Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/aeDuCkP4yyiEDYTvHDs76Vv-b3Q.roa
File:                     aeDuCkP4yyiEDYTvHDs76Vv-b3Q.roa (raw, json)
Hash identifier:          DzlwJzajOqmZWepPv7Jt3YwZ0KqK03Ogss+VyFPkLGI=
Subject key identifier:   69:E0:EE:0A:43:F8:CB:28:84:0D:84:EF:1C:3B:3B:E9:5B:FE:6F:74
Certificate issuer:       /CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA
Certificate serial:       0E
Authority key identifier: F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/aeDuCkP4yyiEDYTvHDs76Vv-b3Q.roa
Signing time:             Wed 13 Oct 2021 11:22:44 +0000
ROA not before:           Wed 13 Oct 2021 11:22:44 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     2515
IP address blocks:        2001:fa0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA
        Validity
            Not Before: Oct 13 11:22:44 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=69E0EE0A43F8CB28840D84EF1C3B3BE95BFE6F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:67:91:3e:71:ae:c3:04:f2:3f:4b:02:dc:
                    27:69:6a:45:8a:b3:f1:5b:5b:3e:fc:fa:3e:e9:c6:
                    d9:0e:01:b9:03:b9:66:70:0c:77:2f:c0:7c:c9:ba:
                    eb:50:1b:e4:a7:2a:d5:ef:b5:77:c3:9d:57:5a:c2:
                    44:18:c3:c0:ac:98:e0:f7:90:49:6c:3c:4b:e8:18:
                    7e:9c:1d:a3:33:59:46:40:41:03:10:be:33:5c:00:
                    bd:05:1a:58:2a:25:7c:1b:84:f1:a8:fa:8e:04:79:
                    78:9a:97:e6:8f:f7:b0:b2:33:8f:72:81:31:fb:2a:
                    56:1d:26:48:41:d3:bf:94:f5:f8:3a:5a:15:7a:b9:
                    46:3d:27:2a:32:0f:f8:d2:98:c3:2a:e2:e7:cf:2f:
                    8c:63:61:6e:64:b7:74:87:9c:6d:11:d3:b4:63:18:
                    d9:e9:4f:a4:df:85:22:9f:fa:3a:db:40:3f:8c:64:
                    f7:81:82:ab:ef:1c:7b:52:c2:4e:ad:f2:20:d9:5f:
                    c7:22:45:d1:d7:68:2c:1c:b8:ba:08:6d:3a:c5:ae:
                    67:51:87:b7:a5:2f:53:ef:77:53:11:5d:02:76:4e:
                    96:2a:92:20:94:9e:58:71:7b:dd:8d:52:53:42:b9:
                    de:3a:df:2f:d9:08:1c:d6:db:4c:d1:b6:98:71:4b:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E0:EE:0A:43:F8:CB:28:84:0D:84:EF:1C:3B:3B:E9:5B:FE:6F:74
            X509v3 Authority Key Identifier:
                keyid:F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/aeDuCkP4yyiEDYTvHDs76Vv-b3Q.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:21:ed:69:75:e0:db:f9:ff:9a:90:e5:d9:61:e7:0c:ed:9d:
         f2:9f:5e:4b:7c:75:76:08:76:68:48:8a:83:d1:f7:08:e9:e6:
         9e:88:1f:d7:7a:af:f6:72:99:df:16:fa:18:a2:a7:02:86:bf:
         24:4b:1d:f2:14:c1:21:07:b6:e1:dc:01:5a:00:b6:ab:36:3e:
         7f:6a:a7:00:7b:4d:d2:0f:3b:29:2f:52:a3:1d:46:bc:4f:ff:
         b1:85:cc:cf:26:6d:95:4a:67:49:53:58:03:10:0d:af:61:18:
         b0:55:73:9f:54:86:e4:80:2e:3b:fb:a9:9d:f8:6b:c7:ed:78:
         e4:dd:7b:05:d2:76:0b:e9:0e:0a:7d:c6:fc:8d:82:98:2e:0d:
         0c:b5:9c:0c:f9:ca:de:c1:d3:6a:19:c0:61:ad:a0:89:bf:af:
         c6:87:24:4e:09:4b:7c:8f:4e:e4:bf:02:e7:27:0c:5c:ac:88:
         6e:c4:27:32:5b:77:16:65:59:13:c8:1d:0a:17:29:25:72:b3:
         73:1f:71:70:6f:c1:19:38:14:b2:56:f5:cf:a2:65:bb:8c:61:
         1a:84:a0:f0:e5:f6:c3:31:0c:ad:b6:83:9c:cb:7e:d8:da:ad:
         f2:f9:ab:fa:dd:80:b0:ba:27:45:f0:67:f7:f9:65:6a:7b:66:
         ca:a5:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----