30:e5:4a:
         77:fe:38:31:26:69:d4:59:06:19:7b:e2:1d:9d:56:ce:e2:cc:
         ae:32:f9:b1:1e:96:34:c1:53:79:24:e7:7c:54:99:ad:a2:f9:
         d3:32:b8:5d:00:ef:ff:93:53:35:77:fa:6d:3b:cf:d5:49:76:
         23:02:0e:8f:41:a7:33:e2:2a:1e:df:59:59:be:15:35:95:b5:
         82:90:18:10:1d:34:cd:96:12:92:89:cd:1c:70:78:5b:92:3e:
         f3:a0:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:54 2026 by rpki-client