Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30045/DN1NclIRYiW6K9Ux6FEC2CfWgK0.roa
File:                     DN1NclIRYiW6K9Ux6FEC2CfWgK0.roa (raw, json)
Hash identifier:          FoObEK5DlhgjVNjXWfoJG/KEVxh8T82dOkXLu8CUM60=
Subject key identifier:   0C:DD:4D:72:52:11:62:25:BA:2B:D5:31:E8:51:02:D8:27:D6:80:AD
Certificate issuer:       /CN=395D892753C1595E076B5F10065A048661C3079E
Certificate serial:       2D
Authority key identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/DN1NclIRYiW6K9Ux6FEC2CfWgK0.roa
Signing time:             Sun 01 May 2022 01:30:48 +0000
ROA not before:           Sun 01 May 2022 01:30:48 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2515
IP address blocks:        2001:dc2::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395D892753C1595E076B5F10065A048661C3079E
        Validity
            Not Before: May  1 01:30:48 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=0CDD4D7252116225BA2BD531E85102D827D680AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:e6:31:0f:c1:aa:6d:e3:80:9f:2a:8f:6f:
                    50:1a:53:cd:90:fe:86:9f:18:b5:5f:be:57:fa:e4:
                    16:c7:9a:0c:41:31:43:15:d9:49:61:5c:91:61:58:
                    14:da:e0:5c:33:6b:a5:2a:11:3a:3a:6a:53:75:17:
                    43:77:05:55:7c:69:34:27:8c:e3:52:c5:3d:64:e9:
                    b3:18:83:79:49:47:98:be:f7:ec:08:62:70:67:7e:
                    aa:7c:12:95:75:51:f7:b9:7d:17:3a:4e:07:2c:35:
                    46:72:cf:56:2a:05:d4:c8:c0:44:44:95:b8:ac:23:
                    08:58:b2:ee:a7:9f:87:c9:cb:1f:56:a7:36:c3:b1:
                    b9:95:8d:d3:b7:24:4a:d1:d0:31:60:aa:58:24:4a:
                    fa:5a:67:10:90:01:6b:42:1c:97:0d:7e:1e:d8:93:
                    d7:01:88:ec:24:aa:d5:a7:59:83:be:25:7d:2e:de:
                    a4:c9:22:e3:56:9c:dd:77:91:48:bd:c5:f7:57:50:
                    78:6a:0c:60:42:52:4f:03:af:17:f3:0a:1e:38:ee:
                    5f:7d:c6:58:cc:38:14:16:5c:a5:45:2d:ee:30:ed:
                    4b:ee:71:ec:4f:5b:47:69:72:af:2d:f9:3d:eb:11:
                    dc:c2:6b:32:6d:7b:52:30:4c:67:f8:d7:12:6c:f8:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DD:4D:72:52:11:62:25:BA:2B:D5:31:E8:51:02:D8:27:D6:80:AD
            X509v3 Authority Key Identifier:
                keyid:39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/DN1NclIRYiW6K9Ux6FEC2CfWgK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dc2::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:b8:eb:9b:04:7f:42:80:f8:95:35:fb:35:26:95:98:cd:bf:
         2e:69:39:10:df:64:1b:40:2c:b3:62:43:0f:65:6b:ee:4d:cb:
         b8:e7:37:7d:51:05:98:d5:62:1f:3a:6e:83:11:a0:60:0f:66:
         86:a2:ef:28:fa:09:2b:a5:d3:8e:8d:40:21:f3:da:f0:91:e6:
         55:d1:69:8a:60:04:c3:74:3a:03:95:83:14:34:5b:36:01:97:
         a3:2a:9f:fb:6c:4a:95:14:56:cb:ee:a5:85:54:ba:c4:bf:43:
         ec:03:2f:05:c6:f6:60:a5:e5:6e:27:a3:e2:b6:d1:3f:ae:4e:
         ec:36:cb:61:8d:f3:75:9c:04:5a:4f:7f:03:49:f2:ff:dd:30:
         9f:24:cf:eb:71:60:09:ee:be:db:4d:66:1f:12:84:25:2e:39:
         c0:9d:2a:2f:2a:ac:91:a4:cf:25:51:5e:f4:81:bf:84:01:bd:
         01:c1:02:5b:b0:26:61:2b:fa:67:73:07:f8:b7:22:8e:29:ae:
         2c:d3:ff:16:33:86:e0:d9:7e:9c:76:97:ca:42:d3:12:5d:15:
         de:a0:c9:43:99:f0:c2:a9:4a:4a:99:df:14:8e:a2:8c:75:aa:
         61:05:85:61:dc:79:4c:99:d1:b6:ee:5d:80:37:d1:d2:8f:99:
         d1:5d:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----