Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30286/moIwhHMc0N5Lo52XFJAgqqqjBTo.roa
File:                     moIwhHMc0N5Lo52XFJAgqqqjBTo.roa (raw, json)
Hash identifier:          XqSp9z8VgoCQVESDpeew6vDMXQ124EIpLaWs9Q+UXsg=
Subject key identifier:   9A:82:30:84:73:1C:D0:DE:4B:A3:9D:97:14:90:20:AA:AA:A3:05:3A
Certificate issuer:       /CN=0CE9148428894A9D99226AC1F46D15383D64D856
Certificate serial:       02
Authority key identifier: 0C:E9:14:84:28:89:4A:9D:99:22:6A:C1:F4:6D:15:38:3D:64:D8:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/moIwhHMc0N5Lo52XFJAgqqqjBTo.roa
Signing time:             Tue 15 Feb 2022 07:05:03 +0000
ROA not before:           Tue 15 Feb 2022 07:05:03 +0000
ROA not after:            Wed 15 Feb 2023 06:55:42 +0000
asID:                     23805
IP address blocks:        2405:fc80::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE9148428894A9D99226AC1F46D15383D64D856
        Validity
            Not Before: Feb 15 07:05:03 2022 GMT
            Not After : Feb 15 06:55:42 2023 GMT
        Subject: CN=9A823084731CD0DE4BA39D97149020AAAAA3053A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a8:1a:f3:94:e9:b7:6e:c3:57:15:ab:ba:2e:
                    74:f1:cd:fa:c9:80:7e:bc:93:24:b2:cc:65:b1:a6:
                    9f:81:ac:d4:d2:b6:7d:31:de:6c:c6:5b:a7:02:67:
                    34:be:65:53:e8:f4:46:6a:18:9e:e7:27:9c:7c:d0:
                    dc:61:05:79:f3:78:3f:67:61:3e:8a:a5:16:30:09:
                    f9:3e:b7:d6:fc:f5:8c:a5:f4:f5:ed:10:c9:05:f5:
                    95:72:58:68:4d:26:ad:6c:7f:6b:f9:c1:78:e3:1c:
                    9f:da:8b:5d:b6:4c:ea:05:7d:74:0d:d4:41:b0:da:
                    83:26:21:1d:1f:54:c2:e2:40:f3:b2:5c:3f:5a:57:
                    04:29:f6:94:f5:ab:7a:68:61:2f:64:6d:55:bb:c9:
                    05:6e:6b:9d:f1:b1:f2:7a:ef:e5:62:8f:8d:14:dd:
                    eb:3c:2b:4e:92:ae:3a:52:61:da:62:2b:7b:e5:00:
                    04:e1:62:a8:12:77:8c:cc:f2:bb:e9:cd:68:eb:17:
                    8c:36:a9:17:cd:f9:a3:48:63:d2:6b:d0:11:1a:c6:
                    d3:47:41:b5:48:0d:29:7c:75:f9:22:57:74:93:7e:
                    51:5c:3c:84:21:05:98:9e:34:90:0d:8c:64:2c:b8:
                    f8:84:b7:75:1a:8e:88:98:7d:22:87:02:1d:13:10:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:82:30:84:73:1C:D0:DE:4B:A3:9D:97:14:90:20:AA:AA:A3:05:3A
            X509v3 Authority Key Identifier:
