Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/mcSpSxgS8VgQeq6_tWM9bCdRpH4.roa
File:                     mcSpSxgS8VgQeq6_tWM9bCdRpH4.roa (raw, json)
Hash identifier:          AZRnhXXCPuR+TVHwTb55FzDsoVaXkc7EGx58OI/yhe8=
Subject key identifier:   99:C4:A9:4B:18:12:F1:58:10:7A:AE:BF:B5:63:3D:6C:27:51:A4:7E
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       05
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/mcSpSxgS8VgQeq6_tWM9bCdRpH4.roa
Signing time:             Sat 23 Apr 2022 10:00:28 +0000
ROA not before:           Sat 23 Apr 2022 10:00:28 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     131929
IP address blocks:        103.108.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Apr 23 10:00:28 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=99C4A94B1812F158107AAEBFB5633D6C2751A47E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:6a:1b:7e:86:eb:19:0a:11:2e:7d:22:eb:
                    22:61:44:40:58:7b:83:74:dc:37:6c:31:e1:67:26:
                    f0:6d:91:f9:94:ee:7f:7d:e5:b3:55:b9:f5:3f:63:
                    12:cd:d6:0f:25:84:68:5f:b9:17:49:dc:be:b2:f1:
                    07:0b:9f:60:d4:54:95:d3:1a:b4:0f:dd:4a:61:1b:
                    ee:ad:e9:b4:05:0f:6b:93:b2:25:6b:d8:a1:8f:dc:
                    b6:1b:43:3f:69:53:64:fb:11:5d:9e:89:e4:f9:07:
                    b8:27:cf:04:50:7f:00:bb:b1:59:11:57:37:9e:97:
                    06:15:8f:59:5d:f9:d8:15:4b:e9:49:f5:41:22:ff:
                    e0:07:9a:90:56:bf:a3:aa:11:d6:84:dd:f4:18:97:
                    14:c3:7d:cc:1f:be:37:64:f7:2b:3e:2c:37:d8:b9:
                    cb:2e:cb:68:b6:27:1f:35:73:c1:97:a4:d4:04:be:
                    bd:f6:77:e8:e4:de:58:17:62:fe:b3:ba:5d:20:0f:
                    13:e9:06:e9:13:bb:1b:25:ec:03:1b:91:90:6a:de:
                    53:e0:cf:e7:94:05:78:b7:f8:63:0c:bc:14:ae:de:
                    e2:df:61:3a:e8:61:f0:3b:ec:b9:7e:92:8d:54:bf:
                    bb:83:14:f3:ff:df:c8:f6:bd:56:33:41:f9:1e:f5:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C4:A9:4B:18:12:F1:58:10:7A:AE:BF:B5:63:3D:6C:27:51:A4:7E
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/mcSpSxgS8VgQeq6_tWM9bCdRpH4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:99:bb:de:3a:14:a1:b2:4f:8b:96:f8:79:11:43:80:98:b3:
         25:e3:d4:15:93:1d:f7:65:89:5d:51:5a:fa:ff:59:bd:e2:7d:
         92:11:4e:7b:5e:c0:67:b4:65:5f:1a:4f:e6:eb:cf:94:a5:48:
         8b:25:d0:e3:21:06:f5:35:2b:ca:59:39:c6:15:af:08:4c:85:
         87:5c:f5:51:fd:85:4a:1d:bb:07:48:9b:18:30:2c:66:c1:76:
         41:26:31:5a:d7:3a:75:ec:21:48:1b:7f:2e:8c:ec:90:08:2e:
         94:e3:24:51:d6:cd:af:da:04:ff:78:62:15:89:2a:ae:4a:81:
         08:3d:e4:57:3e:8f:bd:72:45:29:53:e5:73:4e:76:73:65:eb:
         d5:35:fd:d7:52:07:53:7d:9d:a9:a5:89:eb:05:7c:28:b5:65:
         4e:8d:aa:97:ea:30:f0:b8:30:50:36:85:60:7d:d7:89:35:83:
         d4:ff:d6:80:df:62:32:86:ba:05:a1:3f:24:c1:41:53:33:cd:
         c1:7a:ad:06:e4:7c:1d:24:af:ae:cd:32:c6:94:43:16:8f:11:
         e0:ac:be:3b:0f:9c:bc:ea:82:f5:c7:0d:20:a9:fe:c8:30:c0:
         55:28:8f:33:2b:3a:86:e3:8d:10:b3:68:00:4c:d8:40:35:a7:
         9e:e4:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----