Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353630303a3a2f34302d3438203d3e20323034343634.roa
File:                     326131343a373538313a353630303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          m03DZLUuQ6h8Es26aZ0+9f7AZvlofY5W0p/NC1AeEcY=
Subject key identifier:   A5:3A:AB:99:B0:63:1B:47:64:7F:71:93:6F:6D:A0:EF:38:52:8E:86
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       51B4D8883B56581623B6327EEFED4B4E3DA39392
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353630303a3a2f34302d3438203d3e20323034343634.roa
Signing time:             Sun 01 Nov 2026 03:44:39 +0000
ROA not before:           Sun 01 Nov 2026 03:39:39 +0000
ROA not after:            Sun 31 Oct 2027 03:44:39 +0000
asID:                     204464
IP address blocks:        2a14:7581:5600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b4:d8:88:3b:56:58:16:23:b6:32:7e:ef:ed:4b:4e:3d:a3:93:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Nov  1 03:39:39 2026 GMT
            Not After : Oct 31 03:44:39 2027 GMT
        Subject: CN=A53AAB99B0631B47647F71936F6DA0EF38528E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:05:08:88:84:a1:c9:9b:05:33:38:13:24:
                    3e:fb:33:a1:e7:8b:90:24:71:01:59:42:79:af:97:
                    16:4a:d8:78:79:2a:36:60:1f:2b:22:de:bc:d2:9a:
                    d9:01:53:ad:b3:9e:aa:8e:6e:1f:c3:6c:8b:f0:7c:
                    9e:c9:7d:18:84:68:46:1e:3b:84:23:b9:75:5a:01:
                    e1:f1:fc:41:25:c6:7a:e6:9f:f0:9f:8b:aa:cb:0c:
                    df:e1:27:f6:11:f4:54:c9:3b:f7:b2:78:ea:b7:03:
                    39:d5:7d:d2:20:4e:05:28:37:d3:fd:80:ac:87:3b:
                    1a:4e:ce:e7:f4:a3:b3:24:73:1c:f5:7f:fa:cf:b5:
                    e4:fe:d1:8b:0e:aa:fb:14:82:17:95:d7:da:b5:a2:
                    65:a0:a0:02:85:a0:ce:fd:3d:87:ee:f2:5f:57:b5:
                    be:19:8a:d3:25:ab:21:b6:3f:4a:a7:cf:bc:b7:d0:
                    a1:1f:75:5d:47:eb:9c:78:8b:66:a2:67:16:6f:95:
                    43:32:6c:e3:86:f1:a0:69:70:cb:02:fc:55:83:64:
                    65:7a:94:1c:f2:05:93:70:95:02:02:73:10:9b:42:
                    54:f2:63:93:e8:83:d7:15:eb:93:22:f9:b4:91:48:
                    bd:63:d6:53:e0:3d:d1:fe:10:b7:b1:fb:ec:40:d2:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3A:AB:99:B0:63:1B:47:64:7F:71:93:6F:6D:A0:EF:38:52:8E:86
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353630303a3a2f34302d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5600::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:d5:94:d9:01:a7:e3:4a:91:3f:b8:a7:b8:f7:30:44:4d:2a:
