Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/c7NvfiA0upuZkIq2-9Rff7aMcas.roa
File:                     c7NvfiA0upuZkIq2-9Rff7aMcas.roa (raw, json)
Hash identifier:          wM6kPEzgIjoD6Xb/wByKG4N2p/hNsLwu4tSO+0Tr4S8=
Subject key identifier:   73:B3:6F:7E:20:34:BA:9B:99:90:8A:B6:FB:D4:5F:7F:B6:8C:71:AB
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       89
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/c7NvfiA0upuZkIq2-9Rff7aMcas.roa
Signing time:             Sat 08 May 2021 04:05:47 +0000
ROA not before:           Sat 08 May 2021 04:05:47 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        153.248.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:47 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=73B36F7E2034BA9B99908AB6FBD45F7FB68C71AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:18:20:61:fc:5e:71:90:1b:b3:8e:99:4c:
                    f9:ef:2b:7f:7a:06:dd:b6:78:08:7c:53:b2:d1:41:
                    98:ee:52:4d:f5:df:29:97:43:16:63:24:06:98:90:
                    14:df:7f:2d:3d:98:37:7b:f5:a2:ad:22:82:e9:42:
                    e4:77:67:f3:f0:c9:28:a1:11:a2:31:63:57:ec:d5:
                    6c:f6:89:20:6d:93:d0:c3:77:1e:50:ab:3e:af:ca:
                    4b:1b:d8:ef:4a:6a:73:af:42:3d:4f:cf:bf:7d:32:
                    a6:3f:0d:07:7a:8c:91:b9:e3:c4:73:3d:ba:4c:8a:
                    b1:7d:77:76:3c:4b:ec:14:2e:82:d4:d5:12:1c:95:
                    a0:ea:d8:fb:07:a7:d7:4e:c2:bf:44:69:b5:b1:19:
                    78:dd:d6:ca:a7:a0:e5:27:39:53:ab:e1:6a:08:3b:
                    6d:1d:b6:b8:3f:32:c5:2f:03:18:23:a8:53:93:ca:
                    c7:b2:41:11:80:b5:4b:ee:e3:9d:47:e0:f1:00:fd:
                    e8:98:ff:07:fc:5a:a6:51:42:88:c3:9e:09:bf:7e:
                    5b:cc:af:5b:0d:0e:ff:df:98:49:0d:1d:ef:d6:b1:
                    0d:6a:fa:5d:69:7e:9b:45:a6:d7:38:ea:ea:09:c9:
                    05:ea:a8:ca:61:f7:04:20:6d:c5:09:24:43:3e:b2:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B3:6F:7E:20:34:BA:9B:99:90:8A:B6:FB:D4:5F:7F:B6:8C:71:AB
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/c7NvfiA0upuZkIq2-9Rff7aMcas.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.248.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b8:72:08:43:4a:0a:b8:4c:15:3f:01:1f:46:9f:f8:6c:4c:7b:
         89:d7:99:96:f1:41:c2:58:d4:1e:eb:42:32:bd:bd:ec:f1:5e:
         34:fe:72:40:66:9c:c3:d2:eb:5c:07:42:56:16:88:a7:e9:17:
         01:7d:ae:c3:41:7e:92:da:42:42:d7:2a:92:a0:72:69:31:96:
         6c:bc:e4:06:c1:73:87:04:09:11:2e:40:20:bf:a8:26:f4:17:
         e3:e2:f3:d1:5a:8e:6d:5d:54:cf:f4:38:a8:2a:13:30:3e:60:
         5c:2a:96:ad:9a:9c:7c:ee:ba:ff:2f:e9:4e:37:46:8b:aa:7e:
         a6:94:e9:6f:ca:bb:e6:92:7c:06:cc:94:90:43:51:eb:8e:e3:
         24:12:80:02:a0:60:1c:6d:2a:40:c3:a6:7d:92:ee:a1:3a:5a:
         b3:68:9f:3d:58:94:de:c5:c1:0b:8d:0a:7a:f1:78:6b:db:4c:
         d7:a6:28:01:0c:6a:b6:93:56:28:89:94:85:5a:e7:4a:7d:c6:
         db:b2:5b:72:80:10:b7:a4:80:56:ed:5e:93:6c:87:90:52:a0:
         1a:d0:0a:e2:85:ab:38:75:4b:5d:4a:99:ba:42:e3:ae:ee:cb:
         31:6b:3d:00:cd:94:bf:24:e6:47:65:1d:0a:48:3e:ec:57:6e:
         3c:8e:d0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----