Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30267/ZXGyYULJZU1KIEWd9aeo4Mqv7II.roa
File:                     ZXGyYULJZU1KIEWd9aeo4Mqv7II.roa (raw, json)
Hash identifier:          aMMWIJ3sk7dwomvLF2R+EuqAPTyJnuAQ7Ipp3xDHXH0=
Subject key identifier:   65:71:B2:61:42:C9:65:4D:4A:20:45:9D:F5:A7:A8:E0:CA:AF:EC:82
Certificate issuer:       /CN=AB99FE69A832191F847C33B243442E9D68AD1433
Certificate serial:       13
Authority key identifier: AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/ZXGyYULJZU1KIEWd9aeo4Mqv7II.roa
Signing time:             Sat 19 Jun 2021 08:42:03 +0000
ROA not before:           Sat 19 Jun 2021 08:42:03 +0000
ROA not after:            Wed 15 Jun 2022 01:30:03 +0000
asID:                     14618
IP address blocks:        2401:af80:9011::/56 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB99FE69A832191F847C33B243442E9D68AD1433
        Validity
            Not Before: Jun 19 08:42:03 2021 GMT
            Not After : Jun 15 01:30:03 2022 GMT
        Subject: CN=6571B26142C9654D4A20459DF5A7A8E0CAAFEC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e8:40:b4:54:db:f5:c7:41:48:7d:0e:fd:e2:
                    1d:97:92:6d:a2:4f:bc:c3:c3:4e:da:8f:a4:15:82:
                    eb:db:73:3f:a0:80:d5:44:b4:e6:be:75:f9:e7:9c:
                    0b:f3:28:e9:9a:9c:19:96:3f:c2:a8:a2:79:de:42:
                    ac:f0:fe:4c:c9:b4:9d:3b:42:cf:e2:7a:41:dd:b3:
                    e0:68:0d:6e:f3:82:5a:c1:23:b9:eb:65:db:a7:11:
                    fe:2c:08:fe:da:53:24:7a:50:a1:de:e0:3c:2d:fb:
                    74:45:ca:f1:5d:4b:7b:8e:6a:d3:c5:6b:39:c7:c5:
                    00:2b:10:e8:6b:6f:52:35:fc:45:08:b3:29:a4:26:
                    0c:c2:99:6d:e9:1f:fd:5a:b2:9b:19:91:38:f8:8c:
                    85:8f:0c:ae:f5:bc:9c:54:77:5a:ae:6a:86:7a:4e:
                    0e:67:c6:9b:ab:d1:80:d8:70:47:32:79:4c:b1:58:
                    85:c2:32:b1:2d:55:3d:84:30:f8:5e:ad:b7:22:dc:
                    92:f4:38:61:4a:67:39:04:70:e9:dc:58:65:b2:91:
                    0f:85:8b:77:58:11:f1:ba:3f:a2:25:e8:20:cb:63:
                    fa:b6:78:21:92:49:e8:d4:64:68:0b:84:39:72:3a:
                    be:96:39:91:0f:d5:e8:00:24:ea:a6:70:86:5e:6a:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:71:B2:61:42:C9:65:4D:4A:20:45:9D:F5:A7:A8:E0:CA:AF:EC:82
            X509v3 Authority Key Identifier:
                keyid:AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/ZXGyYULJZU1KIEWd9aeo4Mqv7II.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af80:9011::/56

    Signature Algorithm: sha256WithRSAEncryption
         0a:31:9e:ff:01:54:b7:c7:c4:16:57:df:5e:c4:66:a9:81:6d:
         72:f4:31:43:52:b9:61:48:55:b0:09:96:65:0b:ca:83:59:c5:
         55:00:4d:b0:db:26:80:91:d8:46:e6:22:34:fd:3d:26:f1:b8:
         16:c6:f9:7c:84:ee:dd:6f:e6:68:34:b4:e1:f3:ed:16:0c:c2:
         eb:a5:d7:71:11:7a:3a:f8:e0:69:94:54:9e:52:07:4f:02:be:
         ba:73:ba:d1:fa:b9:a6:18:07:bb:4b:0c:75:f4:2d:08:63:7c:
         71:06:0d:f2:80:53:1b:2b:21:0d:b1:80:b3:ea:b9:3e:0d:b4:
         8d:d6:c4:69:c7:9e:da:85:c0:2e:24:11:eb:6c:83:c6:ae:b0:
         7a:11:eb:d7:16:47:fa:fa:b8:fc:e8:bc:e2:73:93:2f:2c:49:
         37:8a:80:56:35:41:c6:4b:55:f5:56:b2:19:c5:19:49:12:29:
         cd:bb:84:bf:8b:16:57:0a:b1:b6:8a:07:6b:3b:dd:9c:50:a4:
         d3:96:f1:40:6b:5a:36:df:2c:e0:3f:7e:85:15:25:f1:b9:27:
         d1:73:50:63:ed:a4:3b:4f:f7:f2:36:59:e9:06:3c:86:93:b8:
         f5:6b:cc:0e:bb:73:60:b0:d1:47:47:6c:2f:df:1b:01:36:72:
         54:04:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----