Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/slS6PptbnfryV9x9eLyS_a03--s.roa
File:                     slS6PptbnfryV9x9eLyS_a03--s.roa (raw, json)
Hash identifier:          /Y0uSPFbOgC/PM80CamqKsnROUeIOotlGTo9V2aIqXc=
Subject key identifier:   B2:54:BA:3E:9B:5B:9D:FA:F2:57:DC:7D:78:BC:92:FD:AD:37:FB:EB
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       13
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/slS6PptbnfryV9x9eLyS_a03--s.roa
Signing time:             Tue 16 Mar 2021 04:50:33 +0000
ROA not before:           Tue 16 Mar 2021 04:50:33 +0000
ROA not after:            Tue 15 Mar 2022 08:34:35 +0000
asID:                     9351
IP address blocks:        218.228.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar 16 04:50:33 2021 GMT
            Not After : Mar 15 08:34:35 2022 GMT
        Subject: CN=B254BA3E9B5B9DFAF257DC7D78BC92FDAD37FBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:cf:03:fb:d5:84:6c:f1:82:f1:69:94:88:
                    ee:bb:77:4c:4c:8c:b7:c4:b8:df:dc:24:3b:c5:7b:
                    29:73:bc:94:b6:c3:75:03:28:0b:9c:eb:76:80:68:
                    01:19:72:49:89:50:83:4e:0e:bb:39:f9:aa:7f:a4:
                    86:c1:f7:25:3d:40:f6:8e:0d:ff:18:25:7b:35:58:
                    3b:7d:d1:97:81:d7:23:ec:23:8b:ee:da:e7:1b:57:
                    32:70:89:01:04:9b:be:8a:fe:ab:75:21:c8:a2:02:
                    c9:d6:46:47:cb:3c:0b:b1:9f:79:05:9c:24:12:4e:
                    01:6c:96:48:f1:da:d7:04:5f:da:7c:c6:f4:4e:11:
                    35:2e:f7:83:6d:d9:ef:55:39:18:d8:f1:10:2e:42:
                    fa:13:b1:7e:b0:45:d6:0b:b9:50:b8:4d:f2:06:0e:
                    87:25:dc:ad:91:d8:51:6f:3e:77:f7:26:83:0e:87:
                    11:7c:7d:06:30:05:83:54:66:67:1a:6e:3c:d9:77:
                    b8:f0:92:ac:03:bf:55:29:3e:ad:80:07:dc:01:d3:
                    45:5b:8c:af:55:8c:c2:b0:38:32:2e:4f:39:7b:42:
                    92:d9:7e:34:38:45:25:a6:9f:45:6d:94:ca:5f:b7:
                    97:34:43:5e:a3:3e:e3:5b:94:72:eb:9f:c9:c0:ff:
                    d0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:54:BA:3E:9B:5B:9D:FA:F2:57:DC:7D:78:BC:92:FD:AD:37:FB:EB
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/slS6PptbnfryV9x9eLyS_a03--s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.228.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:e9:de:fb:0d:bc:c6:a3:4f:a8:72:db:ae:54:36:78:2c:d2:
         65:a4:58:4d:0b:a8:78:73:d1:cd:f7:fc:18:f7:34:6a:ec:26:
         c9:f3:5c:61:91:53:2b:5c:2e:e7:06:bd:ab:81:31:72:23:a2:
         e7:0d:ff:d7:13:4f:9d:5e:91:54:ef:e1:52:d1:25:37:e6:f2:
         8e:82:cb:fd:0b:15:0c:39:0e:f5:b8:1d:5b:75:6d:76:4b:ab:
         54:bb:73:52:8e:d7:9d:d1:67:22:ac:6b:02:e2:92:12:19:b9:
         fe:fb:ac:4f:64:19:ca:b1:64:60:2d:69:2f:27:1b:3f:25:9b:
         5d:40:fc:e7:89:aa:fb:f7:83:5e:a1:e2:ac:11:c5:b2:20:c1:
         d1:55:89:36:81:7f:b3:4d:cc:49:d4:9c:ee:f8:f8:9e:02:b7:
         83:91:51:ba:d9:05:e5:e8:80:66:d0:0e:fe:7d:09:0c:d6:a8:
         bc:c5:fe:c1:a3:21:9a:b1:e9:6e:40:87:a4:00:f8:23:b4:3c:
         f8:96:05:20:77:5e:78:2c:9d:34:38:56:3c:ef:8c:85:88:40:
         a8:82:86:d4:64:bf:fa:e1:c3:dc:7a:68:b0:9d:3f:50:5f:a7:
         d8:c2:73:e9:2d:d3:05:be:18:8a:ed:f4:52:de:6b:00:75:6d:
         ae:7a:62:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----