Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/14/323030313a6466353a663463303a3a2f34382d3438203d3e20393435.roa
File:                     323030313a6466353a663463303a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          Y6hB4uEeXbEfvd0dTuHDH5K/qQVKcNDmcI/k+rB4dOY=
Subject key identifier:   74:68:CB:C8:3B:74:A4:B8:96:23:B1:94:48:7D:A9:9F:C6:5D:8A:32
Certificate issuer:       /CN=A91B82CE0000/serialNumber=A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9
Certificate serial:       604B04383B5BACEDE399016BE76AF7FACAF8970B
Authority key identifier: A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/14/323030313a6466353a663463303a3a2f34382d3438203d3e20393435.roa
Signing time:             Tue 04 Nov 2025 22:35:23 +0000
ROA not before:           Tue 04 Nov 2025 22:30:23 +0000
ROA not after:            Tue 03 Nov 2026 22:35:23 +0000
asID:                     945
IP address blocks:        2001:df5:f4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.crl
                          rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 16:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4b:04:38:3b:5b:ac:ed:e3:99:01:6b:e7:6a:f7:fa:ca:f8:97:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B82CE0000, serialNumber=A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9
        Validity
            Not Before: Nov  4 22:30:23 2025 GMT
            Not After : Nov  3 22:35:23 2026 GMT
        Subject: CN=7468CBC83B74A4B89623B194487DA99FC65D8A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:16:79:46:27:a0:2f:da:a2:77:d3:d1:eb:
                    55:87:a7:d8:4d:45:b9:b9:ce:29:18:4e:15:7e:1b:
                    23:7b:2c:97:d9:4b:35:a1:6a:d1:f9:77:9f:71:ca:
                    d1:55:1a:2f:19:42:12:d1:cb:2c:2e:71:f4:c8:28:
                    e4:0a:24:e9:9a:7c:58:df:1f:f3:37:27:b5:61:b0:
                    49:30:08:87:82:50:b0:35:f8:ed:ce:c4:fe:26:96:
                    25:98:85:5e:58:01:61:d3:6a:08:44:28:b2:50:d3:
                    69:5c:c1:94:1a:23:15:1d:ea:80:90:1f:2b:22:a7:
                    43:da:e0:cb:d9:c5:3d:56:34:78:66:7c:17:e7:db:
                    40:69:26:1c:03:52:27:b8:51:46:f5:ff:6c:1e:ff:
                    df:fe:9a:d9:92:a3:4d:99:e6:99:68:9b:93:b6:88:
                    70:fa:fe:93:d1:c6:86:b5:f7:1e:d3:a6:bc:53:df:
                    99:1d:90:b1:cd:26:06:ab:0b:df:93:b7:c8:ff:1b:
                    60:15:6a:de:b2:81:04:b6:95:69:37:b1:28:f7:14:
                    ab:f6:5a:67:c7:9c:db:34:3f:30:ae:90:77:50:ee:
                    d1:d0:4f:30:09:4a:37:df:1b:1b:c4:75:ce:a2:8b:
                    5c:1f:c9:aa:15:e5:28:e5:d5:52:1e:1b:10:45:9f:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:68:CB:C8:3B:74:A4:B8:96:23:B1:94:48:7D:A9:9F:C6:5D:8A:32
            X509v3 Authority Key Identifier:
                keyid:A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/14/323030313a6466353a663463303a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:5d:2e:66:c5:6f:30:0e:34:43:5b:42:ea:e4:51:0f:a6:b1:
         bd:32:6b:4b:e8:b7:65:5f:69:a5:9c:d4:c6:04:61:15:95:76:
         5a:cd:cd:b2:8f:2f:6d:ba:93:5d:3a:09:0e:3b:2a:f8:5a:b9:
         fc:4a:1c:4c:cb:2f:e6:d1:01:10:7d:ad:fc:b6:16:c6:6b:e2:
         91:ef:92:b0:b7:23:a7:c1:70:d2:ef:5c:5a:b2:75:41:72:15:
         0c:10:a0:7c:f2:db:3b:9c:29:11:49:8d:25:5a:3f:a4:97:26:
         b4:85:b2:ec:93:fa:c0:61:0f:5b:18:92:3f:af:28:c6:11:89:
         8e:b7:df:aa:b8:90:a9:c4:9a:8a:ea:b0:e5:a6:37:f0:15:2d:
         f6:e8:5e:16:dd:6a:17:4a:34:a7:9a:be:0f:a8:35:16:60:e9:
         50:28:3b:66:91:cb:6e:63:5a:24:ef:79:7e:6b:c7:14:7d:ed:
         dd:6e:47:22:1d:01:60:53:f5:b4:78:06:e4:86:4a:cd:12:a6:
         6e:ef:a6:79:51:d1:f8:d4:de:04:2d:b2:79:5f:a7:14:f3:cb:
         1f:ea:0f:cd:33:a9:33:89:7c:d1:48:5f:8e:82:85:03:12:96:
         03:91:91:d4:65:fa:57:d8:b4:66:82:3c:2b:61:a5:2a:7e:00:
         26:b0:db:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:28:27 2025 by rpki-client