Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/8HQtVDtmpEucYdiNreO_1-Tit68.roa
File:                     8HQtVDtmpEucYdiNreO_1-Tit68.roa (raw, json)
Hash identifier:          i11Nn4EzBFE4ucQPkkDjG/PvGLjC5xn3i1kOmXEQtXA=
Subject key identifier:   F0:74:2D:54:3B:66:A4:4B:9C:61:D8:8D:AD:E3:BF:D7:E4:E2:B7:AF
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       A3
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/8HQtVDtmpEucYdiNreO_1-Tit68.roa
Signing time:             Sat 05 Jun 2021 03:47:34 +0000
ROA not before:           Sat 05 Jun 2021 03:47:34 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     4713
IP address blocks:        219.160.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun  5 03:47:34 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=F0742D543B66A44B9C61D88DADE3BFD7E4E2B7AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:34:e1:fd:e7:73:58:e5:31:da:71:a3:ab:15:
                    be:99:ef:e4:8d:62:d0:1c:f9:8d:83:1d:bd:1b:75:
                    c1:57:86:8c:cd:b4:f0:25:43:b7:c0:d4:25:dc:c3:
                    bb:b5:74:81:e6:b8:17:8a:6e:55:d2:ac:ee:5e:4c:
                    b0:f3:a7:99:0e:07:b1:9f:15:14:66:82:86:b5:41:
                    58:16:f1:02:6b:18:b7:ea:27:01:0e:bc:ef:b0:54:
                    10:9a:42:57:f2:a3:78:5a:6b:68:29:34:fb:6a:69:
                    a1:4f:14:79:e7:97:07:bd:f6:cd:bc:67:03:78:cf:
                    97:a2:52:07:5e:4f:bc:e2:04:7e:c6:6e:48:5c:c6:
                    c7:0d:4e:57:66:19:6b:92:09:62:80:ee:93:dc:74:
                    ad:7d:3f:60:e4:30:1f:02:de:ff:1c:4f:39:4c:71:
                    45:c0:14:9d:c7:c1:7e:ba:90:f6:8c:cd:bc:17:52:
                    c7:2d:58:23:ed:ec:dd:18:9f:ab:a1:3d:ba:27:0b:
                    09:6a:88:6d:64:fa:8f:23:4b:2a:d4:ad:b4:ae:70:
                    85:3d:c3:c3:82:e1:9e:f0:ca:a5:cc:2c:99:c5:b1:
                    1d:f5:55:1a:4b:b6:fd:2c:06:34:00:31:69:17:89:
                    37:40:e9:74:40:20:16:9a:10:60:c8:58:e4:e3:f9:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:74:2D:54:3B:66:A4:4B:9C:61:D8:8D:AD:E3:BF:D7:E4:E2:B7:AF
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/8HQtVDtmpEucYdiNreO_1-Tit68.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.160.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         31:f8:85:60:58:15:3e:d8:39:01:19:bb:41:55:fc:b4:79:4e:
         63:ab:d3:35:10:80:91:70:41:ab:27:51:37:d5:d2:f8:de:43:
         7d:13:1c:e8:a3:57:c9:4e:de:55:d4:d2:1d:58:c0:12:34:59:
         db:30:61:03:e7:f9:6d:df:83:f2:ae:53:53:45:4f:54:27:96:
         ea:4b:5d:25:2b:23:a6:85:e6:ee:98:01:8f:9e:82:69:98:3b:
         c0:de:30:94:d7:26:b6:4d:6d:4c:c0:d9:86:6d:00:99:89:f9:
         82:ba:7d:11:87:92:28:0f:af:f2:9b:ab:01:3e:99:27:b0:07:
         1f:f9:8b:bb:a9:f9:fb:28:3a:56:d7:a3:e0:80:c6:18:0c:95:
         d5:de:96:1d:59:f3:c5:6e:1c:44:0f:f8:15:c6:bd:35:49:de:
         c5:5c:05:cc:a9:4d:79:d3:e2:d5:bf:ba:03:6d:d0:cb:5e:65:
         8b:d9:3e:25:48:4f:ad:33:71:d4:5a:bd:7e:82:c4:e6:87:8b:
         f4:3d:5b:7d:9c:f6:ad:0f:4f:b8:71:b3:a0:9f:7f:1e:21:60:
         9c:5e:ac:dd:61:10:2e:3c:8c:b9:2a:ea:1f:cf:6b:45:8d:22:
         e5:c8:36:da:f1:f4:1f:04:d4:38:bf:d1:5f:b6:2b:a7:7b:58:
         81:0d:85:48
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMTA2MDUw
MzQ3MzRaFw0yMjA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYwNzQyRDU0M0I2NkE0
NEI5QzYxRDg4REFERTNCRkQ3RTRFMkI3QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqNOH953NY5THacaOrFb6Z7+SNYtAc+Y2DHb0bdcFXhozNtPAl
Q7fA1CXcw7u1dIHmuBeKblXSrO5eTLDzp5kOB7GfFRRmgoa1QVgW8QJrGLfqJwEO
vO+wVBCaQlfyo3haa2gpNPtqaaFPFHnnlwe99s28ZwN4z5eiUgdeT7ziBH7Gbkhc
xscNTldmGWuSCWKA7pPcdK19P2DkMB8C3v8cTzlMcUXAFJ3HwX66kPaMzbwXUsct
WCPt7N0Yn6uhPbonCwlqiG1k+o8jSyrUrbSucIU9w8OC4Z7wyqXMLJnFsR31VRpL
tv0sBjQAMWkXiTdA6XRAIBaaEGDIWOTj+e0jAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQU8HQtVDtmpEucYdiNreO/1+Tit68wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxLzhIUXRWRHRtcEV1Y1lkaU5yZU9fMS1UaXQ2OC5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwPboDANBgkqhkiG9w0BAQsFAAOCAQEA
MfiFYFgVPtg5ARm7QVX8tHlOY6vTNRCAkXBBqydRN9XS+N5DfRMc6KNXyU7eVdTS
HVjAEjRZ2zBhA+f5bd+D8q5TU0VPVCeW6ktdJSsjpoXm7pgBj56CaZg7wN4wlNcm
tk1tTMDZhm0AmYn5grp9EYeSKA+v8purAT6ZJ7AHH/mLu6n5+yg6Vtej4IDGGAyV
1d6WHVnzxW4cRA/4Fca9NUnexVwFzKlNedPi1b+6A23Qy15li9k+JUhPrTNx1Fq9
foLE5oeL9D1bfZz2rQ9PuHGzoJ9/HiFgnF6s3WEQLjyMuSrqH89rRY0i5cg22vH0
HwTUOL/RX7Yrp3tYgQ2FSA==
-----END CERTIFICATE-----