Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/-LMX4Ioa3sD7YXMpXsdjWiF3x0k.roa
File:                     -LMX4Ioa3sD7YXMpXsdjWiF3x0k.roa (raw, json)
Hash identifier:          4itfPKmF3fKI3PHBphdV1V2sDo01tcV6UMwbt6A9myc=
Subject key identifier:   F8:B3:17:E0:8A:1A:DE:C0:FB:61:73:29:5E:C7:63:5A:21:77:C7:49
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       73
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/-LMX4Ioa3sD7YXMpXsdjWiF3x0k.roa
Signing time:             Tue 28 Sep 2021 08:05:33 +0000
ROA not before:           Tue 28 Sep 2021 08:05:33 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     23816
IP address blocks:        203.141.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep 28 08:05:33 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=F8B317E08A1ADEC0FB6173295EC7635A2177C749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:59:8f:ea:62:20:fd:9f:47:15:35:2f:24:
                    3c:f1:f7:57:99:73:a6:36:45:fe:53:f0:85:a1:08:
                    81:20:1a:fc:20:57:46:75:d7:fa:ef:03:16:61:47:
                    0f:85:11:a3:09:3b:b6:c9:87:e3:bc:af:38:0b:8b:
                    3c:15:5c:0f:e3:e1:0b:6c:73:f7:51:69:c0:fd:25:
                    22:bd:24:29:2b:98:6b:c5:30:3f:80:05:39:50:91:
                    84:5c:54:a7:96:75:12:e1:3f:31:06:cc:26:33:40:
                    c0:63:ef:0a:ce:00:96:d2:ed:ec:2f:5f:cf:74:06:
                    0c:3d:3e:79:53:22:27:93:09:ad:81:fd:ff:8c:2c:
                    71:ed:d0:f4:fc:54:60:44:6f:fa:90:49:4f:bd:08:
                    51:91:9d:30:28:b2:86:ae:c5:07:c7:50:9a:66:c5:
                    e9:44:a3:84:d9:1c:43:95:b2:d4:9e:ea:24:bf:d0:
                    8d:61:1f:de:71:bb:af:d0:2a:bb:a4:a8:8f:10:79:
                    e3:35:93:42:1e:cf:d7:28:4e:17:18:af:dc:6b:25:
                    72:bf:a7:f1:14:55:7e:16:36:0a:77:67:77:a5:1d:
                    0d:98:93:4b:64:3b:1c:bb:20:0b:ef:84:13:da:46:
                    eb:2a:ff:37:ec:cc:3b:30:91:71:5c:5d:78:71:81:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:17:E0:8A:1A:DE:C0:FB:61:73:29:5E:C7:63:5A:21:77:C7:49
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/-LMX4Ioa3sD7YXMpXsdjWiF3x0k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:8a:a5:a9:60:83:a5:7a:7a:4d:f3:80:1a:64:8f:79:d3:1b:
         05:56:f8:52:b9:25:21:19:99:70:c7:97:a4:f5:04:f7:2d:99:
         32:68:d8:e7:f9:59:e7:a6:84:5f:a6:13:85:9d:08:73:b4:0d:
         3c:9d:df:3b:be:a5:86:87:34:04:d3:7f:ef:d4:af:c5:a6:a8:
         ad:1f:e7:ad:e6:1d:e8:f8:d7:48:4c:18:20:6b:a3:26:d0:3a:
         7f:4f:5d:83:4d:8f:94:e0:26:8d:7c:c1:e6:17:de:96:67:9f:
         a9:e5:03:ab:76:cb:ca:e8:e7:ba:64:db:d5:31:c9:3a:63:99:
         a6:1d:04:00:b7:37:61:be:34:15:7f:3e:84:10:ca:80:8e:0d:
         e0:f2:5d:f5:23:00:fd:3f:a2:3a:9f:6d:64:f9:ed:2d:58:1d:
         81:79:60:1e:8b:7b:73:36:a1:84:b5:94:01:3f:a1:1b:88:00:
         dd:73:a1:58:4b:21:bd:6b:78:d7:77:f6:c7:49:7c:9a:67:93:
         c3:ec:19:88:c6:41:b5:ce:b7:90:47:0a:73:cf:31:d5:6c:f5:
         5f:1f:0e:8d:b4:e1:12:a2:13:bd:d4:27:29:f5:13:31:21:40:
         63:b1:8d:39:57:c5:15:da:22:7c:bf:f4:21:ce:b5:06:0a:fa:
         f1:27:13:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----