Route Origin Authorization
$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/8/326130363a34313a383130303a3a2f34302d3438203d3e20323033353737.roa
File: 326130363a34313a383130303a3a2f34302d3438203d3e20323033353737.roa (raw, json)
Hash identifier: HiaIbkXFZL8jau15HDspPWsfsHQv/zZfZQlAeHMiQY8=
Subject key identifier: 95:CA:C2:22:88:65:CE:C6:D9:DE:3D:C3:0C:94:F0:E0:A7:7B:BF:7B
Certificate issuer: /CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
Certificate serial: 0A7DD754FF446F57A1A77F528A8681EB7C23B30F
Authority key identifier: BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
Subject info access: rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34313a383130303a3a2f34302d3438203d3e20323033353737.roa
Signing time: Tue 04 Nov 2025 22:35:23 +0000
ROA not before: Tue 04 Nov 2025 22:30:23 +0000
ROA not after: Tue 03 Nov 2026 22:35:23 +0000
asID: 203577
IP address blocks: 2a06:41:8100::/40 maxlen: 48
Validation: OK
Signature path: rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl
rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.mft
rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:7d:d7:54:ff:44:6f:57:a1:a7:7f:52:8a:86:81:eb:7c:23:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
Validity
Not Before: Nov 4 22:30:23 2025 GMT
Not After : Nov 3 22:35:23 2026 GMT
Subject: CN=95CAC2228865CEC6D9DE3DC30C94F0E0A77BBF7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:5c:89:63:ce:ce:2a:9e:3f:56:4f:2a:0b:
2d:00:a5:7b:8d:8c:ff:8a:7e:da:b6:79:97:d5:e5:
b6:7c:a8:78:69:ce:06:43:71:25:2e:6b:ef:cf:5d:
94:9a:5f:6c:61:fd:83:57:93:c7:cb:b8:95:9e:d8:
c7:36:1f:a2:31:8c:3a:6b:1f:fb:f4:86:9e:ec:6f:
e2:51:2a:c0:eb:4b:c7:8f:8c:11:76:7e:45:5a:e3:
ca:91:a8:52:4c:59:a9:e7:48:10:92:41:c8:0d:f1:
74:22:e6:ce:48:96:0f:94:9a:7d:6a:8c:44:9d:41:
ea:8d:7c:e6:fc:d7:42:eb:0e:72:92:9d:6d:78:d1:
87:ef:30:9e:f0:9c:60:11:e8:99:2b:dc:5a:1d:a1:
c0:ac:bc:71:5e:56:95:1a:12:c0:41:59:36:50:87:
81:9f:93:5d:b2:2f:b5:bc:10:68:cc:81:67:a7:d0:
1a:fa:35:50:24:de:bd:22:87:23:d9:e9:d6:b9:3c:
2e:0c:77:2a:e3:64:13:e5:d1:6d:d7:f2:64:b6:b3:
4a:3b:cf:15:71:50:55:c2:71:3f:0e:3d:57:87:0c:
a8:b3:26:2c:93:65:c7:ab:25:18:2a:eb:22:1d:e2:
09:bb:02:25:d2:7f:30:fa:a2:70:cc:4d:40:f6:fa:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:C2:22:88:65:CE:C6:D9:DE:3D:C3:0C:94:F0:E0:A7:7B:BF:7B
X509v3 Authority Key Identifier:
keyid:BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
Subject Information Access:
Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34313a383130303a3a2f34302d3438203d3e20323033353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:41:8100::/40
Signature Algorithm: sha256WithRSAEncryption
4b:0b:84:4f:3d:ed:b0:db:bd:b1:c9:c0:04:49:b6:04:e0:e6:
e4:9d:ab:21:d0:23:2a:90:d7:f5:1f:3b:9d:cc:e8:a3:14:86:
12:64:1b:c1:f9:59:60:dc:e7:42:57:58:58:84:bb:58:c9:f9:
c5:4e:0f:2d:61:50:fc:45:70:58:65:86:74:29:71:a3:29:d4:
9f:f1:c8:1e:3a:07:7e:5b:4f:37:81:71:1b:8d:a6:c8:4d:9b:
5b:9d:d3:52:3d:f3:b8:12:17:8b:45:79:ec:6c:5e:db:06:7e:
0f:cc:77:a2:46:a6:2b:a9:57:8f:e0:4a:43:0f:53:ee:15:a1:
cb:0e:5f:d5:47:d3:58:ab:fc:3e:6c:79:3f:79:b4:00:73:0e:
58:0d:e5:83:e2:3e:ca:a8:3e:97:bc:28:e4:0a:c9:bb:98:33:
a1:0d:34:b2:57:e9:d0:dc:9c:e5:ca:bd:1f:7f:4c:a2:e1:af:
07:38:bc:99:b1:ab:e3:d0:ac:46:b1:4b:a1:94:9c:dd:a3:31:
85:ca:83:df:75:39:ec:db:08:26:7a:51:8a:cd:c5:57:ff:ff:
e6:d2:6c:12:32:b8:23:1d:03:a2:74:5c:9c:ea:8d:b7:df:ba:
6d:ae:dd:40:b8:db:27:96:41:a4:5c:81:3a:84:4a:25:34:ef:
66:b8:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:58:20 2025 by rpki-client