         0b:72:46:ca:9b:c1:80:c0:84:58:85:b1:d2:30:e0:a0:d0:0b:
         75:e4:e2:82:dd:d9:02:84:26:18:5d:9d:f6:73:1c:3b:ff:c8:
         ca:1c:b4:5b:ae:36:07:f9:eb:61:27:2c:12:91:6e:cb:7f:68:
         22:e5:b9:08:da:c6:99:e8:44:1b:77:2c:b2:c2:b5:14:91:b6:
         20:9b:72:d0:f6:44:65:a1:2d:51:a5:d4:6c:a6:22:cc:47:f8:
         ab:90:a1:b4:0a:f0:42:28:1f:ec:db:71:fb:71:00:df:6d:a0:
         ac:24:46:bd:d9:7f:de:a8:bd:c3:15:09:e4:7f:28:c4:0d:cc:
         9d:e9:8b:d1:fe:15:b0:64:2f:f2:0b:a6:57:ca:79:9b:1b:c6:
         3a:b1:9d:f5:31:e2:7d:94:55:04:60:e1:19:a4:ab:19:96:ee:
         a7:11:56:e0:56:b5:be:26:4d:5c:96:19:ea:99:c9:ee:59:32:
         3d:87:66:1b:bd:9c:c8:80:86:ee:4e:3e:00:17:29:17:01:a9:
         cf:fc:12:f9:e0:ee:5d:c4:61:a4:05:0b:f4:2c:cd:c0:25:3f:
         fc:21:73:24:8e:a9:7c:6a:fb:ff:61:3f:30:b0:21:70:6a:70:
         70:84:01:aa
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUUbTYiDtWWBYjtjJ+7+1LTj2jk5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3QkI4MjA0NDA4OTZENkZBMDAyM0EwNzkwQ0QxRDc4
RTk3RjdBRjAeFw0yNjExMDEwMzM5MzlaFw0yNzEwMzEwMzQ0MzlaMDMxMTAvBgNV
BAMTKEE1M0FBQjk5QjA2MzFCNDc2NDdGNzE5MzZGNkRBMEVGMzg1MjhFODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQgUIiIShyZsFMzgTJD77M6Hn
i5AkcQFZQnmvlxZK2Hh5KjZgHysi3rzSmtkBU62znqqObh/DbIvwfJ7JfRiEaEYe
O4QjuXVaAeHx/EElxnrmn/Cfi6rLDN/hJ/YR9FTJO/eyeOq3AznVfdIgTgUoN9P9
gKyHOxpOzuf0o7Mkcxz1f/rPteT+0YsOqvsUgheV19q1omWgoAKFoM79PYfu8l9X
tb4ZitMlqyG2P0qnz7y30KEfdV1H65x4i2aiZxZvlUMybOOG8aBpcMsC/FWDZGV6
lBzyBZNwlQICcxCbQlTyY5Pog9cV65Mi+bSRSL1j1lPgPdH+ELex++xA0nlJAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUpTqrmbBjG0dkf3GTb22g7zhSjoYwHwYDVR0j
BBgwFoAUkHu4IEQIltb6ACOgeQzR146X968wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS5zaHJkc2Vydi5jb20vcmVwby9NWU5P
Qy1ORVhUU0VSVi84LzkwN0JCODIwNDQwODk2RDZGQTAwMjNBMDc5MENEMUQ3OEU5
N0Y3QUYuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvOTA3QkI4MjA0NDA4OTZENkZB
MDAyM0EwNzkwQ0QxRDc4RTk3RjdBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLnNocmRzZXJ2LmNvbS9yZXBvL01ZTk9D
LU5FWFRTRVJWLzgvMzI2MTMxMzQzYTM3MzUzODMxM2EzNTM2MzAzMDNhM2EyZjM0
MzAyZDM0MzgyMDNkM2UyMDMyMzAzNDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUdYFWMA0G
CSqGSIb3DQEBCwUAA4IBAQAL1ZTZAafjSpE/uKe49zBETSoLckbKm8GAwIRYhbHS
MOCg0At15OKC3dkChCYYXZ32cxw7/8jKHLRbrjYH+ethJywSkW7Lf2gi5bkI2saZ
6EQbdyyywrUUkbYgm3LQ9kRloS1RpdRspiLMR/irkKG0CvBCKB/s23H7cQDfbaCs
JEa92X/eqL3DFQnkfyjEDcyd6YvR/hWwZC/yC6ZXynmbG8Y6sZ31MeJ9lFUEYOEZ
pKsZlu6nEVbgVrW+Jk1clhnqmcnuWTI9h2YbvZzIgIbuTj4AFykXAanP/BL54O5d
xGGkBQv0LM3AJT/8IXMkjql8avv/YT8wsCFwanBwhAGq
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:05 2026 by rpki-client