Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/8/326130363a34313a343030303a3a2f34302d3438203d3e20313939313038.roa
File:                     326130363a34313a343030303a3a2f34302d3438203d3e20313939313038.roa (raw, json)
Hash identifier:          esizgLU+wfJvLbcfHqZVfGRE1uAzElzgvMYBHuZMLeU=
Subject key identifier:   14:27:4C:8F:FA:C6:04:45:BA:F6:5A:BF:00:86:0F:07:86:6D:4D:05
Certificate issuer:       /CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
Certificate serial:       6585536B03C65CE4C9321718E838F9633F3E2D9D
Authority key identifier: BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34313a343030303a3a2f34302d3438203d3e20313939313038.roa
Signing time:             Tue 04 Nov 2025 22:35:23 +0000
ROA not before:           Tue 04 Nov 2025 22:30:23 +0000
ROA not after:            Tue 03 Nov 2026 22:35:23 +0000
asID:                     199108
IP address blocks:        2a06:41:4000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl
                          rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:85:53:6b:03:c6:5c:e4:c9:32:17:18:e8:38:f9:63:3f:3e:2d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
        Validity
            Not Before: Nov  4 22:30:23 2025 GMT
            Not After : Nov  3 22:35:23 2026 GMT
        Subject: CN=14274C8FFAC60445BAF65ABF00860F07866D4D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:67:d6:83:41:80:0e:21:78:2f:b8:43:f7:
                    1b:bd:bc:9f:b0:71:b3:d2:58:34:bc:9e:1f:09:d5:
                    80:21:f8:99:22:63:25:d5:5c:67:e5:5a:86:a1:87:
                    4f:a5:f2:b9:6d:31:34:7a:6d:56:49:08:f8:0a:e7:
                    21:fa:82:f9:02:df:5e:24:89:eb:41:e7:28:d6:2b:
                    fa:12:04:a1:1c:e6:1b:12:75:b5:4b:19:b9:7c:80:
                    18:1f:04:f3:fc:54:f2:83:f3:35:1e:eb:b2:1d:e1:
                    c8:bb:76:92:95:8d:f0:be:76:b0:a5:75:d7:d6:19:
                    89:10:28:c8:fe:44:ce:0b:ea:9a:92:68:3b:b5:64:
                    4b:68:1a:77:8f:9b:97:cf:25:dc:3a:3a:f8:0e:f7:
                    53:a9:87:80:54:3b:cc:7e:79:9b:58:32:d9:34:65:
                    07:6e:38:09:34:a3:86:0a:ca:3c:7d:72:07:5b:66:
                    67:19:8c:f1:9e:c7:b1:5c:11:bd:18:27:b6:fd:42:
                    31:1a:63:70:d0:6f:e8:57:a7:05:dd:6d:a3:e6:b0:
                    b1:14:c4:8d:c7:9c:e6:64:fc:8b:20:29:e9:97:5d:
                    76:dc:db:0f:e1:49:71:f8:da:ac:a2:bb:76:7a:67:
                    95:fd:a3:f6:43:6e:62:81:04:0e:85:b2:1c:33:0d:
                    36:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:27:4C:8F:FA:C6:04:45:BA:F6:5A:BF:00:86:0F:07:86:6D:4D:05
            X509v3 Authority Key Identifier:
