Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/5c5UEH7DQwiXNNWS4LZkNZ1uL8M.roa
File:                     5c5UEH7DQwiXNNWS4LZkNZ1uL8M.roa (raw, json)
Hash identifier:          J4lmatPKNVkfTqFNY/gnSXSsZXjbTgV0G/5cW8ZJLKc=
Subject key identifier:   E5:CE:54:10:7E:C3:43:08:97:34:D5:92:E0:B6:64:35:9D:6E:2F:C3
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       6D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5c5UEH7DQwiXNNWS4LZkNZ1uL8M.roa
Signing time:             Sat 08 May 2021 04:05:39 +0000
ROA not before:           Sat 08 May 2021 04:05:39 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        203.140.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:39 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=E5CE54107EC343089734D592E0B664359D6E2FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3c:a6:2c:7c:71:56:c0:2d:ff:be:a2:1e:4a:
                    b5:7a:1a:98:67:0b:5a:c6:54:24:35:66:7c:8f:1e:
                    f6:b1:ff:9c:5a:2b:e6:00:b6:21:5b:8c:4f:90:3f:
                    0a:62:d7:fa:62:72:b3:6b:a3:69:8a:7c:62:49:7b:
                    47:47:ea:f5:f1:01:31:cf:98:1c:4a:cb:75:d7:98:
                    85:68:5d:95:93:87:9f:ab:8b:e0:7c:80:52:5c:91:
                    c9:84:3f:0c:8f:3d:1d:26:06:e9:cf:d2:16:0a:88:
                    b5:5f:68:86:b4:bf:57:79:91:8d:54:51:bb:ce:0f:
                    92:90:52:cc:f6:b0:68:2a:b5:ab:e2:1f:15:ec:79:
                    4f:3a:5e:ea:ae:65:f9:61:c3:6d:30:cb:44:90:8c:
                    0e:d2:41:08:76:b5:9e:6c:4c:d9:f2:f2:70:16:35:
                    b6:5b:5c:dd:e9:0e:00:6a:9d:bd:1f:db:7e:e3:ae:
                    3a:50:b6:77:7e:3f:56:77:50:2a:dd:17:c4:cd:f9:
                    fc:7c:50:12:f9:a6:f9:3d:54:a7:88:54:e1:62:c5:
                    8d:ce:a7:45:00:70:0d:c1:03:b7:42:cd:02:49:0b:
                    51:66:47:bf:2e:a0:f4:23:79:03:c9:72:3b:32:a7:
                    9e:b9:7a:b0:55:78:3c:c6:25:9f:5c:4d:ed:56:d7:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CE:54:10:7E:C3:43:08:97:34:D5:92:E0:B6:64:35:9D:6E:2F:C3
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/5c5UEH7DQwiXNNWS4LZkNZ1uL8M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:6b:0d:63:fd:b6:f8:48:a4:37:31:ef:63:cd:89:30:e7:6a:
         18:fc:99:9b:86:bb:e5:0a:9c:be:33:0b:c6:dd:a2:fa:bd:58:
         ef:fb:aa:f0:78:0c:1d:86:0c:fe:35:b6:f8:aa:65:36:fc:60:
         d7:50:da:b3:44:5b:19:1e:f9:10:8b:59:89:50:36:de:1c:be:
         d3:11:d4:31:91:d7:5c:55:9a:70:1e:84:d1:dc:dd:76:be:61:
         eb:55:18:30:12:a1:23:78:2f:c9:09:37:96:34:54:d6:e4:3d:
         9f:9e:f3:01:b3:b5:02:34:e2:7d:dc:b8:6c:85:c6:32:5a:66:
         98:0e:99:18:b2:35:25:0c:ef:7e:fb:4f:bc:d5:c4:8c:f1:8b:
         a0:05:c1:eb:d9:80:ba:59:ab:0c:61:c7:20:35:74:16:87:18:
         9e:4e:e8:d6:8e:c2:ce:af:87:11:a2:9c:1f:c7:39:6c:16:4e:
         83:58:d2:04:31:61:3b:f4:a8:39:9e:d5:7b:1e:9e:95:38:1e:
         f5:03:0d:d5:dd:4f:8b:8a:d8:c6:db:50:70:e1:65:76:c0:8d:
         cc:5c:be:1b:fe:b6:b0:3c:35:c6:a1:45:e4:21:48:9d:c1:ce:
         55:18:b3:83:8e:90:0e:24:e1:2a:89:48:ed:3e:11:56:c0:b5:
         07:e3:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----