Route Origin Authorization

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa
File:                     3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (raw, json)
Hash identifier:          khIuZjwZoSaiZsTYR9yOkhQqW1vTO+y7JNzYp+RM+Jo=
Subject key identifier:   A4:5F:F0:3E:01:5E:46:CE:F1:63:01:02:37:5D:D5:05:C4:B5:D4:6F
Certificate issuer:       /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial:       06945C54C12A2283FA16EB9F309A9008049D16A5
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa
Signing time:             Mon 06 May 2024 13:20:40 +0000
ROA not before:           Mon 06 May 2024 13:15:40 +0000
ROA not after:            Mon 05 May 2025 13:20:40 +0000
asID:                     4842
IP address blocks:        103.150.172.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:94:5c:54:c1:2a:22:83:fa:16:eb:9f:30:9a:90:08:04:9d:16:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
        Validity
            Not Before: May  6 13:15:40 2024 GMT
            Not After : May  5 13:20:40 2025 GMT
        Subject: CN=A45FF03E015E46CEF1630102375DD505C4B5D46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:37:2b:03:7f:f8:92:c1:87:69:b8:71:08:
                    06:7c:bd:3c:18:19:7c:7b:3e:39:9a:76:5b:c0:be:
                    90:a4:50:38:fc:b6:6b:ca:3f:ca:0b:f0:b2:1c:c2:
                    13:f5:c4:2c:71:43:28:c8:0f:c9:54:97:c3:a5:fe:
                    59:f7:5a:f1:37:3e:d3:df:20:42:00:c4:0e:62:59:
                    97:5f:0a:80:0c:35:fe:7a:da:e0:5a:09:20:d3:7f:
                    47:e2:ef:7b:79:2f:e5:3e:b2:3e:81:21:10:09:df:
                    b3:8c:21:1b:41:a7:7c:a7:87:cb:4a:14:ee:c3:db:
                    eb:a7:ed:0f:17:0c:34:06:74:db:78:8c:23:5f:b9:
                    2a:4e:23:56:20:c7:e8:3b:5d:35:d2:19:23:91:25:
                    90:48:20:b3:77:ef:fc:18:2d:5b:bd:ef:e5:ff:9b:
                    d5:8e:42:f0:b7:7a:27:bc:56:13:8a:d8:cb:ce:a8:
                    ad:bf:54:fc:df:4c:11:8c:7d:e2:40:a5:9b:6e:31:
                    bc:12:c3:a3:32:ad:22:81:f3:de:6d:e1:6d:89:d9:
                    21:3e:5d:8b:58:34:76:9e:7c:99:da:96:8f:01:1a:
                    ac:ff:ac:6f:bf:1e:90:a0:31:0a:45:c0:51:1c:c6:
                    09:6d:85:e3:0c:c1:77:96:34:66:bc:e9:82:b2:3a:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5F:F0:3E:01:5E:46:CE:F1:63:01:02:37:5D:D5:05:C4:B5:D4:6F
            X509v3 Authority Key Identifier:
                keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:14:d8:ef:e3:80:81:00:5e:bc:5c:d6:02:31:b0:f8:f2:c0:
         50:23:9f:ee:e0:38:d8:9f:75:d7:75:ec:b6:33:28:85:83:c2:
         d8:3d:1c:8b:8c:a0:15:59:c9:6c:bf:88:06:54:5b:c7:2d:d7:
         68:53:79:4e:cb:7f:7b:f7:62:fa:59:50:f6:3d:9c:a6:12:d7:
         d6:f5:17:87:fe:16:09:94:2b:16:43:f5:ea:99:ca:bd:41:a1:
         14:f9:f3:dc:c1:bc:23:21:90:4d:02:4d:93:e3:45:fc:2a:a6:
         25:a9:5e:cf:2d:1e:43:7c:61:12:dc:a1:3d:77:ee:65:d1:e0:
         ac:07:c8:de:29:ec:2a:29:3e:0e:12:99:2c:aa:57:9f:57:86:
         ed:14:82:20:74:f3:4b:b9:00:4a:9a:72:82:24:9f:97:58:70:
         7f:a0:b6:aa:18:d9:6f:78:ad:89:22:f8:52:30:a2:be:f8:25:
         84:32:62:18:09:9c:5d:25:22:f3:a2:01:52:db:cd:8e:8b:77:
         94:79:0d:f5:b4:af:a8:42:2c:89:b8:b9:6c:d1:b8:f3:dd:ea:
         bf:e6:80:fe:f8:d2:26:42:9b:7b:10:a6:93:da:f4:0a:8b:68:
         76:38:6f:7d:6f:4f:3c:a5:de:22:62:07:6a:b1:28:1c:77:eb:
         a0:94:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org