Route Origin Authorization

$ rpki-client -vvvf akane.maru.co.jp/repo/1073c6/8/326130363a34313a633030303a3a2f34302d3438203d3e203439383637.roa
File:                     326130363a34313a633030303a3a2f34302d3438203d3e203439383637.roa (raw, json)
Hash identifier:          rO56wkIAtDsQN4TdhvPudzp8pbrb5McOGTU0iVLVALM=
Subject key identifier:   59:E2:B2:E9:D4:8F:10:14:A8:4F:AC:E5:43:98:E2:5A:A2:2E:3D:2B
Certificate issuer:       /CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
Certificate serial:       380400BA98896E4F9B6A44099A7468BEC2A50E29
Authority key identifier: BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34313a633030303a3a2f34302d3438203d3e203439383637.roa
Signing time:             Tue 06 Oct 2026 22:50:03 +0000
ROA not before:           Tue 06 Oct 2026 22:45:03 +0000
ROA not after:            Tue 05 Oct 2027 22:50:03 +0000
asID:                     49867
IP address blocks:        2a06:41:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl
                          rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:04:00:ba:98:89:6e:4f:9b:6a:44:09:9a:74:68:be:c2:a5:0e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
        Validity
            Not Before: Oct  6 22:45:03 2026 GMT
            Not After : Oct  5 22:50:03 2027 GMT
        Subject: CN=59E2B2E9D48F1014A84FACE54398E25AA22E3D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:ed:0d:25:b4:0e:17:0c:f4:1c:70:04:03:
                    d2:d6:ad:43:15:ce:3d:cd:ef:a7:fc:73:1d:c3:93:
                    a6:45:06:af:99:83:f4:f9:de:2a:9a:41:f6:71:c9:
                    c5:e1:8e:53:e9:a5:5e:3e:56:ad:1e:ba:96:d0:ec:
                    73:65:dc:64:85:c8:0c:12:3f:92:f1:d2:55:40:89:
                    88:6b:54:30:fe:5b:db:23:8b:7b:77:6b:b3:68:a2:
                    33:a6:b2:00:03:a9:61:0b:39:a8:8f:97:7e:03:63:
                    74:71:c3:6f:a3:7c:46:75:c7:30:6a:60:b9:15:aa:
                    b7:fa:ee:f7:b2:8f:98:dd:fb:26:ff:b5:6b:4a:61:
                    cc:5a:57:ab:f7:8b:99:7a:34:19:97:91:6a:7c:3c:
                    13:1d:e7:e8:c2:45:9b:b3:85:3e:e7:14:8e:6b:6e:
                    f3:2a:7b:f6:18:42:77:68:35:9b:31:42:bf:bc:93:
                    57:98:1e:33:ad:10:77:79:02:48:eb:c0:ef:be:75:
                    b8:57:ed:80:5a:39:2a:1c:4c:6b:1c:ef:c0:49:e8:
                    b9:83:ec:04:b7:26:b2:71:f0:e1:ef:15:f2:50:31:
                    83:df:c0:a0:ff:b1:0c:ff:8d:d0:db:cd:97:e9:e3:
                    7c:79:d5:32:5f:5f:73:d7:37:e6:ff:62:3e:66:b2:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E2:B2:E9:D4:8F:10:14:A8:4F:AC:E5:43:98:E2:5A:A2:2E:3D:2B
            X509v3 Authority Key Identifier:
                keyid:BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34313a633030303a3a2f34302d3438203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:41:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:90:33:11:94:84:94:8e:81:48:76:87:7e:d1:cc:9a:a2:a1:
         b5:4b:df:69:5c:9e:ea:56:6a:b9:fe:25:9b:41:07:70:f8:1b:
         a5:da:df:0b:42:f2:c8:ac:0f:0b:c8:d7:49:d9:c0:94:2e:b8:
         64:52:b0:9e:ca:68:96:67:57:5c:e5:36:fd:85:0f:9f:72:3d:
         d4:76:6d:ca:88:5a:fd:e7:da:c0:d2:d3:86:dc:c9:ae:41:46:
         15:ab:ae:0f:79:fd:fe:4f:eb:2b:db:aa:e7:48:0d:a1:95:a5:
         0d:8b:7f:f8:2f:7d:33:b5:bf:8d:32:7d:fe:fb:fb:88:94:5e:
         74:08:5b:d7:0a:53:7f:d5:81:ef:18:88:4c:f1:b3:ea:be:27:
         bb:9f:aa:da:97:6a:9f:f7:d3:f0:c1:c3:84:3e:38:d4:8c:58:
         45:a2:67:be:cd:19:37:b9:bc:e1:1d:3e:43:e8:47:52:e3:52:
         0b:3d:ef:a1:67:47:7c:54:2c:14:bb:15:c4:87:4f:30:fb:b2:
         3b:c4:42:4d:bb:f3:f1:56:60:bd:39:3e:4c:a1:c6:bc:6c:08:
         ac:69:10:00:6a:29:e1:9d:be:61:1b:8c:d1:9c:34:fc:41:7c:
         6b:8a:60:f9:98:3a:b7:62:69:be:dc:7f:84:be:78:a9:2a:bc:
         52:43:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:34:56 2026 by rpki-client