Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/OIAAaImyCqQiOxmbVPXtNCrheoM.roa
File:                     OIAAaImyCqQiOxmbVPXtNCrheoM.roa (raw, json)
Hash identifier:          Ct7HinWipb0nf2hc+FCWdlLoBPQZCvdrSHU6hxLo2nY=
Subject key identifier:   38:80:00:68:89:B2:0A:A4:22:3B:19:9B:54:F5:ED:34:2A:E1:7A:83
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       B2
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/OIAAaImyCqQiOxmbVPXtNCrheoM.roa
Signing time:             Fri 01 Apr 2022 01:28:10 +0000
ROA not before:           Fri 01 Apr 2022 01:28:10 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        210.160.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:10 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=3880006889B20AA4223B199B54F5ED342AE17A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:71:fb:9f:63:a8:d5:a4:0d:7d:31:ad:58:
                    f4:ff:02:50:7f:1a:f6:87:b1:2d:f0:3d:4b:10:12:
                    15:d0:69:53:34:9a:8b:fd:22:c2:ae:b5:bf:3b:c9:
                    ec:b2:00:0c:94:80:57:67:2e:6c:0e:8d:ac:9b:01:
                    f6:13:fd:04:8d:c5:68:11:3c:99:04:17:d4:97:28:
                    1d:fe:44:24:03:06:4d:55:8e:f5:c2:1e:cb:3e:77:
                    9c:18:10:97:62:6b:0d:30:c7:cb:2d:f1:2e:52:46:
                    cc:33:00:62:c3:48:61:cd:e5:22:2e:35:c2:49:de:
                    3c:4f:82:33:b4:91:f7:1b:7c:01:80:b8:bd:4c:a1:
                    87:20:57:9f:7b:d9:25:73:0e:c2:ed:12:4e:94:d9:
                    42:59:8a:a1:7a:ac:30:e5:11:e6:d7:0d:ee:fd:55:
                    d1:c3:42:ea:f7:8f:81:d3:ec:e4:9e:b3:0f:37:b5:
                    3f:92:66:df:a2:93:fb:36:2a:79:b9:c5:25:fe:1d:
                    2c:bb:c0:0e:11:6a:93:50:c1:a2:88:78:b3:ee:06:
                    18:a2:1c:15:2d:7e:72:36:eb:ae:56:06:9f:0c:2a:
                    82:a0:5e:5e:2f:ff:ce:bd:fe:8a:04:28:ca:31:0d:
                    bf:cb:1a:e3:b7:8e:cd:37:75:c9:9e:27:7e:90:26:
                    09:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:80:00:68:89:B2:0A:A4:22:3B:19:9B:54:F5:ED:34:2A:E1:7A:83
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/OIAAaImyCqQiOxmbVPXtNCrheoM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         65:66:f2:d7:73:b5:f3:b5:22:d4:45:e3:3b:72:7f:b4:9f:16:
         b9:84:64:0c:78:c8:dc:ae:8d:6d:84:85:78:4c:01:ac:79:ad:
         62:13:1c:22:74:04:dd:d1:40:4e:ef:4f:30:04:3a:82:c8:6e:
         17:5c:d9:45:75:78:40:32:d4:d4:6b:54:71:6b:9f:90:fa:f5:
         26:7c:82:a8:55:32:d0:96:0f:d7:cd:ed:09:12:66:c9:39:1b:
         33:22:07:2f:3d:e8:f1:fc:bf:79:5d:a1:c8:05:2a:7c:87:ff:
         0b:bb:1c:98:dd:e9:8b:f1:8f:ba:d7:30:b6:07:6b:80:1f:d9:
         f6:d6:40:8e:e4:e4:78:3a:18:7d:f5:86:7b:5b:d4:c1:64:71:
         6f:17:31:99:21:62:eb:34:87:05:bb:87:8c:29:cb:f5:74:ec:
         6b:5f:d2:be:e2:ba:73:ba:69:5f:42:16:eb:30:84:32:e4:12:
         96:ac:4a:97:bb:b9:a1:f3:5b:a6:90:92:22:9c:1a:1f:1c:d3:
         29:75:07:a1:a4:ee:7c:02:37:f7:1c:d1:ec:a5:0f:51:40:6b:
         3e:95:4f:2c:43:59:ec:49:07:d0:97:8f:57:ec:4e:ac:73:84:
         a5:4c:dc:a5:ac:7b:fb:22:4d:7b:92:03:ac:c6:2c:71:8f:d2:
         d5:ee:cb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----