Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/14/323030313a6466353a663463303a3a2f34382d3438203d3e2037373139.roa
File:                     323030313a6466353a663463303a3a2f34382d3438203d3e2037373139.roa (raw, json)
Hash identifier:          qWiNlj/gp0Z/tS+oLEj7HAJnSgYk98Fgq9g+ij5eGyg=
Subject key identifier:   41:62:08:3C:8A:78:19:4E:53:06:D1:07:E7:08:43:7D:ED:71:11:12
Certificate issuer:       /CN=A91B82CE0000/serialNumber=A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9
Certificate serial:       28759E29B324747FCFFD88EBFD78B5EC469DE82D
Authority key identifier: A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/14/323030313a6466353a663463303a3a2f34382d3438203d3e2037373139.roa
Signing time:             Sat 13 Jun 2026 23:35:06 +0000
ROA not before:           Sat 13 Jun 2026 23:30:06 +0000
ROA not after:            Sat 12 Jun 2027 23:35:06 +0000
asID:                     7719
IP address blocks:        2001:df5:f4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.crl
                          rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 09:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:75:9e:29:b3:24:74:7f:cf:fd:88:eb:fd:78:b5:ec:46:9d:e8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B82CE0000, serialNumber=A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9
        Validity
            Not Before: Jun 13 23:30:06 2026 GMT
            Not After : Jun 12 23:35:06 2027 GMT
        Subject: CN=4162083C8A78194E5306D107E708437DED711112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:11:c4:9b:37:14:85:90:91:50:3c:e0:49:
                    ac:75:36:7c:6f:82:c8:3d:33:20:a5:58:3c:31:23:
                    70:f4:3a:65:57:c1:82:a5:a6:0c:e5:37:8f:53:0b:
                    f0:d8:ff:97:54:84:81:cd:ce:3d:65:91:64:33:e0:
                    8c:95:1e:25:b6:2d:bc:44:c6:e4:66:24:c8:0e:dc:
                    ad:6d:eb:0b:d6:9f:78:94:b2:3d:36:b1:a5:d5:a1:
                    2f:b0:72:45:7f:19:43:51:41:ac:8c:4c:7e:bc:19:
                    bf:95:4b:de:7f:f2:fa:0c:c0:2c:4a:d9:42:b2:72:
                    be:56:75:b1:04:8e:55:34:43:d1:71:c6:0d:60:93:
                    10:a0:ae:86:8f:b5:2c:fe:d2:a1:7f:a6:96:fd:88:
                    ae:2b:18:bf:a0:c2:75:6c:35:6d:f1:9f:91:d8:6b:
                    1c:48:98:4f:70:50:2c:92:92:38:cc:96:eb:b1:bf:
                    af:18:d3:b8:ea:74:a9:83:54:e0:22:cc:25:3e:e1:
                    7c:02:1d:4d:61:26:77:17:99:21:7e:f4:ea:04:25:
                    26:eb:03:b1:1f:a3:88:bf:7f:a5:23:cc:e2:fa:a3:
                    5c:41:eb:b9:18:8d:ae:d1:b9:e0:2e:7f:5b:98:6f:
                    8b:73:22:c0:07:be:a3:bd:54:85:28:ce:13:ba:5e:
                    5e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:62:08:3C:8A:78:19:4E:53:06:D1:07:E7:08:43:7D:ED:71:11:12
            X509v3 Authority Key Identifier:
                keyid:A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/14/323030313a6466353a663463303a3a2f34382d3438203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:0c:bd:8f:0b:f8:55:74:89:56:96:69:2f:4a:87:59:80:
         2a:af:70:1a:dd:32:ae:ee:49:04:fe:23:da:29:66:e3:67:3a:
         27:24:ab:c9:ad:21:b0:42:f3:44:b4:70:fc:ca:28:3b:11:5c:
         e9:fe:28:95:ea:c6:a8:b3:7b:5a:da:ab:43:2a:5d:44:9c:4b:
         71:5c:e0:83:71:f6:8f:4d:4a:7f:9a:f1:40:e9:f5:91:c7:a9:
         ae:c6:47:6b:18:0a:bd:3b:9d:bd:05:01:4e:2d:b3:ca:7d:1d:
         e7:d9:50:a6:d2:30:e7:a6:c3:b8:ca:12:47:6f:b6:ed:2d:67:
         bd:ee:21:71:7f:8f:19:5f:7e:7f:18:78:ae:45:16:7e:ff:45:
         90:40:a1:c3:ca:41:6f:11:b3:d8:a6:7b:72:b4:18:7a:77:58:
         78:59:05:6d:b8:cf:99:6d:8d:a9:23:94:09:79:b4:b4:d6:ef:
         73:88:df:77:98:a4:82:12:2b:d0:b5:9d:2d:48:c8:fc:92:1d:
         a4:8a:fa:4a:35:eb:b6:6d:e2:b2:53:c2:1a:83:0f:fb:2c:f6:
         34:1b:3b:c6:c9:5f:73:a8:94:ec:f8:2c:8f:d8:5e:c3:05:0a:
         7f:b7:97:bd:39:5c:80:57:af:9f:14:9b:f5:8c:da:f3:e9:5a:
         25:da:54:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:59 2026 by rpki-client