
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/323430313a32303a3a2f33322d3430203d3e2034383432.roa
File: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (raw, json)
Hash identifier: r7XF1F6usoHLVxdY4PL0ijZQoAdAO6Q7O9MythfN5DU=
Subject key identifier: CB:93:A3:66:77:7D:7B:39:68:2F:12:3A:52:EA:C1:BF:3F:5D:98:2E
Certificate issuer: /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial: 32BDB7D7ACC02E9801B747AE5E075C7F1ADD1D19
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/323430313a32303a3a2f33322d3430203d3e2034383432.roa
Signing time: Wed 25 Feb 2026 13:28:50 +0000
ROA not before: Wed 25 Feb 2026 13:23:50 +0000
ROA not after: Wed 24 Feb 2027 13:28:50 +0000
asID: 4842
IP address blocks: 2401:20::/32 maxlen: 40
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 19:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:bd:b7:d7:ac:c0:2e:98:01:b7:47:ae:5e:07:5c:7f:1a:dd:1d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Validity
Not Before: Feb 25 13:23:50 2026 GMT
Not After : Feb 24 13:28:50 2027 GMT
Subject: CN=CB93A366777D7B39682F123A52EAC1BF3F5D982E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:9e:60:7a:5b:a1:c3:e0:4e:a7:7d:4b:42:
42:64:ab:87:15:7f:e1:3d:17:d7:86:82:7b:a5:3d:
b4:eb:d2:f4:dd:a2:53:8a:58:d8:f3:40:33:9c:35:
1c:29:36:95:56:f4:7e:1a:23:03:61:a9:c1:4f:b7:
c2:34:4b:98:45:87:da:90:db:31:31:42:62:f6:4f:
29:6d:78:f4:34:26:9d:c3:bb:c1:90:15:36:b6:cc:
2d:bc:4c:44:56:1e:d5:cc:69:27:b1:ba:d1:4e:6d:
b5:f5:b2:d4:e7:64:86:a9:64:28:ba:b7:cf:69:84:
fb:a3:03:eb:7d:8f:b0:90:82:5f:cf:d4:4e:4a:d4:
ce:9b:0f:64:7c:28:27:e8:12:34:ac:fa:49:4e:61:
38:bb:96:b2:9f:39:ec:4e:d0:06:7e:a8:1b:ae:df:
7a:bc:89:ce:88:b5:36:0c:c8:74:99:a0:62:65:af:
a6:66:3c:0a:59:e4:1b:a1:ba:b5:09:c1:3f:6f:8f:
cc:38:20:78:59:a8:9c:9f:ef:da:f5:4a:af:e7:58:
07:db:5c:c0:e9:70:8b:63:96:80:fb:35:17:2b:59:
7d:0c:ce:a4:52:b9:7a:e5:9d:41:b9:9a:c8:c9:c8:
d9:5b:4e:63:1f:bb:de:7b:89:42:c8:5b:c2:76:b4:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:93:A3:66:77:7D:7B:39:68:2F:12:3A:52:EA:C1:BF:3F:5D:98:2E
X509v3 Authority Key Identifier:
keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/323430313a32303a3a2f33322d3430203d3e2034383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:20::/32
Signature Algorithm: sha256WithRSAEncryption
aa:3c:d7:c2:41:bf:a1:b9:80:5b:4b:45:96:32:c5:11:16:ca:
7e:69:b1:4c:53:be:de:38:d7:ff:6b:29:76:59:a6:1c:c8:17:
af:e7:77:66:2d:69:20:8c:ef:10:86:38:9e:54:d6:f5:de:24:
fd:31:66:b6:64:62:e0:4b:80:39:01:9e:1a:d9:6e:3e:63:d3:
46:c9:d8:4e:73:c7:4d:6e:25:05:50:da:0e:3b:7e:24:6e:2c:
d2:71:29:b7:19:a5:6c:07:34:32:61:00:c0:0a:55:71:09:c3:
4c:85:6f:97:74:dc:28:a4:33:74:85:30:70:32:36:32:38:31:
5f:4d:8d:0c:4b:52:97:fb:d5:96:5e:e5:07:1c:23:b8:a9:41:
ac:8c:f6:d6:e3:f0:f3:3d:fe:fb:5f:3f:c2:0e:35:5d:a5:4e:
6d:36:8b:22:43:ad:c6:53:77:c3:b1:d2:12:59:f9:43:88:66:
bd:05:3f:45:02:e4:3a:a4:c6:08:53:ae:45:06:ce:01:a0:cd:
85:94:41:4d:62:3a:63:78:77:33:58:70:b8:69:e6:ab:1f:04:
6c:35:58:01:ee:6d:fe:ea:5d:a4:85:ae:41:4c:88:df:e8:54:
6e:23:07:42:37:a1:12:6c:c6:1b:91:7f:df:75:86:d8:26:24:
f8:31:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:23 2026 by rpki-client