Route Origin Authorization
$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/8/326130363a34313a343030303a3a2f34302d3438203d3e20313532313834.roa
File: 326130363a34313a343030303a3a2f34302d3438203d3e20313532313834.roa (raw, json)
Hash identifier: AiTHhG1CL10rHJZhufAuIDJE+5/TL31EGKBYniNvl9k=
Subject key identifier: C2:B0:45:44:C6:0D:5C:5A:88:AE:D3:B9:85:CE:9D:3A:B0:69:3D:98
Certificate issuer: /CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
Certificate serial: 3900B39583069D732619DD85AF2FDB1E22CB5E7A
Authority key identifier: BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
Subject info access: rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34313a343030303a3a2f34302d3438203d3e20313532313834.roa
Signing time: Tue 04 Nov 2025 22:35:23 +0000
ROA not before: Tue 04 Nov 2025 22:30:23 +0000
ROA not after: Tue 03 Nov 2026 22:35:23 +0000
asID: 152184
IP address blocks: 2a06:41:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl
rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.mft
rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:00:b3:95:83:06:9d:73:26:19:dd:85:af:2f:db:1e:22:cb:5e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
Validity
Not Before: Nov 4 22:30:23 2025 GMT
Not After : Nov 3 22:35:23 2026 GMT
Subject: CN=C2B04544C60D5C5A88AED3B985CE9D3AB0693D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:90:06:72:69:fa:88:b7:60:15:5b:97:bd:
c1:b3:e0:d1:16:bc:0e:7b:f8:0c:3f:c8:7c:2a:01:
e3:61:dc:94:d0:31:fa:bd:3f:59:34:a0:dc:b1:60:
83:db:5b:c9:12:c0:48:45:88:22:00:43:d2:54:b0:
00:86:76:ec:8b:65:d6:a4:c9:d3:26:f7:6e:df:e5:
dc:c0:ad:7d:e1:ed:1a:f0:c7:18:38:96:01:bb:9a:
a9:0d:a1:41:87:37:97:7f:5a:0b:e5:5f:d9:bf:aa:
be:d6:e0:07:92:1d:21:11:16:2b:f1:79:94:17:cd:
32:eb:4e:99:16:59:f5:70:67:11:45:88:c5:16:e9:
5b:13:56:15:5a:28:2b:75:4e:15:b2:21:4f:15:a1:
71:8f:74:4b:c0:11:18:d2:65:44:cc:2b:8a:c9:b0:
d5:a6:b2:56:79:d0:47:59:a7:39:18:84:d4:a0:6c:
e2:39:ca:83:1e:4c:be:a7:5d:b1:bb:c0:78:03:96:
21:bc:9d:05:51:fa:ee:29:d5:23:f3:88:56:92:66:
ec:d9:6d:fa:6b:c4:6a:9e:a4:a6:61:f0:16:12:cd:
2d:92:43:5b:d8:ee:60:09:6e:95:cd:11:ef:8e:7f:
af:1a:5e:6f:dc:fe:e6:0c:9f:b4:0c:65:f0:45:85:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B0:45:44:C6:0D:5C:5A:88:AE:D3:B9:85:CE:9D:3A:B0:69:3D:98
X509v3 Authority Key Identifier:
keyid:BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
Subject Information Access:
Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34313a343030303a3a2f34302d3438203d3e20313532313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:41:4000::/40
Signature Algorithm: sha256WithRSAEncryption
04:5d:58:c1:d4:b4:3f:59:83:e3:a3:c3:58:85:7c:78:85:19:
b5:7a:d6:9a:e1:59:58:73:30:c6:4f:6f:dd:63:0b:93:57:e1:
b9:a8:86:00:48:e9:3e:2a:5b:94:d6:44:74:c7:30:38:56:cb:
af:d3:c5:c2:70:5b:f1:0d:d3:69:18:62:ff:ec:eb:78:0b:3d:
7f:42:d9:0e:78:17:b9:8f:be:ea:4d:00:44:5a:71:89:67:f9:
4d:d2:33:27:53:07:e1:48:a2:d2:fe:2a:1f:9b:94:52:85:e8:
3b:ff:aa:43:63:df:51:43:1b:fa:1a:bc:a7:24:f9:9d:95:4e:
7c:49:34:d4:58:ab:b0:ab:ad:6e:c5:3a:5a:7e:9a:45:d5:ac:
ec:55:f6:3f:db:d0:28:00:ce:01:26:86:04:ff:9b:6f:c6:31:
a5:f2:0f:87:2c:31:5a:c9:bd:af:eb:71:a7:8c:90:f7:d7:ca:
93:a1:94:c2:d6:f9:64:23:04:75:08:26:5e:ee:91:c3:58:5d:
71:16:d5:cf:3a:28:e9:a3:49:f2:47:ac:1b:50:b3:5c:14:b7:
a5:27:1e:7f:17:b7:5b:94:fd:c7:43:25:76:50:81:12:21:82:
c2:f8:16:ab:80:c6:5e:2f:d7:70:ce:c0:9d:42:d9:ad:86:5f:
63:ca:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:29:23 2025 by rpki-client