Route Origin Authorization

$ rpki-client -vvvf rpki.blw.moe/repo/AS51087/1/326131343a373538303a663838383a3a2f34382d3438203d3e203531303837.roa
File:                     326131343a373538303a663838383a3a2f34382d3438203d3e203531303837.roa (raw, json)
Hash identifier:          ygXmXHv4/CwtDAHUvtZQtLiaVbwo6waeV1vjU3jPtF8=
Subject key identifier:   4D:B5:52:59:FA:91:67:39:5D:E0:02:FD:BE:1F:3C:57:46:95:E6:DC
Certificate issuer:       /CN=151A6EBC21209B19A26DCA901B8B90D4C3C2E210
Certificate serial:       0DA282DC3E4C43CBFF0203416556EEB9CBC014EA
Authority key identifier: 15:1A:6E:BC:21:20:9B:19:A2:6D:CA:90:1B:8B:90:D4:C3:C2:E2:10
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/151A6EBC21209B19A26DCA901B8B90D4C3C2E210.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/1/326131343a373538303a663838383a3a2f34382d3438203d3e203531303837.roa
Signing time:             Sat 08 Aug 2026 17:56:15 +0000
ROA not before:           Sat 08 Aug 2026 17:51:15 +0000
ROA not after:            Sat 07 Aug 2027 17:56:15 +0000
asID:                     51087
IP address blocks:        2a14:7580:f888::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/1/151A6EBC21209B19A26DCA901B8B90D4C3C2E210.crl
                          rsync://rpki.blw.moe/repo/AS51087/1/151A6EBC21209B19A26DCA901B8B90D4C3C2E210.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/151A6EBC21209B19A26DCA901B8B90D4C3C2E210.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a2:82:dc:3e:4c:43:cb:ff:02:03:41:65:56:ee:b9:cb:c0:14:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151A6EBC21209B19A26DCA901B8B90D4C3C2E210
        Validity
            Not Before: Aug  8 17:51:15 2026 GMT
            Not After : Aug  7 17:56:15 2027 GMT
        Subject: CN=4DB55259FA9167395DE002FDBE1F3C574695E6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:36:23:fa:6e:82:3a:d9:72:8d:b1:23:8a:
                    e3:06:01:22:a4:61:85:3d:c9:a9:66:bd:4d:7d:e5:
                    c2:bd:25:34:21:eb:bf:c8:db:6c:6a:5b:8e:f4:94:
                    19:22:be:d2:c1:6e:d6:ec:db:26:f4:2d:34:f6:55:
                    d0:3b:32:cf:35:9f:17:0e:d1:83:21:9d:0f:f5:e0:
                    1e:24:d6:97:83:08:ae:94:10:00:43:ad:42:9a:87:
                    86:b8:27:57:ee:ae:44:4a:7b:68:34:36:24:75:1d:
                    fc:94:69:84:e5:f3:4a:c7:63:e5:be:36:ee:ab:b1:
                    b1:a2:fb:34:5f:0f:fe:f7:e9:24:fa:14:29:aa:6c:
                    6b:a6:f7:5a:a3:84:57:31:40:94:8e:16:9d:26:a2:
                    36:0c:d2:e1:16:a0:7b:43:0d:b0:a3:83:ad:2a:92:
                    7c:f4:9b:ef:68:f8:d9:1a:43:13:73:e9:6f:52:82:
                    ce:af:4f:1b:26:1e:d7:9c:af:62:e7:89:8e:d4:73:
                    86:0f:2b:55:59:7e:fc:26:d7:dd:a1:cc:bf:f7:c0:
                    ea:a1:82:b8:0a:32:15:92:82:e4:72:ff:d6:d1:78:
                    59:c9:59:d5:eb:f5:f1:68:f6:3b:b3:6e:c0:13:b1:
                    1f:3d:04:8e:1a:95:8b:3c:ea:8a:1c:02:13:f1:45:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B5:52:59:FA:91:67:39:5D:E0:02:FD:BE:1F:3C:57:46:95:E6:DC
            X509v3 Authority Key Identifier:
