Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/c8u4FCz5Wxvjpkc7qmrBUvsQJQU.roa
File:                     c8u4FCz5Wxvjpkc7qmrBUvsQJQU.roa (raw, json)
Hash identifier:          zXOogGvk1aZWzha6c6PieQnb2Wyx68Gdlf/8qmnrnws=
Subject key identifier:   73:CB:B8:14:2C:F9:5B:1B:E3:A6:47:3B:AA:6A:C1:52:FB:10:25:05
Certificate issuer:       /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial:       21
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/c8u4FCz5Wxvjpkc7qmrBUvsQJQU.roa
Signing time:             Sat 08 May 2021 08:30:54 +0000
ROA not before:           Sat 08 May 2021 08:30:54 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     0
IP address blocks:        2001:7fa:0:3::/64 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
        Validity
            Not Before: May  8 08:30:54 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=73CBB8142CF95B1BE3A6473BAA6AC152FB102505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:94:d5:8f:71:cd:77:55:9f:7e:7b:17:fe:5b:
                    5a:92:f5:88:84:02:58:14:9c:58:1c:38:b5:45:9c:
                    3f:af:cf:1e:e8:1a:3c:c4:af:9d:30:b1:34:8e:6d:
                    75:ed:67:95:62:a3:85:4f:87:27:41:b2:4b:0f:f1:
                    63:53:80:b4:f4:b6:82:f6:79:69:9c:29:c6:e7:29:
                    36:a3:47:17:34:94:bc:6f:37:88:19:32:02:dd:21:
                    eb:6a:48:17:5a:6a:ae:d2:39:64:d5:2f:94:70:38:
                    9b:76:e5:73:14:53:70:e0:e7:9a:e8:18:9d:8e:2f:
                    c8:1e:c8:0c:4d:74:6f:f2:7d:4b:b5:38:bf:55:b2:
                    52:b9:11:d7:b7:39:4e:c2:0a:e4:ab:c5:73:4a:fa:
                    ba:f2:79:05:14:a3:7e:2d:8a:f2:15:28:92:78:ab:
                    e8:1e:b5:cf:a3:c1:6a:22:1b:f4:21:2f:88:06:0c:
                    59:11:b7:d4:fa:11:c4:31:fe:43:39:92:54:25:c7:
                    15:42:d8:d8:ab:a2:64:3b:1f:4c:75:eb:6b:96:86:
                    2a:5e:b5:ad:a3:c7:c9:41:a8:12:cd:3e:c3:35:d3:
                    4c:37:e0:28:97:b3:9b:0d:aa:b6:eb:54:ad:42:b9:
                    25:f0:00:32:0c:94:fa:b9:87:8b:f5:57:6e:d6:ab:
                    9f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CB:B8:14:2C:F9:5B:1B:E3:A6:47:3B:AA:6A:C1:52:FB:10:25:05
            X509v3 Authority Key Identifier:
                keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/c8u4FCz5Wxvjpkc7qmrBUvsQJQU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:0:3::/64

    Signature Algorithm: sha256WithRSAEncryption
         2a:56:29:b1:50:2d:5c:7b:a0:ab:40:a2:3a:44:e1:86:f6:50:
         23:fc:d3:4c:f8:df:77:98:46:39:72:51:02:06:ce:4d:e5:b2:
         01:fe:ba:15:30:89:f0:de:74:24:83:99:30:c4:03:02:f5:dc:
         30:5a:67:06:bc:28:cd:ed:fa:9b:9f:88:f9:7c:b4:2f:84:88:
         a9:c5:fc:c5:bb:b1:5d:7e:67:87:b7:c9:24:ee:5f:ff:50:25:
         9d:ea:7b:35:41:64:de:48:83:5a:fd:77:5e:c5:06:a4:e1:e1:
         8c:67:66:9e:5f:87:65:57:f4:51:8d:7a:c3:49:63:7f:85:96:
         2f:a7:a0:60:77:d0:84:e1:42:61:18:a6:de:49:7d:e3:45:e2:
         81:02:2a:90:42:bb:ec:40:66:e1:ee:e2:3f:f3:ce:c8:42:6c:
         47:ff:00:82:81:cc:58:30:24:f1:aa:ae:00:cb:f5:a1:0b:02:
         c1:df:1e:56:a6:20:c1:f1:34:c3:ff:f7:b9:92:01:13:e4:c1:
         38:92:b7:fb:ef:99:89:90:0c:d4:7b:85:9f:5a:06:41:8a:59:
         0f:11:83:5e:ab:1c:18:40:78:84:65:fc:02:53:5c:e9:1d:47:
         99:e3:10:d2:be:9a:46:8f:d9:09:6b:46:a0:51:45:fa:fc:3b:
         b8:a7:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----