Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/0l-vU963DG-a0yolGTXCc9KhQ3E.roa
File:                     0l-vU963DG-a0yolGTXCc9KhQ3E.roa (raw, json)
Hash identifier:          PvXKh/U9efvh6mzx2emZFkViRJm1D8Qzm5pj8HY9BBU=
Subject key identifier:   D2:5F:AF:53:DE:B7:0C:6F:9A:D3:2A:25:19:35:C2:73:D2:A1:43:71
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       4F
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/0l-vU963DG-a0yolGTXCc9KhQ3E.roa
Signing time:             Tue 25 May 2021 02:42:11 +0000
ROA not before:           Tue 25 May 2021 02:42:11 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9607
IP address blocks:        203.141.48.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May 25 02:42:11 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=D25FAF53DEB70C6F9AD32A251935C273D2A14371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:ed:89:07:a8:00:af:13:c0:b5:72:39:66:
                    91:b1:f9:ed:fc:8c:87:7d:1d:3c:ec:ae:53:b7:a1:
                    c7:80:93:4e:14:7a:fb:51:ff:6b:07:8f:20:50:3d:
                    36:09:d4:96:6a:71:85:12:9f:03:de:58:11:13:aa:
                    25:25:69:ca:94:0d:c8:24:e1:b1:25:aa:da:b3:da:
                    35:71:e5:33:cc:18:25:44:ce:6c:d3:54:2a:63:c1:
                    35:9f:41:ef:a8:ac:12:0e:73:0b:75:5a:9a:ca:7a:
                    81:8d:bb:15:77:60:0a:c7:ff:90:88:6f:e0:4a:c2:
                    c1:7f:7c:29:d3:4e:ef:76:41:73:a1:16:fd:be:01:
                    ff:3a:e1:7e:32:03:f2:e5:01:1b:09:e9:ce:ec:36:
                    f1:94:f4:7d:49:93:4b:fe:58:7c:81:7e:09:5b:00:
                    91:b4:95:70:f5:57:fc:b8:57:12:d7:cb:96:08:e5:
                    78:6d:46:3c:2c:58:4f:5e:4b:c9:fc:01:89:16:7c:
                    5b:1e:87:69:96:3b:45:74:ee:83:2d:fc:8b:42:02:
                    b6:9a:1e:d7:36:7c:18:3d:66:f8:eb:2f:9f:8b:0a:
                    91:1f:26:7d:04:65:4e:e1:a1:1e:3e:4b:f2:76:7b:
                    14:4f:8b:c6:aa:d2:5b:a0:ff:92:a9:fb:97:46:4d:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5F:AF:53:DE:B7:0C:6F:9A:D3:2A:25:19:35:C2:73:D2:A1:43:71
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/0l-vU963DG-a0yolGTXCc9KhQ3E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:76:aa:11:8b:a1:d5:9f:c2:4d:bd:d6:ca:c3:75:ed:22:94:
         3a:cf:25:ac:b4:8b:7c:70:2e:11:d7:4f:29:6d:5d:31:92:9a:
         c5:23:06:11:cb:7b:58:0f:e8:f4:9c:40:6c:83:e4:13:29:88:
         33:ea:2f:f9:dd:8a:8d:dc:25:e8:14:6d:d8:27:01:b3:81:d4:
         89:4c:ff:ee:35:e1:0a:ba:cc:8d:c1:7d:05:48:08:06:06:7c:
         e0:d6:a9:49:7c:36:e0:b2:15:d2:b0:4d:de:1c:4d:27:c8:2b:
         f6:9b:4f:8e:23:3b:77:38:63:b2:88:68:f2:92:d9:dd:6c:24:
         2b:ee:f6:28:6d:06:d9:b3:47:e6:34:df:b6:06:5a:e0:98:a6:
         a4:20:53:46:4d:80:f4:7f:2d:7d:a3:bd:24:5f:3f:43:78:49:
         83:23:34:60:80:57:2c:23:b1:f2:4b:9e:57:24:dc:5d:67:55:
         0f:79:b6:3b:f3:b8:6d:51:c8:c9:82:0d:eb:a8:13:e9:01:a4:
         75:86:8c:09:0c:fc:37:d3:33:92:f7:6f:72:9a:85:16:30:0e:
         37:c8:33:bc:36:79:a3:ce:10:89:b8:f4:28:6b:1c:30:3a:d2:
         b0:90:5f:a2:4b:5f:41:10:b3:1f:37:de:b7:c7:e1:62:b8:dc:
         fd:1c:58:22
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQTVB
Q0FDMjk5MEJEOEY4NjU1QzBDNzIxQkFDRkYwMzBBNTlEMUZDMB4XDTIxMDUyNTAy
NDIxMVoXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoRDI1RkFGNTNERUI3MEM2
RjlBRDMyQTI1MTkzNUMyNzNEMkExNDM3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMyI7YkHqACvE8C1cjlmkbH57fyMh30dPOyuU7ehx4CTThR6+1H/
awePIFA9NgnUlmpxhRKfA95YEROqJSVpypQNyCThsSWq2rPaNXHlM8wYJUTObNNU
KmPBNZ9B76isEg5zC3Vamsp6gY27FXdgCsf/kIhv4ErCwX98KdNO73ZBc6EW/b4B
/zrhfjID8uUBGwnpzuw28ZT0fUmTS/5YfIF+CVsAkbSVcPVX/LhXEtfLlgjleG1G
PCxYT15LyfwBiRZ8Wx6HaZY7RXTugy38i0ICtpoe1zZ8GD1m+Osvn4sKkR8mfQRl
TuGhHj5L8nZ7FE+LxqrSW6D/kqn7l0ZN4m0CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTSX69T3rcMb5rTKiUZNcJz0qFDcTAfBgNVHSMEGDAWgBQKWsrCmQvY+GVcDHIb
rP8DClnR/DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzU0L0Nsckt3cGtMMlBobFhBeHlHNnpfQXdwWjBmdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0Nsckt3cGtMMlBobFhBeHlHNnpfQXdw
WjBmdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zNTQvMGwtdlU5NjNERy1hMHlvbEdUWENjOUtoUTNFLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsuNMDANBgkqhkiG9w0BAQsFAAOCAQEA
M3aqEYuh1Z/CTb3WysN17SKUOs8lrLSLfHAuEddPKW1dMZKaxSMGEct7WA/o9JxA
bIPkEymIM+ov+d2Kjdwl6BRt2CcBs4HUiUz/7jXhCrrMjcF9BUgIBgZ84NapSXw2
4LIV0rBN3hxNJ8gr9ptPjiM7dzhjsoho8pLZ3WwkK+72KG0G2bNH5jTftgZa4Jim
pCBTRk2A9H8tfaO9JF8/Q3hJgyM0YIBXLCOx8kueVyTcXWdVD3m2O/O4bVHIyYIN
66gT6QGkdYaMCQz8N9MzkvdvcpqFFjAON8gzvDZ5o84Qibj0KGscMDrSsJBfoktf
QRCzHzfet8fhYrjc/RxYIg==
-----END CERTIFICATE-----