Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/XqRmsK9GCBGTIVLrJaWHyaFye5U.roa
File:                     XqRmsK9GCBGTIVLrJaWHyaFye5U.roa (raw, json)
Hash identifier:          dKPyorUz66kLBRqA5LttGv8QWkrZwPJPa8m3s98NPvs=
Subject key identifier:   5E:A4:66:B0:AF:46:08:11:93:21:52:EB:25:A5:87:C9:A1:72:7B:95
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       2D
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/XqRmsK9GCBGTIVLrJaWHyaFye5U.roa
Signing time:             Sun 01 May 2022 01:30:29 +0000
ROA not before:           Sun 01 May 2022 01:30:29 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9607
IP address blocks:        2001:370::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: May  1 01:30:29 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=5EA466B0AF460811932152EB25A587C9A1727B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:4c:6e:dd:f2:4b:61:a2:ca:d2:a5:31:ca:
                    86:f6:e1:4f:ed:72:d4:44:87:8f:09:68:fd:4a:c9:
                    15:d3:2e:89:aa:7d:38:a3:6c:b3:33:87:33:e5:e1:
                    12:70:60:92:f4:33:ad:78:a0:6a:52:0e:b7:24:5e:
                    3d:b6:e8:38:72:67:d7:eb:da:43:15:0e:aa:00:a1:
                    c1:83:8f:eb:0e:29:0b:59:ab:15:2d:48:d1:90:50:
                    e0:a9:8f:66:ed:a8:1e:e7:45:91:32:48:3c:e4:a1:
                    66:95:20:c3:74:38:c1:f0:ae:af:dc:34:24:f0:08:
                    86:ca:bb:85:d8:05:60:c9:06:3f:90:a9:b8:fa:01:
                    1b:04:e0:ee:7f:a3:9c:e0:31:d0:82:b0:96:a0:af:
                    3a:12:96:95:14:ba:42:68:29:22:1c:6c:30:2d:f8:
                    f4:01:77:54:5b:3e:33:4d:91:49:41:6e:57:6a:be:
                    04:f7:84:29:03:25:34:54:0e:c5:96:aa:8e:76:49:
                    7f:2d:bd:5c:64:76:93:7f:5d:de:96:f4:eb:fe:48:
                    47:5c:c6:52:83:62:1c:4a:f4:04:45:98:18:4c:8a:
                    b2:a2:2f:c8:ee:be:eb:be:72:82:a2:f3:d1:73:31:
                    d8:df:29:c6:18:ea:2b:3e:96:1b:c9:d4:d7:d8:ab:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A4:66:B0:AF:46:08:11:93:21:52:EB:25:A5:87:C9:A1:72:7B:95
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/XqRmsK9GCBGTIVLrJaWHyaFye5U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:370::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:a6:31:d5:48:d5:41:9f:90:fb:95:45:1a:f9:2e:5f:90:88:
         88:4d:4b:89:e3:6a:ba:6f:ba:17:89:14:61:7f:f8:21:db:52:
         1d:bd:db:81:3f:40:9f:29:77:23:da:cf:f6:17:af:ca:ef:7f:
         f4:5e:a1:b5:78:73:c7:7a:43:07:a9:d1:77:ae:03:35:f9:42:
         e4:68:ce:8c:56:bf:d6:7a:37:c2:7f:14:73:a0:97:95:f8:53:
         bb:3b:90:b1:89:0e:44:71:28:aa:f9:6e:08:94:d1:3e:ce:3b:
         8f:80:20:5e:28:ce:28:3f:4e:30:95:8c:d9:d7:ac:55:8a:e4:
         08:c8:6b:cc:b7:1e:32:33:85:70:bf:af:3a:90:a2:eb:58:1a:
         7d:d8:d8:a9:69:df:d5:d3:6e:87:e7:38:dc:18:7c:6e:2c:2a:
         c5:97:45:41:76:9f:1d:d5:72:7b:ec:8d:e4:0d:5a:a7:58:f6:
         c3:c0:59:9f:1c:9a:d0:5e:16:91:80:d5:40:e6:7a:d3:69:ff:
         d7:87:49:7a:19:10:67:f8:35:21:5e:be:f0:e5:f0:9b:b5:6d:
         77:7d:d3:4c:a3:90:cd:f2:b3:7b:ae:91:6c:80:53:00:e1:f8:
         1b:c8:d5:bb:36:d8:54:6b:8d:64:38:c8:26:54:d9:12:f4:2f:
         8c:99:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----