Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30358/QMfB7BBuXI3_wCee0x5jI3-9qyw.roa
File:                     QMfB7BBuXI3_wCee0x5jI3-9qyw.roa (raw, json)
Hash identifier:          pVLndQdXWrWLnCcKR6hcz3Ve2DX3tXIbBbGUhkY2sJ8=
Subject key identifier:   40:C7:C1:EC:10:6E:5C:8D:FF:C0:27:9E:D3:1E:63:23:7F:BD:AB:2C
Certificate issuer:       /CN=6BAC2A0E3E5791799D19FB3BE007F1E84D869796
Certificate serial:       0F
Authority key identifier: 6B:AC:2A:0E:3E:57:91:79:9D:19:FB:3B:E0:07:F1:E8:4D:86:97:96
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/QMfB7BBuXI3_wCee0x5jI3-9qyw.roa
Signing time:             Wed 29 Sep 2021 02:53:17 +0000
ROA not before:           Wed 29 Sep 2021 02:53:17 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     131898
IP address blocks:        2400:48c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BAC2A0E3E5791799D19FB3BE007F1E84D869796
        Validity
            Not Before: Sep 29 02:53:17 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=40C7C1EC106E5C8DFFC0279ED31E63237FBDAB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:52:a9:55:1c:d1:59:8a:de:60:ae:9d:ef:
                    63:08:b8:48:82:3a:bf:5f:5b:c3:55:5e:ed:9a:4b:
                    d5:66:a7:fb:89:2b:46:51:91:e3:45:30:51:da:c8:
                    b9:e1:a3:83:f6:40:50:a4:78:ff:f5:c9:c0:30:12:
                    3f:54:51:25:79:78:d6:38:ce:40:10:45:a1:19:d2:
                    fc:f4:53:80:f8:b2:25:1e:2b:a0:7b:f0:ab:5c:e4:
                    82:7c:30:b0:c7:39:93:32:2d:cc:b4:f9:87:13:63:
                    05:b3:fb:58:6c:9c:f3:34:c8:63:3d:8e:16:a3:4a:
                    5b:c5:b6:87:ae:82:5a:32:25:68:e4:16:5a:55:7c:
                    4a:96:cd:ed:d5:26:8e:66:61:d5:c6:ce:de:4a:0a:
                    5a:21:49:a8:4b:cb:f5:4e:6d:8c:64:d0:1a:fb:6d:
                    14:cb:f5:29:84:cc:9d:ef:d0:36:d9:78:6f:84:0d:
                    d7:a9:b5:69:37:b2:18:23:fa:f9:ac:a4:0b:f9:c4:
                    80:fb:fa:d4:37:d6:d9:27:c9:6f:d3:50:d3:9d:f8:
                    26:6b:11:c5:ca:c7:80:7d:4f:eb:a9:e4:68:dc:42:
                    46:f4:09:1f:9b:da:f9:c2:b4:fa:96:51:c9:9f:ff:
                    3b:dd:ef:5b:65:e2:23:c3:77:1d:ea:20:bb:3f:75:
                    04:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C7:C1:EC:10:6E:5C:8D:FF:C0:27:9E:D3:1E:63:23:7F:BD:AB:2C
            X509v3 Authority Key Identifier:
                keyid:6B:AC:2A:0E:3E:57:91:79:9D:19:FB:3B:E0:07:F1:E8:4D:86:97:96

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/QMfB7BBuXI3_wCee0x5jI3-9qyw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:27:20:d5:7c:f3:f7:f5:71:c5:3a:83:73:4b:07:16:56:ba:
         5c:7d:ac:f3:fa:f1:84:28:55:0a:66:d3:a9:ff:0c:e2:cf:c7:
         c0:aa:a9:d7:56:54:8a:3b:37:8b:1d:f8:4b:e0:ac:bd:12:8c:
         63:54:98:fa:37:26:1c:b5:6a:7a:5f:93:e4:83:84:29:dd:7c:
         07:9e:72:5b:f1:7a:14:2b:41:68:8a:38:b9:ab:44:5a:70:cf:
         5d:5e:9d:f1:53:b4:78:15:7c:ba:fe:21:c5:b4:3d:f6:cb:4b:
         67:ab:f0:23:ec:90:30:d9:31:b3:2e:28:86:43:47:7c:42:7e:
         37:68:23:3c:37:fc:ed:f6:cf:17:a2:1b:dd:c1:74:3d:63:5c:
         0d:73:58:63:4a:d1:cc:4c:eb:4a:dc:c4:32:b9:8b:11:24:15:
         9b:96:5f:73:26:19:a7:d3:43:39:f0:bb:fc:9c:fe:59:78:5a:
         5b:fa:18:b7:b0:00:82:b1:e7:24:e9:8a:38:47:0d:db:71:f6:
         c2:b7:b2:ee:54:1a:76:5a:3c:85:9c:7f:0c:41:d8:e3:99:5e:
         5c:a0:59:00:52:d1:8c:f4:99:b2:fb:54:91:1f:7a:c5:9a:51:
         29:38:44:6a:28:17:f7:8b:4c:bc:0f:5a:f6:21:b3:01:e4:f6:
         2d:b6:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----