Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oA4gvEI5DJdsprGDMzQobzPPI8Q.roa
File:                     oA4gvEI5DJdsprGDMzQobzPPI8Q.roa (raw, json)
Hash identifier:          sg+BBAVjNNuV3VTdHlNFs3vUE2zc7Onx1dqqlgC2XYE=
Subject key identifier:   A0:0E:20:BC:42:39:0C:97:6C:A6:B1:83:33:34:28:6F:33:CF:23:C4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0125
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oA4gvEI5DJdsprGDMzQobzPPI8Q.roa
Signing time:             Tue 30 May 2023 17:01:58 +0000
ROA not before:           Tue 30 May 2023 17:01:58 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:7f:c000::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:01:58 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A00E20BC42390C976CA6B1833334286F33CF23C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:75:2f:e3:6d:2f:4c:25:12:46:3e:ad:8e:
                    07:a0:a8:a6:2e:da:98:0b:86:c6:1c:96:cc:e2:0e:
                    71:a1:75:92:84:72:0e:ee:dd:60:3f:c8:f4:c2:2f:
                    06:24:90:b5:d0:bf:54:3c:31:6e:72:1b:e7:be:1a:
                    da:cb:11:d6:ee:68:1e:a9:8c:2b:d4:01:f0:3f:12:
                    cc:e8:b1:07:09:d1:69:51:fe:42:8a:d0:3e:c5:62:
                    95:c2:21:4e:e3:0a:69:4d:41:92:ae:9e:b9:12:4f:
                    20:31:8e:33:64:05:a5:dd:71:17:ee:cd:15:46:1a:
                    df:1a:23:73:b8:f9:6d:ca:94:59:84:b4:c8:07:72:
                    0c:3a:26:42:ad:f5:f8:c6:b2:34:ee:6e:d6:bd:13:
                    81:86:56:8d:b9:a1:16:98:12:c5:56:d3:d3:4e:1a:
                    94:6d:03:f0:b1:4a:d1:63:d6:bb:f3:ee:b1:c3:08:
                    df:05:dd:aa:f2:9e:5a:47:a5:dc:f7:b0:7a:06:93:
                    ef:94:c7:78:63:d3:9e:13:a4:05:6b:4b:a6:83:17:
                    e0:4c:4c:8d:63:bc:ab:b8:0b:ae:f2:dc:44:a2:6c:
                    b1:27:82:a5:04:58:40:ad:b5:91:98:6e:39:94:1c:
                    08:19:6c:7d:79:ff:a0:7b:1c:30:46:04:ff:a4:ab:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:20:BC:42:39:0C:97:6C:A6:B1:83:33:34:28:6F:33:CF:23:C4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oA4gvEI5DJdsprGDMzQobzPPI8Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:7f:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:28:ee:7f:4f:c1:4c:d4:dd:1f:bb:e1:bc:6d:e6:e9:ca:ff:
         e5:53:69:63:f2:40:6c:88:8e:1f:4f:3c:60:5d:db:c1:16:0f:
         41:60:ea:f7:9c:6c:9c:fb:d3:c3:cb:79:96:dc:33:2e:38:0f:
         9d:23:dd:ba:ca:9a:50:1f:ac:31:3a:b6:a8:1b:5c:98:b0:2a:
         98:4b:e6:da:32:9c:c4:78:75:37:8a:d5:8d:85:92:77:b3:23:
         cd:12:e8:3b:77:f6:24:ca:58:a8:0e:a8:b8:fd:bb:dd:54:74:
         cd:c9:e2:ec:76:52:5b:83:4f:b2:33:7e:18:44:14:f6:03:84:
         50:ae:df:5e:39:b5:db:66:3e:2c:9b:5f:93:05:ea:59:91:f1:
         e7:2b:4c:62:ca:cb:de:af:1b:53:ab:73:f8:8f:67:96:bf:44:
         0b:d6:0f:95:26:57:a8:b0:82:f6:65:3c:c2:d2:bc:33:c2:68:
         b7:cb:a5:9d:e0:d5:27:07:f4:c6:5d:ab:01:fc:d1:76:f6:24:
         d0:4c:c5:e5:7f:63:80:66:17:2f:9a:dd:25:52:84:f1:35:fe:
         83:16:ff:3f:70:6e:92:70:11:1a:5f:27:69:ff:d9:b3:4f:4a:
         51:13:6b:58:ee:be:75:f8:a1:1d:76:e7:38:b8:0d:4e:76:4a:
         a2:4b:65:aa
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICASUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzAxNThaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEEwMEUyMEJDNDIzOTBD
OTc2Q0E2QjE4MzMzMzQyODZGMzNDRjIzQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqVHUv420vTCUSRj6tjgegqKYu2pgLhsYclsziDnGhdZKEcg7u
3WA/yPTCLwYkkLXQv1Q8MW5yG+e+GtrLEdbuaB6pjCvUAfA/EszosQcJ0WlR/kKK
0D7FYpXCIU7jCmlNQZKunrkSTyAxjjNkBaXdcRfuzRVGGt8aI3O4+W3KlFmEtMgH
cgw6JkKt9fjGsjTubta9E4GGVo25oRaYEsVW09NOGpRtA/CxStFj1rvz7rHDCN8F
3arynlpHpdz3sHoGk++Ux3hj054TpAVrS6aDF+BMTI1jvKu4C67y3ESibLEngqUE
WECttZGYbjmUHAgZbH15/6B7HDBGBP+kq3xPAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUoA4gvEI5DJdsprGDMzQobzPPI8QwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9vQTRndkVJNURKZHNwckdETXpRb2J6UFBJOFEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAoAf8AAMA0GCSqGSIb3DQEBCwUAA4IBAQCnKO5/T8FM1N0fu+G8
bebpyv/lU2lj8kBsiI4fTzxgXdvBFg9BYOr3nGyc+9PDy3mW3DMuOA+dI926yppQ
H6wxOraoG1yYsCqYS+baMpzEeHU3itWNhZJ3syPNEug7d/YkylioDqi4/bvdVHTN
yeLsdlJbg0+yM34YRBT2A4RQrt9eObXbZj4sm1+TBepZkfHnK0xiysverxtTq3P4
j2eWv0QL1g+VJleosIL2ZTzC0rwzwmi3y6Wd4NUnB/TGXasB/NF29iTQTMXlf2OA
Zhcvmt0lUoTxNf6DFv8/cG6ScBEaXydp/9mzT0pRE2tY7r51+KEdduc4uA1Odkqi
S2Wq
-----END CERTIFICATE-----
Generated at Mon May 19 10:56:11 2025 by rpki-client