Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/15/3133382e3235322e35312e302f32342d3234203d3e2037373139.roa
File:                     3133382e3235322e35312e302f32342d3234203d3e2037373139.roa (raw, json)
Hash identifier:          olO9j0++ojCcD9LA75BYMdUjqKDaWI0VN46AW+4ou8c=
Subject key identifier:   9E:97:0E:FC:83:05:9A:D7:02:E4:E6:A1:33:27:A1:83:0D:D8:87:46
Certificate issuer:       /CN=A91B82CE0000/serialNumber=24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50
Certificate serial:       218028D8D9E32BEABFFE97801DD517BBBF746031
Authority key identifier: 24:B0:A5:26:F8:12:0A:0F:81:42:D2:BD:3B:46:44:C8:E1:BD:AD:50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JLClJvgSCg-BQtK9O0ZEyOG9rVA.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/15/3133382e3235322e35312e302f32342d3234203d3e2037373139.roa
Signing time:             Wed 05 Nov 2025 14:56:48 +0000
ROA not before:           Wed 05 Nov 2025 14:51:48 +0000
ROA not after:            Wed 04 Nov 2026 14:56:48 +0000
asID:                     7719
IP address blocks:        138.252.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/15/24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50.crl
                          rsync://akane.maru.co.jp/repo/1073c6/15/24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JLClJvgSCg-BQtK9O0ZEyOG9rVA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 15:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:80:28:d8:d9:e3:2b:ea:bf:fe:97:80:1d:d5:17:bb:bf:74:60:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B82CE0000, serialNumber=24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50
        Validity
            Not Before: Nov  5 14:51:48 2025 GMT
            Not After : Nov  4 14:56:48 2026 GMT
        Subject: CN=9E970EFC83059AD702E4E6A13327A1830DD88746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:0e:a0:a0:8d:b1:0f:f7:09:04:7d:91:b4:
                    ca:e5:53:eb:3a:0f:30:0e:af:a0:f6:fa:30:93:83:
                    d1:e6:a7:65:b0:53:8a:1e:64:f0:3f:8d:dd:9d:95:
                    95:6c:51:2c:ca:56:1c:55:7f:66:0c:93:30:0b:d2:
                    5a:17:0c:1c:d3:d2:1f:44:36:d9:c0:df:ed:32:7f:
                    de:74:b7:8f:f0:f5:ce:4f:50:50:1b:89:b0:70:ed:
                    6c:8a:76:94:ad:a3:96:e1:ea:41:61:1c:d7:1a:6b:
                    bc:76:f9:c4:8d:9e:c9:ba:67:6e:d6:c3:29:a0:2e:
                    90:f0:5c:79:3c:af:7f:fd:72:3e:58:f7:8c:6e:f6:
                    e9:a2:7c:ab:7b:59:0a:00:83:d3:c8:31:c7:0e:5b:
                    26:b4:ab:a7:2b:7e:c6:4f:fd:9c:a7:99:b4:34:38:
                    d1:f5:1a:c6:67:46:48:a4:4c:5f:d3:33:75:8a:86:
                    8d:40:40:53:42:46:d7:08:3e:de:56:f8:f0:06:88:
                    1e:80:c7:6f:4a:2c:80:63:fa:90:4b:14:71:9a:90:
                    52:58:43:81:24:8c:56:c5:85:16:08:39:45:64:a5:
                    5d:38:3c:e0:c8:07:9d:0a:23:38:5f:ff:17:5a:3f:
                    22:2c:a5:17:ea:7d:b4:28:5b:d5:ea:f6:3a:47:d6:
                    95:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:97:0E:FC:83:05:9A:D7:02:E4:E6:A1:33:27:A1:83:0D:D8:87:46
            X509v3 Authority Key Identifier:
                keyid:24:B0:A5:26:F8:12:0A:0F:81:42:D2:BD:3B:46:44:C8:E1:BD:AD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/15/24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JLClJvgSCg-BQtK9O0ZEyOG9rVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/15/3133382e3235322e35312e302f32342d3234203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e8:50:cf:57:46:8d:9a:32:7c:96:9b:3f:f4:9a:11:d9:df:
         29:cc:c2:57:65:7d:82:c7:cd:8d:4d:ef:61:3a:33:cd:45:49:
         46:e7:4f:63:db:14:d2:2b:ef:e1:e6:01:b3:e0:50:47:eb:c3:
         cd:f4:15:28:ad:13:cd:d0:3e:30:1b:72:37:fc:bf:e7:55:86:
         b2:23:d1:0f:29:06:a3:2a:03:7e:e0:d3:6d:6f:39:2d:2b:20:
         d1:f0:d6:be:b7:e6:e6:c6:f1:b6:ee:47:b3:d6:33:fe:10:7c:
         a8:35:72:16:fb:ec:95:8b:b7:ca:e6:3b:59:25:23:84:cc:5b:
         b6:d9:9e:e0:2b:61:b7:cf:5c:88:88:08:d4:85:b3:bd:6f:8d:
         4b:f5:08:e8:51:a4:cf:99:f9:4b:80:2e:ee:c5:9c:39:b0:2a:
         7b:62:43:d8:ca:99:6d:4e:7f:4f:c0:be:43:59:45:bf:bf:4f:
         e6:99:a5:ab:eb:c4:e3:d4:f4:bd:fa:91:65:f8:82:ee:df:38:
         2a:7d:8b:d3:87:ca:78:d9:6b:9d:c4:a6:d8:3d:20:68:58:12:
         f4:23:b7:9d:ef:3e:aa:3e:c3:52:b0:aa:38:a6:db:c1:91:32:
         26:f2:34:25:94:57:5c:60:96:ce:84:ca:ea:c0:c7:f8:2f:9d:
         8a:00:2f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:17:48 2025 by rpki-client