Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/11/3138352e3135352e37352e302f32342d3234203d3e20393435.roa
File:                     3138352e3135352e37352e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          xvMPeWKEcf5cVDruuTcOIGnwsr5TGPnBYwElOvqJ2P8=
Subject key identifier:   E0:F4:28:86:C3:33:F0:06:91:80:E9:5C:99:D6:6C:BF:A5:8F:8F:BB
Certificate issuer:       /CN=4b734ca25b04a198f3eff79c293351606470223f
Certificate serial:       1F8983766672273AE3A427851EEC1647CA08099F
Authority key identifier: 4B:73:4C:A2:5B:04:A1:98:F3:EF:F7:9C:29:33:51:60:64:70:22:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3NMolsEoZjz7_ecKTNRYGRwIj8.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/11/3138352e3135352e37352e302f32342d3234203d3e20393435.roa
Signing time:             Tue 04 Nov 2025 22:35:21 +0000
ROA not before:           Tue 04 Nov 2025 22:30:21 +0000
ROA not after:            Tue 03 Nov 2026 22:35:21 +0000
asID:                     945
IP address blocks:        185.155.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/11/4B734CA25B04A198F3EFF79C293351606470223F.crl
                          rsync://akane.maru.co.jp/repo/1073c6/11/4B734CA25B04A198F3EFF79C293351606470223F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3NMolsEoZjz7_ecKTNRYGRwIj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:89:83:76:66:72:27:3a:e3:a4:27:85:1e:ec:16:47:ca:08:09:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b734ca25b04a198f3eff79c293351606470223f
        Validity
            Not Before: Nov  4 22:30:21 2025 GMT
            Not After : Nov  3 22:35:21 2026 GMT
        Subject: CN=E0F42886C333F0069180E95C99D66CBFA58F8FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:60:f9:dc:e4:20:92:ed:47:62:7a:24:d4:
                    f9:ca:27:05:74:91:27:94:33:e6:5a:7d:30:f2:a1:
                    92:73:f5:11:06:8c:05:90:e1:83:ef:b6:45:c5:b1:
                    a0:d0:c0:05:05:c6:08:3a:d9:c2:ec:88:b6:c4:7d:
                    03:19:a9:b9:bd:bb:5e:aa:2d:77:3c:2d:59:f9:d3:
                    93:c5:3b:0b:bf:92:2b:b0:e5:e3:ff:87:34:50:e1:
                    88:3a:ea:1b:fd:33:ff:7e:16:b4:80:fa:d7:db:02:
                    73:4a:9d:97:26:f2:23:d9:d4:20:b0:71:ae:88:67:
                    eb:7b:cb:ab:48:f7:77:de:76:24:b0:a9:43:3d:a3:
                    c6:25:14:08:47:28:25:3f:fb:c7:16:12:9d:e6:29:
                    a0:67:e5:75:5e:e3:cb:97:4a:ca:51:99:81:a0:f1:
                    7c:e1:9f:1e:34:56:12:10:77:52:28:b6:5c:90:f3:
                    81:4e:90:45:6d:91:a5:d0:4d:56:a7:a2:51:b4:47:
                    c0:18:1f:02:c3:d9:4d:85:c9:cb:22:16:af:b2:13:
                    ed:2a:d7:fa:a2:ab:c2:0c:8b:82:25:59:3d:21:f8:
                    5d:ab:2f:3e:40:4b:48:94:4b:18:82:fc:42:8d:75:
                    01:21:61:05:2a:48:5d:04:5e:a5:9c:d2:48:f0:55:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F4:28:86:C3:33:F0:06:91:80:E9:5C:99:D6:6C:BF:A5:8F:8F:BB
            X509v3 Authority Key Identifier:
                keyid:4B:73:4C:A2:5B:04:A1:98:F3:EF:F7:9C:29:33:51:60:64:70:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/11/4B734CA25B04A198F3EFF79C293351606470223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3NMolsEoZjz7_ecKTNRYGRwIj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/11/3138352e3135352e37352e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:5b:5e:2c:5f:55:73:53:3d:59:48:a3:53:28:0d:96:89:
         63:42:ad:b7:85:7a:01:f4:8f:7e:f2:05:a3:31:6f:8f:ab:fb:
         52:30:57:99:49:79:e5:0f:94:10:0e:51:92:1d:4b:c8:1e:58:
         50:9d:aa:43:83:ea:82:e0:81:21:f9:2c:45:40:14:34:67:e2:
         d1:d5:69:6e:29:e2:ef:23:ee:99:bc:66:11:5a:2c:8e:20:4d:
         d4:24:0b:2c:fb:4e:3c:55:95:fc:d2:06:d3:fc:e4:61:b3:50:
         7a:dd:ce:ed:6d:68:70:f9:f1:b2:8d:88:c6:43:53:79:19:92:
         74:b3:14:2b:81:92:37:71:af:f9:08:89:e5:ac:40:a2:2b:69:
         9c:bf:3e:45:51:17:47:40:cf:67:b4:59:14:23:16:be:4a:ab:
         13:e8:ff:11:77:25:28:85:86:19:55:a7:ef:1c:aa:64:d3:7a:
         1f:41:69:93:fd:fc:b9:e8:ba:25:fc:82:cc:b9:fe:45:c7:69:
         0d:69:c4:61:e0:63:d8:44:ab:e4:d0:7d:f6:48:2a:10:4a:57:
         c7:35:ba:a4:f3:a7:71:45:e1:87:26:32:c7:1f:50:f5:e1:98:
         bb:fa:d6:f7:dc:b6:41:f8:41:e9:7e:f5:b6:4c:c5:96:b0:92:
         df:6d:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:50:51 2025 by rpki-client