Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS149513.roa
File:                     AS149513.roa (raw, json)
Hash identifier:          qGtImQAUqCqV1gaigCdw3+1ET9BOaJvm0G13otRs7GU=
Subject key identifier:   C4:70:E2:D2:1D:80:51:A0:D4:6C:63:2E:15:BF:A3:FF:11:DB:4E:6E
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6D0DAA59A102FEDDB56617F1BA5662DADDE30EAA
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS149513.roa
Signing time:             Wed 21 Oct 2026 07:43:08 +0000
ROA not before:           Wed 21 Oct 2026 07:38:08 +0000
ROA not after:            Wed 20 Oct 2027 07:43:08 +0000
asID:                     149513
IP address blocks:        13.141.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Nov 2026 22:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0d:aa:59:a1:02:fe:dd:b5:66:17:f1:ba:56:62:da:dd:e3:0e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 21 07:38:08 2026 GMT
            Not After : Oct 20 07:43:08 2027 GMT
        Subject: CN=C470E2D21D8051A0D46C632E15BFA3FF11DB4E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:ee:ae:fb:6b:41:77:5a:97:06:b3:59:00:
                    e2:ae:31:dd:59:dd:a7:63:f9:30:b9:3e:5a:78:84:
                    a2:26:fe:f2:4f:b0:81:54:c5:03:c6:0d:bc:78:bd:
                    4a:90:b9:09:6a:68:0a:65:9b:6d:71:5a:a2:49:1e:
                    95:1f:9f:bc:20:b3:35:8a:9a:15:4e:03:c0:c3:20:
                    d7:dc:d4:25:ec:83:b8:ba:7b:1a:23:af:ca:4b:69:
                    60:1b:8f:78:ee:05:b8:0e:15:2f:b4:e3:62:09:d9:
                    79:57:81:7b:54:61:6f:ef:20:94:e5:02:e8:ec:d3:
                    c8:72:bc:6e:6c:6e:3a:b4:af:be:60:5e:62:e9:85:
                    a5:d3:3c:1d:8e:8d:44:c0:97:47:4f:7e:27:5a:7c:
                    e0:92:c8:ca:0a:9b:70:20:01:d1:2c:df:a2:02:d0:
                    a0:ff:1a:a1:bb:15:a6:38:7d:2e:25:08:be:70:16:
                    fa:85:d2:c1:e8:97:4f:70:9b:68:9b:3f:a6:9a:a5:
                    a0:fc:49:89:0e:b2:ca:5d:2b:20:6b:25:ef:65:4c:
                    2a:fa:a0:ee:d1:19:aa:c0:b4:e3:16:91:9c:e9:12:
                    ca:3f:03:0a:6f:48:e5:1c:57:34:d7:30:9d:f2:68:
                    80:17:60:b8:62:66:d5:8e:59:b4:b9:a3:5e:c3:a3:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:70:E2:D2:1D:80:51:A0:D4:6C:63:2E:15:BF:A3:FF:11:DB:4E:6E
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS149513.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:6f:53:c5:15:5a:39:16:5e:0d:22:92:44:5b:43:81:f2:29:
         1c:be:fb:b7:7a:7e:2b:13:e8:80:79:68:47:3f:99:4a:fa:5c:
         b8:50:90:ba:bf:9d:05:56:f3:40:6d:71:09:15:f4:b1:59:2e:
         1c:5f:dd:ef:e1:89:3b:9e:78:0a:55:f8:10:6d:57:99:27:97:
         44:cf:94:34:7b:9f:16:ab:6c:f5:cf:ae:14:a0:a9:9f:2c:b9:
         fc:15:33:29:cd:74:fc:f4:e1:ad:02:b5:4b:0d:76:df:ac:da:
         c8:5c:28:66:46:0c:26:19:ea:81:79:16:ab:5e:ac:89:09:60:
         ae:7e:0c:17:79:73:de:fd:b8:36:6c:31:99:a3:e3:84:3e:64:
         81:e6:ba:49:5b:f0:ca:dd:fa:39:0b:ac:8a:18:8e:02:20:e5:
         29:91:d1:22:2c:6c:3a:69:c6:1a:db:64:3e:e3:66:48:57:0c:
         9e:48:0a:be:3c:d3:5d:4a:45:62:f9:0e:a2:41:22:4b:84:46:
         8f:04:1f:42:ba:77:38:86:86:82:de:db:2e:4e:3e:22:4c:1b:
         70:68:2d:73:6b:13:84:7b:31:7b:c6:dc:cd:b0:7c:2e:0b:d8:
         82:69:e9:cb:11:47:02:91:fe:93:c0:c9:46:0f:22:ba:ed:0f:
         0e:91:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:55:36 2026 by rpki-client