Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/15/3133382e3235322e35312e302f32342d3234203d3e20393435.roa
File:                     3133382e3235322e35312e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          HhFjTnP4hb1QxNnovh15+Ah+EUMS+ykQ/TcOsQfD7IA=
Subject key identifier:   BF:E4:65:EA:C8:B2:56:68:74:1A:F4:67:FE:32:25:BF:54:4B:B7:BB
Certificate issuer:       /CN=A91B82CE0000/serialNumber=24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50
Certificate serial:       4F7F1D6B9BB61930C8022ACF15C6E7BB7D9A0D5D
Authority key identifier: 24:B0:A5:26:F8:12:0A:0F:81:42:D2:BD:3B:46:44:C8:E1:BD:AD:50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JLClJvgSCg-BQtK9O0ZEyOG9rVA.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/15/3133382e3235322e35312e302f32342d3234203d3e20393435.roa
Signing time:             Wed 05 Nov 2025 14:56:54 +0000
ROA not before:           Wed 05 Nov 2025 14:51:54 +0000
ROA not after:            Wed 04 Nov 2026 14:56:54 +0000
asID:                     945
IP address blocks:        138.252.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/15/24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50.crl
                          rsync://akane.maru.co.jp/repo/1073c6/15/24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JLClJvgSCg-BQtK9O0ZEyOG9rVA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 15:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7f:1d:6b:9b:b6:19:30:c8:02:2a:cf:15:c6:e7:bb:7d:9a:0d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B82CE0000, serialNumber=24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50
        Validity
            Not Before: Nov  5 14:51:54 2025 GMT
            Not After : Nov  4 14:56:54 2026 GMT
        Subject: CN=BFE465EAC8B25668741AF467FE3225BF544BB7BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:90:d1:6f:6b:89:97:4e:e1:25:e6:3c:8d:
                    33:97:4e:04:19:a9:54:39:33:b9:2f:6d:29:92:e5:
                    b4:9a:92:92:79:fd:ea:90:e8:b9:26:e5:83:47:e4:
                    08:ac:ee:f3:06:0c:06:ee:ab:86:e5:c9:21:14:b9:
                    23:36:c3:37:86:ac:70:b5:40:70:dd:15:0a:ae:36:
                    b6:59:7d:0f:fc:40:7a:aa:3d:45:99:66:2a:d2:c6:
                    ae:1e:f3:d8:44:82:7f:fc:91:0f:4a:9e:3f:91:3c:
                    8e:16:33:1d:82:70:15:d8:7e:61:00:fa:ec:fd:a0:
                    f7:5a:40:f3:71:9a:d9:aa:58:31:43:5e:da:6e:b4:
                    5c:0b:6d:97:2c:c6:bc:19:e7:4f:ca:22:6a:5e:d9:
                    a0:5e:a9:04:0e:f9:60:8e:06:01:d7:93:ec:19:c4:
                    19:af:f5:90:4c:9a:20:0a:90:c1:21:44:92:c6:71:
                    5c:35:94:c2:f9:35:93:77:66:8e:34:4f:a4:23:fc:
                    fc:ba:0f:9a:2c:6a:fe:6c:5f:92:92:ce:e6:e6:43:
                    84:fd:69:05:67:f3:50:0d:1b:53:0a:44:21:02:92:
                    12:bf:39:e9:a4:e7:76:c2:18:59:6d:a9:08:59:d5:
                    65:ea:02:53:25:8e:93:be:c5:d9:fc:e5:38:c4:a7:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E4:65:EA:C8:B2:56:68:74:1A:F4:67:FE:32:25:BF:54:4B:B7:BB
            X509v3 Authority Key Identifier:
                keyid:24:B0:A5:26:F8:12:0A:0F:81:42:D2:BD:3B:46:44:C8:E1:BD:AD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/15/24B0A526F8120A0F8142D2BD3B4644C8E1BDAD50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JLClJvgSCg-BQtK9O0ZEyOG9rVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/15/3133382e3235322e35312e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:38:79:f8:b1:42:78:70:72:1f:ee:58:3c:27:d7:1d:f0:e5:
         02:0c:27:d8:22:66:7c:c1:96:fe:27:f2:78:d1:e6:36:26:36:
         ff:dc:b0:55:39:d7:26:d5:e1:f6:5d:e1:89:9e:f5:a7:17:4b:
         87:11:2c:f4:5c:8c:40:cc:db:42:0b:01:51:7c:aa:ac:28:2b:
         9c:80:ea:fc:79:39:27:9f:79:4f:d6:eb:90:e3:6b:d6:c1:57:
         f2:89:e0:bd:d4:de:9a:f8:76:7d:78:63:f1:12:23:04:f1:1e:
         a1:29:02:b7:af:c8:48:f1:96:3e:69:1b:11:74:07:ea:59:d3:
         ae:90:46:d8:57:96:fa:d2:8a:5e:7b:92:06:ab:48:67:49:65:
         dd:09:b1:ca:08:51:8b:bf:79:18:55:6f:f6:5c:a4:1c:63:b1:
         18:d0:04:15:64:83:32:13:11:da:31:56:51:63:b8:87:ea:32:
         0c:c7:ca:fa:da:79:eb:d2:97:07:c9:6b:8b:c3:49:94:d7:4e:
         f5:8a:c6:cf:1d:e1:fa:2a:2f:5d:ae:40:a5:c3:6b:b4:08:94:
         81:a8:b5:d8:e4:53:82:f3:b7:3d:0e:a4:86:46:02:4d:14:f8:
         b0:83:d2:89:eb:d5:bd:1a:5f:14:cf:1b:61:9b:66:15:4f:55:
         86:4e:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:25:28 2025 by rpki-client