Route Origin Authorization

$ rpki-client -vvvf akane.maru.co.jp/repo/1073c6/11/3138352e3135352e37352e302f32342d3234203d3e203439383637.roa
File:                     3138352e3135352e37352e302f32342d3234203d3e203439383637.roa (raw, json)
Hash identifier:          uyJlUGmmmsOuJs6R4EbmWUOXpX0hzutRocCPkLl74v8=
Subject key identifier:   C0:9E:0F:B0:0A:56:AA:2C:C5:A3:F2:59:C9:52:BA:E3:7F:49:E6:C9
Certificate issuer:       /CN=4b734ca25b04a198f3eff79c293351606470223f
Certificate serial:       7AA1A843F317ABEFF6FF911CA16B9068618BA67B
Authority key identifier: 4B:73:4C:A2:5B:04:A1:98:F3:EF:F7:9C:29:33:51:60:64:70:22:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3NMolsEoZjz7_ecKTNRYGRwIj8.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/11/3138352e3135352e37352e302f32342d3234203d3e203439383637.roa
Signing time:             Tue 06 Oct 2026 22:50:03 +0000
ROA not before:           Tue 06 Oct 2026 22:45:03 +0000
ROA not after:            Tue 05 Oct 2027 22:50:03 +0000
asID:                     49867
IP address blocks:        185.155.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/11/4B734CA25B04A198F3EFF79C293351606470223F.crl
                          rsync://akane.maru.co.jp/repo/1073c6/11/4B734CA25B04A198F3EFF79C293351606470223F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3NMolsEoZjz7_ecKTNRYGRwIj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a1:a8:43:f3:17:ab:ef:f6:ff:91:1c:a1:6b:90:68:61:8b:a6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b734ca25b04a198f3eff79c293351606470223f
        Validity
            Not Before: Oct  6 22:45:03 2026 GMT
            Not After : Oct  5 22:50:03 2027 GMT
        Subject: CN=C09E0FB00A56AA2CC5A3F259C952BAE37F49E6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:5f:4c:aa:c2:ff:59:e5:ea:bd:67:cb:e4:
                    84:64:b3:ae:de:d4:b9:8a:2c:23:85:8f:39:10:5f:
                    03:62:62:c9:81:41:ed:a3:47:52:6e:5c:d5:d4:58:
                    ec:a1:20:63:f9:ff:65:06:e3:e4:57:91:d6:1c:c5:
                    30:cf:3f:0f:b4:a8:d3:1a:97:be:14:af:76:55:2a:
                    8d:22:a0:55:72:96:1c:cd:bf:1f:42:61:17:11:d3:
                    83:c5:8f:67:1c:1b:8c:bb:de:4e:84:66:d7:ed:40:
                    f6:ff:5c:b2:fa:14:7c:02:a1:bd:74:95:38:4e:d4:
                    ca:d9:16:5c:69:7d:83:df:d2:56:a7:86:96:b1:84:
                    12:77:42:22:f3:6c:78:20:3c:60:47:47:5a:0b:2d:
                    c6:58:dc:f5:72:93:57:3e:10:42:f0:f2:a5:70:1c:
                    18:d0:97:21:98:34:ce:34:25:77:99:e2:24:ee:c2:
                    d7:2f:38:8d:2b:70:99:be:b3:aa:5e:7a:5c:41:08:
                    01:72:e6:4b:b8:6c:35:67:0d:f9:c3:11:6f:19:36:
                    1e:72:31:48:52:a6:30:74:9c:0f:9d:87:2c:bf:a3:
                    79:a2:b9:5a:f9:8e:15:d7:ce:cd:91:c8:25:f2:90:
                    61:72:30:88:4c:9f:42:b7:fb:d0:df:38:36:b9:37:
                    73:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9E:0F:B0:0A:56:AA:2C:C5:A3:F2:59:C9:52:BA:E3:7F:49:E6:C9
            X509v3 Authority Key Identifier:
                keyid:4B:73:4C:A2:5B:04:A1:98:F3:EF:F7:9C:29:33:51:60:64:70:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/11/4B734CA25B04A198F3EFF79C293351606470223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3NMolsEoZjz7_ecKTNRYGRwIj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/11/3138352e3135352e37352e302f32342d3234203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:01:81:95:43:67:0a:80:13:e6:32:65:d7:bd:00:34:73:
         67:9b:ac:47:ab:c9:70:46:f7:7c:ab:c1:f7:54:e1:e1:1a:a5:
         03:ea:01:de:bd:61:24:2e:58:42:ec:26:ae:97:4f:34:d1:c6:
         19:20:dd:72:41:49:ee:d4:f9:60:26:1e:28:67:42:0a:93:c7:
         f6:ef:43:d0:54:1c:23:fd:b7:d8:cf:db:72:db:45:c7:dd:b1:
         88:ef:a1:fb:df:10:e9:07:a9:c1:5f:4f:8c:de:25:93:23:44:
         4c:8c:d9:2f:e0:9a:27:3c:a8:93:49:da:47:ba:6d:ce:9d:22:
         e6:10:f5:cd:71:d0:7a:c8:44:82:e0:67:be:65:8c:a0:bb:ff:
         f2:c0:41:5b:c1:14:6f:d4:52:28:8b:63:4a:dc:32:4b:f4:b9:
         c8:f6:a7:32:ef:9f:f1:d6:9f:68:0d:6c:3b:f0:15:17:39:62:
         e1:fb:39:64:19:de:60:61:27:27:7b:a4:71:e0:6d:c5:1f:97:
         a3:8c:e3:9a:dc:3c:0c:9c:3c:b9:c1:40:e6:de:97:d8:4f:2d:
         72:37:e9:5a:d7:22:73:b5:01:3c:bd:bb:a5:7f:5d:1b:4f:6c:
         7f:44:b8:1a:03:0a:c3:de:24:fe:68:48:24:08:1d:f6:81:62:
         cb:d7:18:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:16:07 2026 by rpki-client