Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CVXD0cz5P-qwBVmd6V-o6giIHPg.roa
File:                     CVXD0cz5P-qwBVmd6V-o6giIHPg.roa (raw, json)
Hash identifier:          HNRUtet9l76ChdIZ0ijBR36eyceS/87qHxS0ZPVjjF8=
Subject key identifier:   09:55:C3:D1:CC:F9:3F:EA:B0:05:59:9D:E9:5F:A8:EA:08:88:1C:F8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0103
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CVXD0cz5P-qwBVmd6V-o6giIHPg.roa
Signing time:             Tue 14 Jun 2022 09:58:09 +0000
ROA not before:           Tue 14 Jun 2022 09:58:09 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        210.238.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:58:09 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=0955C3D1CCF93FEAB005599DE95FA8EA08881CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:8f:75:81:e8:6a:f6:99:30:f6:1f:2d:4c:
                    8f:a8:44:77:3b:d2:cc:c9:f8:71:7b:59:7e:96:3b:
                    08:8a:0f:3a:f3:6c:ef:fb:f6:55:3d:e8:33:d2:82:
                    e0:60:aa:61:42:9d:99:f0:20:0c:e2:d6:8b:94:53:
                    bd:18:4f:68:03:ef:dc:b2:6a:39:14:10:88:31:e0:
                    c2:77:48:a8:ed:79:af:2a:94:a6:25:df:bc:07:16:
                    86:82:dd:7a:c5:da:f4:b6:ae:59:13:dc:f4:df:0e:
                    a3:f8:d8:85:da:68:db:f8:40:bb:41:17:8f:d8:d0:
                    e2:a7:91:cf:a1:36:b0:38:87:9e:44:c6:b4:58:3d:
                    97:ba:bb:a4:c4:51:41:6e:7a:d9:a8:1b:d1:35:cd:
                    02:6a:09:2a:75:77:b9:32:7b:d2:e1:ad:66:cb:2a:
                    11:21:b6:69:fd:85:bc:35:3d:d6:80:98:80:6a:3a:
                    c7:0f:12:68:1e:a5:9f:dc:3b:f9:af:c4:c5:c8:4a:
                    fb:20:35:8e:a8:43:29:bf:ec:15:59:00:79:01:69:
                    a6:85:2b:ee:84:fe:42:d1:a5:69:35:99:1b:c6:39:
                    a2:f0:90:a7:80:28:43:2c:9e:e5:0b:bf:ab:8f:e5:
                    45:7c:2b:d1:86:8b:b0:8c:69:92:58:a9:d3:00:21:
                    58:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:55:C3:D1:CC:F9:3F:EA:B0:05:59:9D:E9:5F:A8:EA:08:88:1C:F8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CVXD0cz5P-qwBVmd6V-o6giIHPg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:3b:60:9a:32:f8:b4:49:cc:77:db:df:4f:2a:6e:66:ce:
         40:76:7e:c3:cc:e1:b3:a0:4d:b7:a1:84:7d:f3:de:25:ea:b8:
         16:de:1d:c9:40:b7:93:0a:3e:aa:3f:d5:75:10:2a:dc:78:d6:
         05:99:67:00:71:dd:e1:39:a4:2f:7c:a0:9f:b7:e7:d8:14:fc:
         d9:53:90:6f:34:72:3c:02:cb:4d:71:cc:40:2e:9b:98:cf:c6:
         67:fb:a9:5a:6b:46:20:c0:0e:06:b2:8b:b7:fb:57:c9:39:82:
         f3:dc:a6:a1:fa:04:8b:9a:de:3a:19:5b:0d:44:8f:36:56:58:
         af:a2:05:1c:77:ca:dc:7f:30:29:da:ee:9d:ad:0c:f8:a7:09:
         85:2c:ea:66:50:1b:18:6d:83:ed:65:dd:51:c6:81:04:57:1f:
         39:25:61:e4:d4:5e:af:a6:94:6b:6c:ad:e0:b3:98:56:19:e3:
         3a:ac:e0:ee:d6:60:ef:3a:8b:08:5c:09:78:60:27:16:a0:ea:
         66:9d:e6:35:dc:eb:d9:46:4e:1f:79:52:d5:f6:93:3a:0b:5d:
         01:54:c7:62:db:ba:74:6f:c8:d4:1f:68:c6:19:ef:43:0f:14:
         b4:72:24:dc:cb:d2:b2:3e:4f:df:6a:9f:68:5a:67:62:66:7e:
         6d:ec:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----