Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30327/B-IwxwJuu12t59Idn5nO0Swzris.roa
File:                     B-IwxwJuu12t59Idn5nO0Swzris.roa (raw, json)
Hash identifier:          38ks7aBuDMMibt+H7uJOdy/rtKgESc0AQL0zpdWtTOQ=
Subject key identifier:   07:E2:30:C7:02:6E:BB:5D:AD:E7:D2:1D:9F:99:CE:D1:2C:33:AE:2B
Certificate issuer:       /CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
Certificate serial:       1A
Authority key identifier: 62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/B-IwxwJuu12t59Idn5nO0Swzris.roa
Signing time:             Fri 01 Apr 2022 01:28:33 +0000
ROA not before:           Fri 01 Apr 2022 01:28:33 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     63786
IP address blocks:        2403:a640:200::/39 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
        Validity
            Not Before: Apr  1 01:28:33 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=07E230C7026EBB5DADE7D21D9F99CED12C33AE2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:6e:9e:e4:3e:28:5d:52:1b:1c:b9:6c:e9:
                    aa:2a:e0:1d:d9:b6:cc:92:3d:dd:91:87:d5:db:54:
                    4a:66:b6:d8:9b:d8:e9:01:3b:0d:67:4c:ad:c2:fb:
                    76:74:c2:89:9b:13:0e:61:65:d2:2f:86:ac:c6:69:
                    5a:9c:c9:0c:c4:9b:5e:39:ef:ed:dd:da:65:23:90:
                    01:6f:90:49:a8:d1:c6:ae:ae:d2:52:56:3b:36:30:
                    d6:0a:11:77:2a:71:0e:62:1c:86:c5:eb:05:b9:70:
                    69:de:44:ae:14:fc:aa:22:88:02:a2:46:0f:1e:59:
                    77:29:fb:c4:1c:d7:de:2c:b9:6b:40:c1:cb:52:ea:
                    ba:9e:da:5b:d3:08:4d:9f:3a:39:01:b2:a1:4c:f2:
                    ce:1f:c0:72:d2:82:ed:0e:1c:95:34:9e:2e:a7:07:
                    a2:b3:45:73:0d:50:20:24:d3:39:6c:7c:7f:8d:c9:
                    ea:b2:a7:bb:1a:39:2d:59:36:62:b6:91:d0:d8:b0:
                    47:e9:45:13:f4:30:e2:89:53:7c:62:8b:6b:bf:7c:
                    46:05:1d:07:c3:82:41:2e:8b:28:71:83:b6:19:17:
                    ce:2b:99:3d:19:f2:cd:46:bf:53:a4:06:9d:ed:0e:
                    59:8b:3b:13:e8:97:ea:63:92:b7:3f:80:ad:db:9c:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E2:30:C7:02:6E:BB:5D:AD:E7:D2:1D:9F:99:CE:D1:2C:33:AE:2B
            X509v3 Authority Key Identifier:
                keyid:62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/YiIdrY-QXGKTuQJh_l_svJiff6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/B-IwxwJuu12t59Idn5nO0Swzris.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a640:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         39:00:6d:23:da:e5:d0:4f:54:0f:84:4a:6a:b2:dd:c8:5b:d7:
         e1:57:80:1f:7d:66:d3:5d:31:95:b5:3b:ab:4e:c0:db:ed:2f:
         19:90:24:50:29:1e:db:2e:89:07:06:16:56:23:80:1f:8a:3a:
         37:1b:6b:63:5f:c3:8a:05:d7:f5:77:d0:b8:f2:21:b0:d0:5b:
         07:39:b0:a4:da:1e:6e:b4:80:26:f7:7e:f0:ab:14:b5:33:ec:
         74:8b:13:19:74:71:5d:36:6f:c8:f0:7a:d9:fe:63:80:f7:b0:
         c5:d6:fb:fb:3a:3a:fb:08:b5:05:5b:f3:aa:16:b3:50:12:9d:
         60:ef:1d:87:65:69:1e:8c:ed:92:97:0b:46:6e:4c:6e:61:3a:
         c4:cc:ee:0f:cc:07:d1:d5:af:e7:3b:36:8c:6b:c0:19:97:83:
         d2:23:78:18:52:94:88:49:5e:5a:68:6f:6d:4b:e8:89:94:11:
         92:e2:ed:2a:f8:c0:39:65:42:69:21:a2:88:9d:fa:ed:43:b0:
         25:70:fd:65:3d:0f:7b:f6:b2:24:60:0c:1d:a9:49:96:d7:4b:
         c7:49:24:a3:1a:69:7f:5f:41:d6:97:ce:c6:41:10:2e:2c:f3:
         e2:1f:8c:e9:e1:ae:88:a5:d6:11:34:57:ac:a5:6a:fa:3d:4f:
         f8:a5:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----