                keyid:0C:E9:14:84:28:89:4A:9D:99:22:6A:C1:F4:6D:15:38:3D:64:D8:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/DOkUhCiJSp2ZImrB9G0VOD1k2FY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/moIwhHMc0N5Lo52XFJAgqqqjBTo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:fc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:44:66:73:e3:4a:ea:da:76:9b:b1:39:dc:2b:c7:14:14:00:
         ad:24:9f:22:40:ec:07:66:f7:0f:9b:e4:fc:59:d0:5c:d2:e4:
         ba:f3:d6:68:76:c8:99:21:a9:7f:61:eb:a4:75:64:39:6a:af:
         4d:57:6c:c0:a5:78:6c:1d:76:1b:6c:e9:a6:43:dd:3a:1f:84:
         68:77:f5:05:66:84:96:d8:c8:47:82:3b:96:9c:07:58:a7:0f:
         85:81:09:47:2a:b8:ab:7e:21:7a:b5:f2:d9:c8:b8:48:bb:00:
         b9:29:0c:bc:ef:b8:bd:db:5c:91:e5:d2:91:19:85:fc:f4:95:
         9c:53:18:f4:09:6f:4c:99:36:2e:a3:52:60:60:76:3c:fd:4f:
         ed:4a:ca:02:35:2c:ea:51:76:fe:7c:37:b7:96:95:a0:31:ae:
         ab:00:c6:10:b9:5d:34:00:96:82:8c:0c:dc:cb:76:5a:2f:e1:
         07:d9:06:78:2e:f8:e9:5e:97:12:48:ac:e7:8d:e2:11:8e:79:
         b0:7a:cb:7c:b5:b3:ba:95:5c:59:5e:21:b2:91:62:1a:75:ff:
         6d:b2:12:d4:3e:7d:63:d7:88:e5:a5:56:d2:b5:14:16:7f:97:
         f0:fa:c5:22:1c:20:99:10:7d:60:30:10:93:90:b3:81:ad:3f:
         39:2d:c9:49
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQ0U5
MTQ4NDI4ODk0QTlEOTkyMjZBQzFGNDZEMTUzODNENjREODU2MB4XDTIyMDIxNTA3
MDUwM1oXDTIzMDIxNTA2NTU0MlowMzExMC8GA1UEAxMoOUE4MjMwODQ3MzFDRDBE
RTRCQTM5RDk3MTQ5MDIwQUFBQUEzMDUzQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO2oGvOU6bduw1cVq7oudPHN+smAfryTJLLMZbGmn4Gs1NK2fTHe
bMZbpwJnNL5lU+j0RmoYnucnnHzQ3GEFefN4P2dhPoqlFjAJ+T631vz1jKX09e0Q
yQX1lXJYaE0mrWx/a/nBeOMcn9qLXbZM6gV9dA3UQbDagyYhHR9UwuJA87JcP1pX
BCn2lPWremhhL2RtVbvJBW5rnfGx8nrv5WKPjRTd6zwrTpKuOlJh2mIre+UABOFi
qBJ3jMzyu+nNaOsXjDapF835o0hj0mvQERrG00dBtUgNKXx1+SJXdJN+UVw8hCEF
mJ40kA2MZCy4+IS3dRqOiJh9IocCHRMQGpsCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBSagjCEcxzQ3kujnZcUkCCqqqMFOjAfBgNVHSMEGDAWgBQM6RSEKIlKnZkiasH0
bRU4PWTYVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyODYvRE9rVWhDaUpTcDJaSW1yQjlHMFZPRDFrMkZZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRE9rVWhDaUpTcDJaSW1yQjlHMFZP
RDFrMkZZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMjg2L21vSXdoSE1jME41TG81MlhGSkFncXFxakJUby5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBfyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCpRGZz40rq2nabsTncK8cUFACtJJ8iQOwHZvcPm+T8WdBc0uS689ZodsiZ
Ial/YeukdWQ5aq9NV2zApXhsHXYbbOmmQ906H4Rod/UFZoSW2MhHgjuWnAdYpw+F
gQlHKrirfiF6tfLZyLhIuwC5KQy877i921yR5dKRGYX89JWcUxj0CW9MmTYuo1Jg
YHY8/U/tSsoCNSzqUXb+fDe3lpWgMa6rAMYQuV00AJaCjAzcy3ZaL+EH2QZ4Lvjp
XpcSSKznjeIRjnmwest8tbO6lVxZXiGykWIadf9tshLUPn1j14jlpVbStRQWf5fw
+sUiHCCZEH1gMBCTkLOBrT85LclJ
-----END CERTIFICATE-----