Route Origin Authorization

$ rpki-client -vvvf akane.maru.co.jp/repo/1073c6/8/326130363a34313a383030303a3a2f34302d3438203d3e20323134363735.roa
File:                     326130363a34313a383030303a3a2f34302d3438203d3e20323134363735.roa (raw, json)
Hash identifier:          6LnK53EfcODjGNc6QOxd5HgXca2YPWfnK/GjpXnnS6c=
Subject key identifier:   75:0B:73:B7:79:7F:4C:2D:73:39:75:33:17:4C:62:E7:1C:67:15:F5
Certificate issuer:       /CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
Certificate serial:       43042D40F1F9B4E06969295E57285077E5E82BBD
Authority key identifier: BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34313a383030303a3a2f34302d3438203d3e20323134363735.roa
Signing time:             Fri 16 Oct 2026 18:50:10 +0000
ROA not before:           Fri 16 Oct 2026 18:45:10 +0000
ROA not after:            Fri 15 Oct 2027 18:50:10 +0000
asID:                     214675
IP address blocks:        2a06:41:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl
                          rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:04:2d:40:f1:f9:b4:e0:69:69:29:5e:57:28:50:77:e5:e8:2b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
        Validity
            Not Before: Oct 16 18:45:10 2026 GMT
            Not After : Oct 15 18:50:10 2027 GMT
        Subject: CN=750B73B7797F4C2D73397533174C62E71C6715F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:a0:a0:e7:c2:ee:c8:f1:3c:1e:50:d3:92:
                    0b:13:1e:6a:e1:75:1b:fe:39:67:e4:64:a0:64:93:
                    9d:26:82:0e:0d:c3:93:f1:4d:63:99:9f:2e:ff:1f:
                    40:68:3e:53:26:ce:fa:44:16:c4:57:72:e4:1a:b0:
                    30:f6:69:4a:aa:67:e5:00:49:47:50:91:8e:20:d9:
                    38:91:9c:69:8d:9c:f2:aa:7e:7f:bb:0b:26:cd:49:
                    4b:5d:dd:a9:51:f9:64:27:0c:a7:6c:4f:2c:dd:e9:
                    73:e3:e5:97:b3:3a:47:da:e9:02:ed:9b:e9:88:8d:
                    7f:0f:2e:0a:5f:8e:4c:05:0d:8f:c3:45:32:bc:0b:
                    fa:a0:8f:b1:41:ec:21:e6:72:a2:97:9b:49:8a:c3:
                    13:92:27:f1:62:a3:42:c5:14:ac:72:ac:9e:b0:de:
                    c9:84:47:1c:bc:a4:a2:dd:3a:87:31:b0:5a:78:c3:
                    7a:10:7e:b6:f2:69:93:6c:63:5b:2e:1c:82:0d:5c:
                    c8:0e:8e:fd:e2:45:40:e2:62:cf:11:a2:ca:05:a4:
                    22:1e:82:e1:c4:3f:08:82:8a:48:e0:c5:1e:07:30:
                    a1:df:b1:7b:d8:2e:f5:5f:6b:9d:66:33:85:22:3f:
                    f5:d7:06:4c:85:6c:17:86:1a:ab:8d:e4:c0:c4:f3:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0B:73:B7:79:7F:4C:2D:73:39:75:33:17:4C:62:E7:1C:67:15:F5
            X509v3 Authority Key Identifier:
