Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/p7XD4Jw17OW6gwANWJtiRaoH5TA.roa
File:                     p7XD4Jw17OW6gwANWJtiRaoH5TA.roa (raw, json)
Hash identifier:          QjKMdqBkLmNd6o2Gcibi5WuqMnRfkNDNXkG3ZsH1Mi8=
Subject key identifier:   A7:B5:C3:E0:9C:35:EC:E5:BA:83:00:0D:58:9B:62:45:AA:07:E5:30
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       40
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/p7XD4Jw17OW6gwANWJtiRaoH5TA.roa
Signing time:             Fri 01 Oct 2021 01:28:07 +0000
ROA not before:           Fri 01 Oct 2021 01:28:07 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.168.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Oct  1 01:28:07 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=A7B5C3E09C35ECE5BA83000D589B6245AA07E530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:b0:c7:86:6e:3f:48:ae:4e:f5:39:8d:2e:
                    01:92:09:f9:ef:cd:72:7a:4e:99:5b:df:09:b2:36:
                    5f:bc:9d:5c:6c:94:9a:5b:bf:be:93:d8:84:bc:89:
                    15:fb:ef:2b:da:e2:ba:30:a4:77:f8:0d:e4:12:1a:
                    74:02:1d:d5:21:3d:86:cc:8e:80:f3:d4:2a:49:ce:
                    61:4f:1f:b9:44:e3:5f:61:ee:a5:4c:65:91:06:0b:
                    55:79:fa:14:65:c3:89:1a:a3:74:41:7e:28:26:55:
                    5d:5d:2d:89:ff:2c:64:5e:db:d9:76:8b:d5:c1:55:
                    a6:85:17:dc:72:0f:a0:c3:28:0d:50:01:98:e6:7e:
                    56:ab:8c:71:ef:6a:d0:73:63:4e:a9:16:a0:39:01:
                    9b:04:8d:40:9e:e3:c5:53:24:37:34:d1:1e:95:db:
                    7d:aa:c1:ae:f4:55:5a:6a:f7:df:a6:5a:ab:aa:5a:
                    f3:32:b1:78:3c:d5:bd:ed:f4:bf:94:a6:cd:8d:b8:
                    1c:d4:71:3e:21:e4:ab:1d:e4:fb:66:12:ae:5f:f2:
                    2c:2b:52:a6:4b:20:32:79:71:bc:68:1d:2c:d8:1f:
                    1e:7b:81:f6:bf:7c:f0:35:07:34:39:61:d7:6b:52:
                    58:e4:d0:32:02:48:61:70:1f:b5:b5:c4:28:9d:fe:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B5:C3:E0:9C:35:EC:E5:BA:83:00:0D:58:9B:62:45:AA:07:E5:30
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/p7XD4Jw17OW6gwANWJtiRaoH5TA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:68:8e:30:4f:86:e1:67:c7:29:89:96:51:70:1f:39:9a:
         eb:cf:33:41:8f:96:fd:58:53:21:43:87:c7:9c:ab:11:a5:76:
         71:ac:1e:fe:d7:85:d5:25:49:1b:a4:d5:f9:1c:79:cf:ce:5b:
         e8:08:fa:6d:f2:47:01:c6:ba:d2:ce:08:38:86:28:a6:e8:79:
         7e:53:c3:fe:31:d8:d4:12:54:cd:72:8e:0d:ef:5b:48:0c:0f:
         7b:06:42:98:04:69:5d:d0:a2:c7:f2:ee:d7:c1:f0:4b:f7:5c:
         00:a0:ad:f0:76:ed:0d:52:c7:72:18:06:52:e1:82:3c:fc:04:
         b9:ac:83:90:a7:91:da:81:dc:c7:20:0e:a3:70:a8:20:49:5e:
         71:a7:93:b6:1c:80:78:7f:5a:4e:9e:9b:ee:28:b8:17:82:82:
         d2:75:b4:0c:d6:24:23:90:b1:4d:b3:47:36:0e:13:49:26:05:
         e3:20:9d:f6:7c:b1:9d:4a:fa:97:e2:28:13:f7:c7:8b:71:93:
         bb:0e:bc:33:55:df:2a:70:17:b2:ed:5d:93:b1:11:24:7f:f8:
         83:b8:21:53:f5:ea:50:d6:f8:4f:59:30:9e:ef:fa:6c:f8:9f:
         a0:15:e4:11:34:b0:53:d4:16:82:12:e3:5e:0c:2d:ce:5b:f4:
         d1:0b:e8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----