Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/8/326130363a34303a3a2f32392d3438203d3e20393435.roa
File:                     326130363a34303a3a2f32392d3438203d3e20393435.roa (raw, json)
Hash identifier:          5FG1/4XRTeyUAn42bMDhCgYkoWQPRayI9mx0RxFOxqc=
Subject key identifier:   E5:A2:78:86:5E:EB:6C:48:F6:D0:9C:C8:97:66:DD:A7:81:39:C8:05
Certificate issuer:       /CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
Certificate serial:       4D907544BE2171F497D0F852FF30133D9600AA29
Authority key identifier: BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34303a3a2f32392d3438203d3e20393435.roa
Signing time:             Tue 04 Nov 2025 22:35:24 +0000
ROA not before:           Tue 04 Nov 2025 22:30:24 +0000
ROA not after:            Tue 03 Nov 2026 22:35:24 +0000
asID:                     945
IP address blocks:        2a06:40::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl
                          rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:90:75:44:be:21:71:f4:97:d0:f8:52:ff:30:13:3d:96:00:aa:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
        Validity
            Not Before: Nov  4 22:30:24 2025 GMT
            Not After : Nov  3 22:35:24 2026 GMT
        Subject: CN=E5A278865EEB6C48F6D09CC89766DDA78139C805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:bb:9b:7a:9b:21:c6:b7:c2:0a:b8:fa:11:
                    74:55:cc:25:a6:af:91:8b:1a:d6:6b:9f:3b:64:91:
                    37:99:a6:e0:1a:28:56:7c:9b:09:48:77:29:cf:52:
                    4a:da:cc:5b:21:a7:94:c9:c4:91:3c:b4:3f:25:ba:
                    cd:54:9a:d3:e2:6c:8f:17:6c:70:79:1a:f1:fd:8b:
                    a0:b4:f2:83:79:ba:53:18:b9:8a:30:7d:ae:a3:ec:
                    4b:57:74:3c:15:82:7f:97:ae:8a:30:12:5f:d6:ba:
                    09:a0:3e:72:af:2b:3a:99:bd:e5:61:a9:77:7b:2c:
                    3e:cd:76:40:79:0e:e8:6a:5c:4a:2a:c8:2c:d7:40:
                    1d:ac:40:ab:ae:22:fc:b0:4b:a7:d3:23:4b:7a:c5:
                    45:b9:c4:87:67:c3:2a:3b:68:46:43:69:fa:5e:f7:
                    e1:f9:3d:ce:49:28:ad:d4:a0:3c:0e:99:a6:30:2d:
                    49:a1:9a:24:e2:6d:49:1f:34:a8:82:ef:b5:1f:fa:
                    de:01:3c:a0:bf:5d:98:ee:88:45:68:30:25:e1:d5:
                    8e:6a:87:a1:42:5f:5d:45:91:d7:87:66:7b:2d:0b:
                    08:df:e1:48:e2:98:8c:a6:ca:b6:53:2c:cc:78:88:
                    59:d7:42:e5:8e:50:ef:77:fa:8a:46:1e:64:ca:7d:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A2:78:86:5E:EB:6C:48:F6:D0:9C:C8:97:66:DD:A7:81:39:C8:05
            X509v3 Authority Key Identifier:
                keyid:BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34303a3a2f32392d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:40::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:0a:43:7e:be:69:37:80:06:0f:30:d0:e7:7c:1e:aa:1e:
         9c:5e:00:00:26:78:6a:88:64:bf:b7:6b:79:b4:6f:f9:d4:bf:
         fd:d4:5b:29:80:bd:be:32:81:33:fa:d4:5d:02:8d:57:2b:84:
         0c:71:44:ea:ec:d5:40:17:d6:f9:e0:27:ad:97:7f:70:16:2e:
         e1:e2:95:f6:5c:a2:2e:32:dd:b0:99:6d:6a:c1:d6:59:56:7a:
         a3:ed:9b:4d:dc:e0:28:f8:95:54:d3:9a:b8:83:02:59:32:4e:
         19:27:81:62:4e:01:35:29:2a:f5:6d:09:66:38:25:c7:9a:8f:
         df:d7:5f:c4:0c:07:7d:c1:65:c2:c0:2a:fc:ee:c6:b8:f6:75:
         0a:96:2f:e6:03:28:78:6c:1a:59:31:ad:28:fa:91:ed:0e:3c:
         72:55:00:f8:33:38:6f:06:d1:aa:00:30:59:bd:49:f7:60:41:
         0c:89:d1:aa:7d:30:cf:80:d5:02:a8:be:42:ea:3e:10:12:69:
         9d:60:20:90:7c:70:de:cd:e5:18:4b:81:8a:18:91:3c:0e:57:
         20:66:f4:d6:e9:55:fc:b0:02:1b:8d:a1:1c:28:c1:18:33:5e:
         60:d4:ee:61:5a:93:36:11:8f:ec:a4:ca:5e:cb:ef:ab:35:c7:
         1f:b7:b9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:26 2025 by rpki-client