Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/14/323030313a6466353a663463303a3a2f34382d3438203d3e2037373139.roa
File:                     323030313a6466353a663463303a3a2f34382d3438203d3e2037373139.roa (raw, json)
Hash identifier:          EjHl3AJk5GQVLFR8vdam0Dc+KrhYmUCaUx7Ej+RliUo=
Subject key identifier:   10:C2:2D:3F:7F:C9:27:AB:11:30:F8:38:19:B9:AB:66:5D:A8:BB:63
Certificate issuer:       /CN=A91B82CE0000/serialNumber=A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9
Certificate serial:       3ABC01DA28ED375C82C834833B143BEB35866292
Authority key identifier: A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/14/323030313a6466353a663463303a3a2f34382d3438203d3e2037373139.roa
Signing time:             Tue 04 Nov 2025 22:35:23 +0000
ROA not before:           Tue 04 Nov 2025 22:30:23 +0000
ROA not after:            Tue 03 Nov 2026 22:35:23 +0000
asID:                     7719
IP address blocks:        2001:df5:f4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.crl
                          rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 16:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bc:01:da:28:ed:37:5c:82:c8:34:83:3b:14:3b:eb:35:86:62:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B82CE0000, serialNumber=A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9
        Validity
            Not Before: Nov  4 22:30:23 2025 GMT
            Not After : Nov  3 22:35:23 2026 GMT
        Subject: CN=10C22D3F7FC927AB1130F83819B9AB665DA8BB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:29:f7:e3:e4:52:f0:2e:a3:8b:fd:92:b3:
                    46:ef:d9:a3:39:50:4a:e0:e0:74:00:5f:d7:71:d2:
                    2e:4a:5d:f2:74:5b:f3:5b:40:58:be:c0:78:e2:5d:
                    6c:c4:5e:db:86:7d:ec:7a:93:b5:75:8c:96:2a:32:
                    2b:0f:2d:c3:20:2c:46:7b:c4:84:8c:86:80:32:36:
                    bf:18:f9:a6:a4:e4:dc:e2:65:d1:90:6c:04:e0:74:
                    5c:21:57:4b:6c:3e:b2:c9:14:c7:2a:69:ef:ab:67:
                    bb:38:3d:62:07:e5:ac:bd:2f:49:41:45:6e:88:57:
                    48:b7:2b:b9:c7:07:24:3a:a8:94:d2:6f:cc:50:da:
                    94:2c:12:22:2a:f4:a0:b7:4d:32:e5:a9:b5:58:05:
                    3e:16:20:71:1e:a4:23:fe:f2:7f:86:0c:1b:94:cb:
                    7e:be:6b:ec:cf:55:24:c6:bf:5a:92:c7:6d:eb:a9:
                    e2:01:6e:d4:26:83:3f:79:22:3f:6a:97:0d:32:a7:
                    ac:02:1d:b6:f9:4c:64:df:37:e2:f8:15:ee:55:df:
                    13:04:a5:fb:63:a2:d3:28:e0:b1:ff:ce:71:25:a4:
                    68:64:83:ce:c5:4a:d8:61:cc:b4:ec:e7:f7:6e:e3:
                    fe:96:18:8b:06:bb:d4:a0:32:54:c9:c1:0f:4b:4a:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C2:2D:3F:7F:C9:27:AB:11:30:F8:38:19:B9:AB:66:5D:A8:BB:63
            X509v3 Authority Key Identifier:
                keyid:A1:AE:71:CD:A8:37:CE:EF:69:CE:11:4D:70:1C:86:50:A0:A8:FA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/14/A1AE71CDA837CEEF69CE114D701C8650A0A8FAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oa5xzag3zu9pzhFNcByGUKCo-qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/14/323030313a6466353a663463303a3a2f34382d3438203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:a2:32:d4:01:58:91:e4:0d:b4:d5:41:f3:74:6d:48:68:
         c6:dc:a7:90:79:d4:7d:15:67:75:e4:af:c5:32:1c:50:aa:41:
         27:0b:63:4e:2c:3e:ca:40:46:1b:a7:c9:60:58:48:7e:54:f0:
         3e:e7:49:df:e2:4d:5b:35:18:96:d5:24:d1:ea:b4:31:a0:c2:
         42:b9:7f:80:17:19:da:5b:4c:7a:48:65:e6:42:ec:f9:f3:6f:
         6f:70:7e:6b:82:c4:22:28:b9:d7:75:30:14:5e:8f:bd:a6:16:
         c4:35:fe:f9:e0:a7:32:bd:67:75:d2:2f:99:81:7e:8c:d0:cf:
         a7:e6:d7:82:46:a0:31:ba:15:4f:00:27:fe:9c:54:3e:82:55:
         01:0f:05:94:11:bc:03:ee:61:4d:4c:99:a9:32:7b:db:03:22:
         6d:d8:2b:a2:40:08:29:a7:00:45:dc:68:1f:b0:b9:35:28:08:
         c8:1d:92:d2:aa:c5:82:ee:10:77:e2:bb:83:30:1a:ca:cf:20:
         14:c0:ab:5a:4a:a0:54:27:4b:23:e7:18:b4:93:27:9f:5a:c8:
         66:96:fc:f4:3f:0c:68:a6:d1:52:54:0d:c7:22:6d:1b:c9:dd:
         f6:cc:bb:3a:4a:e3:aa:fa:04:41:3f:ed:bb:d3:4b:1e:ba:94:
         13:01:29:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:15:08 2025 by rpki-client