                keyid:BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34313a383030303a3a2f34302d3438203d3e20323134363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:41:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:f2:e6:f0:0b:01:51:ea:8e:18:61:2f:64:fc:4f:a7:92:
         58:f8:03:ca:0e:45:7e:2c:ca:02:fd:df:0d:f5:f7:d6:60:a8:
         d4:2b:bc:14:85:74:46:8e:2f:41:5a:b3:21:a5:fe:34:f2:8f:
         8c:f0:97:c8:dd:e3:4a:28:75:07:d3:8d:c2:ba:3b:4a:19:78:
         fc:f5:be:6f:c2:6f:60:f8:94:b1:a8:cd:b0:cb:9d:f8:09:c2:
         ac:d4:83:99:53:a6:60:30:8c:6b:73:8f:18:3f:ec:24:24:80:
         39:7f:9b:b8:89:19:96:32:a2:5b:8a:8a:ef:16:df:46:a5:de:
         75:37:03:c5:3c:28:f0:a3:eb:0c:d3:65:85:ff:c4:67:11:a3:
         4e:79:d5:23:8b:03:d8:78:29:73:76:1c:2e:0e:4d:d4:6e:5e:
         ad:15:26:eb:5f:e6:9c:39:a4:87:61:65:be:0b:c6:bf:4f:11:
         75:89:f9:8d:74:a1:6b:e7:01:f8:08:89:dc:3b:01:43:a7:04:
         09:58:26:e7:12:9a:4a:93:d6:83:ea:87:2b:e9:f3:d0:2a:d3:
         51:91:a7:78:69:e3:e8:4c:74:38:21:96:8e:ec:8c:68:01:1a:
         36:68:36:dc:1f:a7:fe:ff:62:cd:53:b3:50:43:63:e3:8a:c9:
         bd:c3:4e:81
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUQwQtQPH5tOBpaSleVyhQd+XoK70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI2ZWNhZjI5ZjMzZDk4N2ViYWRkY2ViMjllZGE3Njkx
YWE2NzA5ZjAeFw0yNjEwMTYxODQ1MTBaFw0yNzEwMTUxODUwMTBaMDMxMTAvBgNV
BAMTKDc1MEI3M0I3Nzk3RjRDMkQ3MzM5NzUzMzE3NEM2MkU3MUM2NzE1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JqCg58LuyPE8HlDTkgsTHmrh
dRv+OWfkZKBkk50mgg4Nw5PxTWOZny7/H0BoPlMmzvpEFsRXcuQasDD2aUqqZ+UA
SUdQkY4g2TiRnGmNnPKqfn+7CybNSUtd3alR+WQnDKdsTyzd6XPj5ZezOkfa6QLt
m+mIjX8PLgpfjkwFDY/DRTK8C/qgj7FB7CHmcqKXm0mKwxOSJ/Fio0LFFKxyrJ6w
3smERxy8pKLdOocxsFp4w3oQfrbyaZNsY1suHIINXMgOjv3iRUDiYs8RosoFpCIe
guHEPwiCikjgxR4HMKHfsXvYLvVfa51mM4UiP/XXBkyFbBeGGquN5MDE8wphAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUdQtzt3l/TC1zOXUzF0xi5xxnFfUwHwYDVR0j
BBgwFoAUu27K8p8z2YfrrdzrKe2naRqmcJ8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vYWthbmUubWFydS5jby5qcC9yZXBvLzEwNzNj
Ni84L0JCNkVDQUYyOUYzM0Q5ODdFQkFERENFQjI5RURBNzY5MUFBNjcwOUYuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC91MjdLOHA4ejJZZnJyZHpyS2UybmFScW1j
SjguY2VyMIGDBggrBgEFBQcBCwR3MHUwcwYIKwYBBQUHMAuGZ3JzeW5jOi8vYWth
bmUubWFydS5jby5qcC9yZXBvLzEwNzNjNi84LzMyNjEzMDM2M2EzNDMxM2EzODMw
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDM2MzczNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoGAEGAMA0GCSqGSIb3DQEBCwUAA4IBAQA9S/Lm8AsBUeqOGGEvZPxPp5JY
+APKDkV+LMoC/d8N9ffWYKjUK7wUhXRGji9BWrMhpf408o+M8JfI3eNKKHUH043C
ujtKGXj89b5vwm9g+JSxqM2wy534CcKs1IOZU6ZgMIxrc48YP+wkJIA5f5u4iRmW
MqJbiorvFt9Gpd51NwPFPCjwo+sM02WF/8RnEaNOedUjiwPYeClzdhwuDk3Ubl6t
FSbrX+acOaSHYWW+C8a/TxF1ifmNdKFr5wH4CIncOwFDpwQJWCbnEppKk9aD6ocr
6fPQKtNRkad4aePoTHQ4IZaO7IxoARo2aDbcH6f+/2LNU7NQQ2Pjism9w06B
-----END CERTIFICATE-----
Generated at Wed Oct 21 00:54:03 2026 by rpki-client