Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30053/8LNZ_y_T0b1Us2T2qf-GHQ7nlEY.roa
File:                     8LNZ_y_T0b1Us2T2qf-GHQ7nlEY.roa (raw, json)
Hash identifier:          BHV/ONqkwXGeOlJ+Wtuk5npXP2Q3KSuF/BcPNbDmIyY=
Subject key identifier:   F0:B3:59:FF:2F:D3:D1:BD:54:B3:64:F6:A9:FF:86:1D:0E:E7:94:46
Certificate issuer:       /CN=1DC3F7B86246BAF30A6ACC599C18C1CF2F73509C
Certificate serial:       19
Authority key identifier: 1D:C3:F7:B8:62:46:BA:F3:0A:6A:CC:59:9C:18:C1:CF:2F:73:50:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HcP3uGJGuvMKasxZnBjBzy9zUJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30053/8LNZ_y_T0b1Us2T2qf-GHQ7nlEY.roa
Signing time:             Tue 19 Apr 2022 07:29:08 +0000
ROA not before:           Tue 19 Apr 2022 07:29:08 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     9622
IP address blocks:        2001:e90::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DC3F7B86246BAF30A6ACC599C18C1CF2F73509C
        Validity
            Not Before: Apr 19 07:29:08 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=F0B359FF2FD3D1BD54B364F6A9FF861D0EE79446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:23:f4:02:49:7b:d0:1f:c2:0f:2e:d3:6e:6f:
                    23:88:39:97:54:cf:ed:27:12:44:89:0e:fd:4f:36:
                    24:f6:5f:37:28:98:7b:e0:bf:32:74:87:69:6f:9e:
                    57:4e:ea:67:ea:4d:c3:ef:c0:ac:ef:3e:33:3f:1e:
                    0f:6c:63:84:73:9b:d1:d4:81:e9:67:30:ab:c5:d7:
                    99:86:77:7f:b3:ea:99:95:92:27:1c:51:00:de:53:
                    03:fa:a5:21:ea:3a:f0:29:21:92:da:fc:87:31:26:
                    8d:ac:23:7e:c4:2f:c4:e6:21:85:02:2f:c3:3b:2c:
                    e9:73:3f:92:a7:23:67:1e:66:ba:be:f7:1f:c5:be:
                    f5:8c:f6:f9:a2:96:cb:44:3a:8b:19:c1:9a:b2:da:
                    1a:27:2a:d3:32:82:7e:b5:ce:81:99:f7:eb:41:bf:
                    ed:9f:b3:90:cb:04:1c:2a:35:1d:57:4f:dd:2c:a5:
                    74:bb:02:9e:59:dd:6b:f6:50:71:bf:e9:27:c2:4b:
                    46:a3:2e:36:62:5d:04:68:fe:52:79:d2:d5:ec:50:
                    55:bd:d0:f8:6b:19:f5:92:5b:04:f0:89:27:86:d4:
                    ab:93:47:bc:4a:bc:e3:15:51:5c:7f:f1:84:ea:37:
                    26:e5:0b:f4:d6:b5:08:03:35:45:a8:5d:38:19:e2:
                    05:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B3:59:FF:2F:D3:D1:BD:54:B3:64:F6:A9:FF:86:1D:0E:E7:94:46
            X509v3 Authority Key Identifier:
                keyid:1D:C3:F7:B8:62:46:BA:F3:0A:6A:CC:59:9C:18:C1:CF:2F:73:50:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30053/HcP3uGJGuvMKasxZnBjBzy9zUJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HcP3uGJGuvMKasxZnBjBzy9zUJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30053/8LNZ_y_T0b1Us2T2qf-GHQ7nlEY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:63:46:60:c7:96:dd:e9:5b:db:2a:82:6b:fc:90:da:b0:68:
         55:59:58:60:d3:1d:8a:bb:e7:87:ac:f3:91:09:cb:99:e6:68:
         8a:e7:c8:ee:4c:53:33:d8:84:49:99:77:ab:f2:70:ae:99:49:
         8d:65:b3:bc:b4:89:b7:57:fd:81:1f:79:85:e7:15:fa:ec:26:
         4f:de:9e:d1:ee:51:af:da:1a:36:eb:2e:2b:d1:eb:f9:79:2a:
         6f:68:78:8a:f8:37:74:ac:02:77:a6:fb:14:e8:e4:66:07:33:
         d9:d6:86:10:d5:37:21:18:90:a0:dc:cb:e1:28:d6:21:79:52:
         03:5f:48:d2:56:65:74:73:5c:1f:d8:bb:d1:3c:9a:7c:8f:be:
         d6:44:8e:66:b9:88:12:95:87:4e:bb:77:83:4b:7f:e7:52:0f:
         cd:67:45:ad:c5:3a:e1:a2:f9:a0:cf:91:84:20:62:7d:50:5e:
         f9:e8:f8:a1:1f:ff:6e:d4:22:06:ab:56:a2:ac:56:cb:7a:ae:
         38:eb:dd:db:b8:e0:c9:a1:34:3c:33:6b:63:73:a2:2a:bc:89:
         42:7b:95:a9:37:80:b4:2b:e1:5e:54:ff:6d:f1:f9:58:15:0d:
         6e:28:a1:09:54:96:ea:43:b7:19:cd:d9:76:f3:89:72:a9:d5:
         a0:06:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----