This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/15/3133382e3235322e35312e302f32342d3234203d3e2039363633.roa
File:                     3133382e3235322e35312e302f32342d3234203d3e2039363633.roa (raw, json)
Hash identifier:          q6P8NOLawma3K3GTvyqaRlENrNkwK+X3EI+yxon3InQ=
Subject key identifier:   87:86:85:CD:9A:5E:42:A1:A4:C3:F3:20:BD:86:22:DC:80:50:CA:E9
Certificate issuer:       /CN=A91B82CE0000/serialNumber=24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50
Certificate serial:       5E0BA14AD4C12DCCE4FB40A7B34D94FC6EEA1B68
Authority key identifier: 24:B0:A5:26:F8:12:0A:0F:81:42:D2:BD:3B:46:44:C8:E1:BD:AD:50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JLClJvgSCg-BQtK9O0ZEyOG9rVA.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/15/3133382e3235322e35312e302f32342d3234203d3e2039363633.roa
Signing time:             Fri 14 Nov 2025 18:44:55 +0000
ROA not before:           Fri 14 Nov 2025 18:39:55 +0000
ROA not after:            Fri 13 Nov 2026 18:44:55 +0000
asID:                     9663
IP address blocks:        138.252.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/15/24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50.crl
                          rsync://akane.maru.co.jp/repo/1073c6/15/24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JLClJvgSCg-BQtK9O0ZEyOG9rVA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Nov 2025 01:13:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0b:a1:4a:d4:c1:2d:cc:e4:fb:40:a7:b3:4d:94:fc:6e:ea:1b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B82CE0000, serialNumber=24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50
        Validity
            Not Before: Nov 14 18:39:55 2025 GMT
            Not After : Nov 13 18:44:55 2026 GMT
        Subject: CN=878685CD9A5E42A1A4C3F320BD8622DC8050CAE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:b7:7c:9c:e3:b2:58:e9:c9:60:e6:b9:c0:
                    bb:d6:b9:61:e2:08:e2:e4:59:c7:ac:7c:6c:5c:ec:
                    2b:2e:10:e2:76:22:a7:df:53:9f:08:97:c7:09:00:
                    05:0e:d8:ed:34:ef:ad:54:16:a3:f9:11:e5:83:f1:
                    6d:cb:46:24:81:72:8d:31:e9:7d:27:b4:98:51:ad:
                    7a:cd:37:87:3f:d7:46:4b:c1:4f:75:ff:c8:bc:fa:
                    75:b5:85:48:33:47:b2:52:f8:4b:5c:50:59:7a:a2:
                    00:9a:5a:ed:cb:e9:a5:0c:01:31:bc:e6:39:1b:68:
                    1c:54:3d:75:bb:6c:b3:ba:f7:7e:ac:eb:c8:fa:6d:
                    35:78:df:8f:49:03:2e:c4:54:da:bf:3c:fc:af:a2:
                    df:05:23:7a:2f:56:f4:bb:98:cb:10:b2:5e:e5:c4:
                    b0:3b:6c:ae:6d:13:01:f2:df:2b:bd:ef:18:7d:0c:
                    7b:f8:1e:53:ca:f0:8e:7e:6f:20:5b:65:f8:c3:c7:
                    6e:fd:9a:4d:a5:06:a9:58:1a:46:b1:fa:ed:cd:9d:
                    4e:06:3b:0d:2a:5e:ff:95:ba:2c:3c:ca:a5:25:e6:
                    3e:39:a7:c0:48:f4:4b:13:35:80:55:e0:58:2e:b8:
                    c2:24:55:9e:59:6e:29:f3:8f:4e:bb:53:e2:a9:df:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:86:85:CD:9A:5E:42:A1:A4:C3:F3:20:BD:86:22:DC:80:50:CA:E9
            X509v3 Authority Key Identifier:
                keyid:24:B0:A5:26:F8:12:0A:0F:81:42:D2:BD:3B:46:44:C8:E1:BD:AD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/15/24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JLClJvgSCg-BQtK9O0ZEyOG9rVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/15/3133382e3235322e35312e302f32342d3234203d3e2039363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:f0:5e:02:d5:47:fc:35:4f:b5:a1:85:26:94:5f:d0:05:
         77:d2:9b:fe:62:3e:cd:8b:a3:e1:a3:f0:60:52:67:77:77:0e:
         88:88:a1:f2:09:e2:d2:d6:c6:42:b5:42:88:1e:b4:31:5c:8a:
         1b:6d:55:85:92:55:b5:00:9a:67:dc:9d:88:32:53:fa:ec:fa:
         d1:a1:0c:09:a0:50:af:c8:38:1a:61:48:1c:98:b8:23:a3:e5:
         3d:da:fb:de:c8:6b:70:4e:5d:5a:9b:84:c8:bf:12:3e:f0:ae:
         1c:2d:d8:7b:0a:01:51:5b:d0:e4:99:84:f6:34:9e:03:bd:d5:
         2b:bf:77:73:3f:6f:e0:c4:12:57:c1:ea:2c:9d:85:2b:8a:dd:
         ab:3c:d8:0a:5e:c6:60:4d:3b:99:25:f9:cc:41:8b:ef:e2:31:
         3c:0c:fb:10:7c:4d:90:ab:3b:aa:76:97:0a:ca:0c:6a:8f:8c:
         54:91:c5:f0:dd:5e:fe:81:30:39:91:bf:ba:32:c2:26:ad:93:
         6b:5b:f0:b9:7a:c7:01:a7:15:07:69:7d:6a:4a:72:df:76:3b:
         a4:b2:83:6a:59:91:33:8b:32:21:ea:41:b6:9e:4c:90:8b:96:
         36:59:24:e9:fa:0f:08:02:0f:25:fb:59:d6:b6:16:90:03:60:
         d0:48:72:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 15:40:27 2025 by rpki-client