Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/10/3139352e3234362e3139332e302f32342d3234203d3e20393435.roa
File:                     3139352e3234362e3139332e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          jsTf8D8yFHBS3GAf0QfoyLYBJV3quCvvYc3zarbIMGY=
Subject key identifier:   B7:10:CC:05:6C:8F:F4:10:42:A4:C6:80:29:11:DB:DB:B6:DF:95:53
Certificate issuer:       /CN=c5d9c68a36ae4eeafed3c1cb551ab4b493922316
Certificate serial:       3075263C9BD7D2988CFD1D82D9878606E6951BD8
Authority key identifier: C5:D9:C6:8A:36:AE:4E:EA:FE:D3:C1:CB:55:1A:B4:B4:93:92:23:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xdnGijauTur-08HLVRq0tJOSIxY.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/10/3139352e3234362e3139332e302f32342d3234203d3e20393435.roa
Signing time:             Tue 04 Nov 2025 22:35:21 +0000
ROA not before:           Tue 04 Nov 2025 22:30:21 +0000
ROA not after:            Tue 03 Nov 2026 22:35:21 +0000
asID:                     945
IP address blocks:        195.246.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/10/C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.crl
                          rsync://akane.maru.co.jp/repo/1073c6/10/C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xdnGijauTur-08HLVRq0tJOSIxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:75:26:3c:9b:d7:d2:98:8c:fd:1d:82:d9:87:86:06:e6:95:1b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5d9c68a36ae4eeafed3c1cb551ab4b493922316
        Validity
            Not Before: Nov  4 22:30:21 2025 GMT
            Not After : Nov  3 22:35:21 2026 GMT
        Subject: CN=B710CC056C8FF41042A4C6802911DBDBB6DF9553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:f9:b5:67:f4:5f:9c:be:ae:e7:03:52:74:
                    c6:6a:15:1f:0c:1b:1a:22:66:62:09:cf:b6:6f:c2:
                    20:69:12:19:46:a6:01:3b:e0:3c:8c:31:b0:dd:3b:
                    fd:4d:cb:32:d5:44:2e:8d:53:45:ff:32:11:2e:dc:
                    16:b0:46:d8:fd:32:9f:ba:24:3f:4d:1f:3d:13:20:
                    42:30:9e:df:93:c4:67:3e:ec:99:b6:c3:f7:d7:a5:
                    ef:e9:26:b9:59:4d:43:49:6b:1b:24:ce:a7:dd:0f:
                    d1:67:7b:3c:3c:5d:90:e1:29:11:f5:8d:62:d8:90:
                    4e:86:54:eb:bb:68:e0:a1:4d:bd:52:5e:26:d1:0b:
                    b3:08:2f:ca:10:52:0f:58:af:6e:5f:28:2e:c3:21:
                    83:e0:47:aa:64:b5:9e:4f:7f:2c:95:a8:07:4a:45:
                    03:6e:f3:40:15:a1:17:33:a9:4c:9d:69:34:44:85:
                    10:e4:f7:ba:59:20:10:67:16:aa:08:ae:49:92:cf:
                    ad:19:fa:22:af:3a:e4:2b:4b:f7:40:27:fe:fb:ba:
                    57:12:e2:0b:12:61:ce:a7:a6:0e:23:aa:f8:e4:6b:
                    77:9d:95:6b:64:87:45:6c:2f:20:2b:ff:d9:69:be:
                    cc:dc:89:cd:20:a6:d7:d6:18:3f:50:a9:e8:75:63:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:10:CC:05:6C:8F:F4:10:42:A4:C6:80:29:11:DB:DB:B6:DF:95:53
            X509v3 Authority Key Identifier:
                keyid:C5:D9:C6:8A:36:AE:4E:EA:FE:D3:C1:CB:55:1A:B4:B4:93:92:23:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/10/C5D9C68A36AE4EEAFED3C1CB551AB4B493922316.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdnGijauTur-08HLVRq0tJOSIxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/10/3139352e3234362e3139332e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.246.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:af:05:eb:29:7d:8b:cd:d1:2a:a1:7a:5d:21:73:f9:0a:
         39:6c:5f:68:d1:92:c5:27:3e:ce:e0:75:77:b6:85:70:bb:ab:
         83:4e:f9:bc:3b:d3:dd:80:41:d4:6d:86:d6:71:20:86:0c:27:
         8b:c3:eb:66:02:aa:99:c4:91:2d:74:a6:1f:63:61:15:02:71:
         b2:75:78:ab:29:24:79:21:67:54:fd:8f:45:b6:4f:a3:51:3b:
         c3:c2:6f:5c:60:19:78:09:a0:53:4a:64:ba:a2:11:9e:ab:84:
         fc:d7:08:b7:2d:88:b8:a4:2b:74:56:45:ab:33:60:b1:63:2a:
         4b:2b:69:ec:a6:db:8a:5d:ac:b3:b5:24:b0:bb:54:19:c7:75:
         f8:9e:73:b9:1b:fa:28:12:cd:99:9c:4f:18:be:3d:86:8f:de:
         39:87:8d:c1:05:36:3a:96:c2:86:42:fc:73:f6:97:2a:59:14:
         f1:65:77:17:25:59:2c:bc:5a:f9:04:63:06:1b:db:fb:61:58:
         bc:05:54:19:68:f6:b3:27:a4:d8:bc:f8:4a:7b:e2:f2:40:29:
         9c:0b:48:a0:db:9d:8a:76:2b:f0:aa:01:ed:8c:1b:ca:8a:fa:
         e6:af:c2:54:1e:4c:a2:45:b2:4f:74:14:12:6f:b2:80:90:6d:
         d8:8d:8f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:34 2025 by rpki-client