Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30201/323ii9WOctPp5ssxr78hekLkmK4.roa
File:                     323ii9WOctPp5ssxr78hekLkmK4.roa (raw, json)
Hash identifier:          WoxCPkAOjEi+w6IwG9o9ntjga6yORYK09HJPoaerG10=
Subject key identifier:   DF:6D:E2:8B:D5:8E:72:D3:E9:E6:CB:31:AF:BF:21:7A:42:E4:98:AE
Certificate issuer:       /CN=F02CCAFADD1DB0D57751B20D7729CA4DA8F4D202
Certificate serial:       02
Authority key identifier: F0:2C:CA:FA:DD:1D:B0:D5:77:51:B2:0D:77:29:CA:4D:A8:F4:D2:02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8CzK-t0dsNV3UbINdynKTaj00gI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/323ii9WOctPp5ssxr78hekLkmK4.roa
Signing time:             Tue 29 Mar 2022 07:56:09 +0000
ROA not before:           Tue 29 Mar 2022 07:56:09 +0000
ROA not after:            Wed 29 Mar 2023 07:47:22 +0000
asID:                     17530
IP address blocks:        2401:bf00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02CCAFADD1DB0D57751B20D7729CA4DA8F4D202
        Validity
            Not Before: Mar 29 07:56:09 2022 GMT
            Not After : Mar 29 07:47:22 2023 GMT
        Subject: CN=DF6DE28BD58E72D3E9E6CB31AFBF217A42E498AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:2d:ae:25:45:d2:46:3d:14:24:30:23:18:
                    82:a7:e7:d0:0a:bd:c9:2e:77:2c:a3:42:6e:64:3c:
                    53:f4:f8:db:8a:ef:c3:4b:16:e1:c7:87:0d:ee:56:
                    db:80:1e:44:05:42:40:18:40:90:11:fb:ec:de:66:
                    32:d1:db:43:a3:1f:1e:ad:74:04:57:14:3c:18:32:
                    a1:30:67:95:34:71:c6:14:3c:5b:84:e6:af:4c:9f:
                    63:12:5e:60:80:75:cd:da:0d:05:68:84:d0:0a:03:
                    f6:fb:58:f4:6b:47:62:d4:28:de:46:15:62:8f:d1:
                    0a:d7:9b:78:5b:c7:77:58:48:2c:da:53:f0:5b:08:
                    cd:52:11:48:87:73:96:d1:89:c5:b5:63:a7:28:7a:
                    9a:37:07:b2:ce:81:17:6a:21:87:26:02:ef:9a:5a:
                    78:5a:27:a8:8e:e9:22:88:ba:5e:4d:42:76:a4:89:
                    c0:ef:08:65:c0:f0:a8:4e:13:84:6f:7b:c2:e5:f8:
                    fd:c7:53:f2:36:30:1e:cf:4a:b1:a5:ea:ca:55:4f:
                    5f:6c:3d:af:ad:fa:50:39:5c:35:ef:22:59:83:dc:
                    37:e5:33:8e:32:cb:ac:a7:64:78:05:8a:ce:45:ed:
                    2e:51:d0:87:15:e7:04:70:2b:b8:7b:fa:00:f2:8f:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6D:E2:8B:D5:8E:72:D3:E9:E6:CB:31:AF:BF:21:7A:42:E4:98:AE
            X509v3 Authority Key Identifier:
                keyid:F0:2C:CA:FA:DD:1D:B0:D5:77:51:B2:0D:77:29:CA:4D:A8:F4:D2:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/8CzK-t0dsNV3UbINdynKTaj00gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8CzK-t0dsNV3UbINdynKTaj00gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/323ii9WOctPp5ssxr78hekLkmK4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:bf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:52:a3:96:59:ed:1b:1a:f5:78:a9:16:b1:1a:b4:fa:7d:a8:
         7d:3c:9c:8a:d1:0d:f3:2f:91:58:5f:ab:fa:cc:6a:67:7b:fd:
         c0:c3:c6:77:fd:6d:71:e2:96:eb:c6:d9:82:41:93:18:33:e1:
         81:15:07:76:f8:3f:9f:49:a6:3c:ba:7c:04:4e:c6:9a:8b:f8:
         5e:ba:f9:74:81:9f:28:be:f2:06:15:cd:80:e9:1f:ca:0e:3b:
         48:cf:7e:00:a7:bb:a6:4e:8d:14:ae:3a:b4:70:37:50:65:ba:
         bb:b7:f7:00:f4:ee:d4:f8:36:ac:c4:b2:ca:9b:ef:68:26:8b:
         5a:d9:29:75:8c:50:a9:68:33:1b:10:60:97:28:01:d5:dc:a9:
         7e:a1:3c:6e:ae:ad:26:68:f9:39:ee:43:cd:bc:47:11:6c:15:
         b2:df:85:3b:4c:5e:13:1f:15:b9:d5:2b:7c:35:4e:ec:0e:d3:
         2b:ab:87:4e:40:21:94:0c:3f:b2:9d:cf:78:c8:76:a2:56:40:
         f5:69:1c:0d:f9:75:79:04:57:87:39:a1:ab:cf:ca:48:9d:72:
         28:1f:23:90:df:bf:d5:01:8d:7d:84:e9:1d:2d:90:65:c9:b8:
         2f:8f:06:77:2a:57:d5:5c:70:e1:20:84:a3:60:fe:61:4c:45:
         0f:be:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----