                keyid:BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34313a343030303a3a2f34302d3438203d3e20313939313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:41:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:11:91:af:12:77:45:0e:bf:0b:fa:49:2f:1b:d8:2e:e0:aa:
         f1:b3:a7:0c:ac:d7:c0:ab:0f:01:e2:54:4c:2b:3f:d6:ad:9f:
         de:7d:be:8c:6d:10:2f:f7:e0:65:63:56:92:a1:da:c6:8a:c2:
         01:7f:13:2c:45:fc:54:cf:0c:8d:63:78:91:63:ec:0e:fd:a1:
         48:47:c2:07:9a:29:88:82:f1:61:60:01:4d:f3:64:4f:a7:8b:
         5b:42:b9:c0:22:25:54:63:11:42:2c:26:6c:23:5a:bc:7d:ec:
         b3:52:34:64:aa:86:44:0b:c9:70:6a:10:40:51:69:e2:ee:25:
         06:d3:32:e1:f9:59:23:fe:6f:3f:89:4d:40:0c:17:49:a3:b9:
         26:47:54:19:c0:68:ae:e2:63:08:78:86:5c:ca:ce:e2:47:d0:
         c4:40:4c:05:77:08:ed:36:12:ee:33:a3:5e:b5:ed:c2:d9:0c:
         a9:4e:52:e0:09:ff:b1:99:c6:79:48:5c:e4:bf:92:b9:47:f8:
         9e:50:fb:0c:30:6c:0f:3d:04:e4:b0:a5:cf:c4:90:86:fa:78:
         03:1f:12:b8:af:ac:11:ca:cc:87:d6:35:b0:d2:de:59:e7:13:
         5a:6d:a6:f3:c6:e6:a2:e8:bb:d6:03:c9:39:a2:72:c9:92:06:
         82:ee:c8:2d
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUZYVTawPGXOTJMhcY6Dj5Yz8+LZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI2ZWNhZjI5ZjMzZDk4N2ViYWRkY2ViMjllZGE3Njkx
YWE2NzA5ZjAeFw0yNTExMDQyMjMwMjNaFw0yNjExMDMyMjM1MjNaMDMxMTAvBgNV
BAMTKDE0Mjc0QzhGRkFDNjA0NDVCQUY2NUFCRjAwODYwRjA3ODY2RDREMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVU2fWg0GADiF4L7hD9xu9vJ+w
cbPSWDS8nh8J1YAh+JkiYyXVXGflWoahh0+l8rltMTR6bVZJCPgK5yH6gvkC314k
ietB5yjWK/oSBKEc5hsSdbVLGbl8gBgfBPP8VPKD8zUe67Id4ci7dpKVjfC+drCl
ddfWGYkQKMj+RM4L6pqSaDu1ZEtoGnePm5fPJdw6OvgO91Oph4BUO8x+eZtYMtk0
ZQduOAk0o4YKyjx9cgdbZmcZjPGex7FcEb0YJ7b9QjEaY3DQb+hXpwXdbaPmsLEU
xI3HnOZk/IsgKemXXXbc2w/hSXH42qyiu3Z6Z5X9o/ZDbmKBBA6FshwzDTZVAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUFCdMj/rGBEW69lq/AIYPB4ZtTQUwHwYDVR0j
BBgwFoAUu27K8p8z2YfrrdzrKe2naRqmcJ8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vYWthbmUubWFydS5jby5qcC9yZXBvLzEwNzNj
Ni84L0JCNkVDQUYyOUYzM0Q5ODdFQkFERENFQjI5RURBNzY5MUFBNjcwOUYuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC91MjdLOHA4ejJZZnJyZHpyS2UybmFScW1j
SjguY2VyMIGDBggrBgEFBQcBCwR3MHUwcwYIKwYBBQUHMAuGZ3JzeW5jOi8vYWth
bmUubWFydS5jby5qcC9yZXBvLzEwNzNjNi84LzMyNjEzMDM2M2EzNDMxM2EzNDMw
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzkzOTMxMzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoGAEFAMA0GCSqGSIb3DQEBCwUAA4IBAQAXEZGvEndFDr8L+kkvG9gu4Krx
s6cMrNfAqw8B4lRMKz/WrZ/efb6MbRAv9+BlY1aSodrGisIBfxMsRfxUzwyNY3iR
Y+wO/aFIR8IHmimIgvFhYAFN82RPp4tbQrnAIiVUYxFCLCZsI1q8feyzUjRkqoZE
C8lwahBAUWni7iUG0zLh+Vkj/m8/iU1ADBdJo7kmR1QZwGiu4mMIeIZcys7iR9DE
QEwFdwjtNhLuM6Nete3C2QypTlLgCf+xmcZ5SFzkv5K5R/ieUPsMMGwPPQTksKXP
xJCG+ngDHxK4r6wRysyH1jWw0t5Z5xNababzxuai6LvWA8k5onLJkgaC7sgt
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:42 2025 by rpki-client