                keyid:15:1A:6E:BC:21:20:9B:19:A2:6D:CA:90:1B:8B:90:D4:C3:C2:E2:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/1/151A6EBC21209B19A26DCA901B8B90D4C3C2E210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/151A6EBC21209B19A26DCA901B8B90D4C3C2E210.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/1/326131343a373538303a663838383a3a2f34382d3438203d3e203531303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:f888::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:8f:fa:db:93:c8:0d:e4:5b:73:48:af:00:d4:93:cf:c4:ec:
         1e:75:67:eb:d3:7f:88:86:95:08:6a:b3:cf:02:78:bd:08:c8:
         dd:dc:ec:e2:1a:fa:5d:3f:a0:47:04:a2:2b:10:80:17:a1:6f:
         1f:1f:87:fe:8f:8a:95:78:4b:f9:26:b9:17:6d:1a:82:37:98:
         b5:4a:1a:96:4f:9e:5b:d4:5c:3c:f5:1e:9b:da:f0:ef:00:01:
         f6:39:0a:78:4a:2f:33:e1:d0:ef:83:ae:9c:a9:6b:36:95:ba:
         9f:84:ca:cd:42:9d:83:e0:c0:8c:d8:41:71:8b:dd:07:cf:a4:
         e9:36:7b:d3:88:d3:a3:06:84:cd:6f:48:a1:cb:24:47:26:16:
         4d:36:5d:02:c5:2c:c6:3f:ff:fa:5f:18:9b:f3:ba:aa:29:9a:
         8f:e0:cd:22:02:73:8d:32:1d:cb:68:d8:8a:e0:94:e4:4b:31:
         d6:de:ce:83:a9:df:ab:a9:fb:e1:a6:c2:3f:07:30:8f:69:7f:
         29:c2:84:d8:ea:41:1e:31:c7:ac:cc:8e:01:8c:b6:7d:80:19:
         c3:06:e8:ec:36:97:a8:10:c9:5a:62:56:da:14:3a:cf:48:60:
         cf:23:cb:2c:4a:c4:86:2e:80:99:6e:36:40:18:fb:e8:ba:a2:
         f6:ab:7b:32
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUDaKC3D5MQ8v/AgNBZVbuucvAFOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUxQTZFQkMyMTIwOUIxOUEyNkRDQTkwMUI4QjkwRDRD
M0MyRTIxMDAeFw0yNjA4MDgxNzUxMTVaFw0yNzA4MDcxNzU2MTVaMDMxMTAvBgNV
BAMTKDREQjU1MjU5RkE5MTY3Mzk1REUwMDJGREJFMUYzQzU3NDY5NUU2REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqTYj+m6COtlyjbEjiuMGASKk
YYU9yalmvU195cK9JTQh67/I22xqW470lBkivtLBbtbs2yb0LTT2VdA7Ms81nxcO
0YMhnQ/14B4k1peDCK6UEABDrUKah4a4J1furkRKe2g0NiR1HfyUaYTl80rHY+W+
Nu6rsbGi+zRfD/736ST6FCmqbGum91qjhFcxQJSOFp0mojYM0uEWoHtDDbCjg60q
knz0m+9o+NkaQxNz6W9Sgs6vTxsmHtecr2LniY7Uc4YPK1VZfvwm192hzL/3wOqh
grgKMhWSguRy/9bReFnJWdXr9fFo9juzbsATsR89BI4alYs86oocAhPxRS0pAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUTbVSWfqRZzld4AL9vh88V0aV5twwHwYDVR0j
BBgwFoAUFRpuvCEgmxmibcqQG4uQ1MPC4hAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5ibHcubW9lL3JlcG8vQVM1MTA4Ny8x
LzE1MUE2RUJDMjEyMDlCMTlBMjZEQ0E5MDFCOEI5MEQ0QzNDMkUyMTAuY3JsMIGe
BggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMucGFh
cy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIw
NzktMzA5ZWQ5N2YzODI0LzAvMTUxQTZFQkMyMTIwOUIxOUEyNkRDQTkwMUI4Qjkw
RDRDM0MyRTIxMC5jZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5
bmM6Ly9ycGtpLmJsdy5tb2UvcmVwby9BUzUxMDg3LzEvMzI2MTMxMzQzYTM3MzUz
ODMwM2E2NjM4MzgzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzEzMDM4Mzcu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqFHWA+IgwDQYJKoZIhvcNAQELBQADggEBABaP+tuTyA3kW3NI
rwDUk8/E7B51Z+vTf4iGlQhqs88CeL0IyN3c7OIa+l0/oEcEoisQgBehbx8fh/6P
ipV4S/kmuRdtGoI3mLVKGpZPnlvUXDz1Hpva8O8AAfY5CnhKLzPh0O+DrpypazaV
up+Eys1CnYPgwIzYQXGL3QfPpOk2e9OI06MGhM1vSKHLJEcmFk02XQLFLMY///pf
GJvzuqopmo/gzSICc40yHcto2IrglORLMdbezoOp36up++Gmwj8HMI9pfynChNjq
QR4xx6zMjgGMtn2AGcMG6Ow2l6gQyVpiVtoUOs9IYM8jyyxKxIYugJluNkAY++i6
ovarezI=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:10 2026 by rpki-client