Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/VEHEhtiKd84Oi8AcqWr4FE4uf5c.roa
File:                     VEHEhtiKd84Oi8AcqWr4FE4uf5c.roa (raw, json)
Hash identifier:          f1Wbjb7ISkaKp+9o4IBM2l7r5qxmxH09q4H0SiM5Hbg=
Subject key identifier:   54:41:C4:86:D8:8A:77:CE:0E:8B:C0:1C:A9:6A:F8:14:4E:2E:7F:97
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       78
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/VEHEhtiKd84Oi8AcqWr4FE4uf5c.roa
Signing time:             Thu 20 Jan 2022 07:13:06 +0000
ROA not before:           Thu 20 Jan 2022 07:13:06 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     59099
IP address blocks:        210.231.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jan 20 07:13:06 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=5441C486D88A77CE0E8BC01CA96AF8144E2E7F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c4:b3:0e:b8:bd:82:9e:3c:5c:b6:61:66:d3:
                    5e:fe:76:cc:6f:1a:a9:bf:10:cc:e6:ff:6a:77:0b:
                    5a:0d:34:3f:ec:15:fd:db:0b:31:a6:4e:b7:a0:3d:
                    05:dc:62:00:2b:82:82:88:83:6d:6a:28:95:7d:b1:
                    11:ec:e7:e5:04:43:48:ab:98:93:86:6b:fe:98:f2:
                    c9:3e:6c:66:b0:53:6c:57:6a:e8:ee:08:7a:36:05:
                    a0:de:a5:ef:a2:07:75:94:b2:50:32:6d:1f:30:1c:
                    f9:45:10:2d:56:4a:a0:42:3b:69:6d:ed:d6:fd:de:
                    60:df:f1:e5:bf:4d:8a:9a:d9:4e:49:69:56:f4:83:
                    d6:ec:f3:96:09:b9:56:86:b9:c0:0f:01:72:94:4b:
                    d6:32:1c:f1:1f:e3:60:77:5c:20:ab:be:a2:57:90:
                    65:05:24:68:61:e6:34:8a:aa:8a:dc:41:ba:67:15:
                    21:9a:6b:a0:91:19:86:5a:bb:1e:9b:f1:68:64:e5:
                    ba:f8:d3:04:ba:f8:1a:81:6e:3c:3e:85:a0:a0:c9:
                    50:0b:01:87:8e:1d:c1:50:0f:1e:46:e6:e3:7e:68:
                    ff:4b:e7:2b:90:76:4e:d5:cd:d9:9d:f5:9a:8b:5a:
                    38:fd:9c:6a:af:a8:e1:5e:fc:c3:1a:68:42:d0:03:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:41:C4:86:D8:8A:77:CE:0E:8B:C0:1C:A9:6A:F8:14:4E:2E:7F:97
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/VEHEhtiKd84Oi8AcqWr4FE4uf5c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:28:93:8c:a9:40:6a:d3:6c:80:5e:a3:6e:10:35:db:4c:
         a9:9b:e8:dc:a1:2a:05:f3:b0:1a:74:e7:cb:86:cd:86:1d:f9:
         40:a6:1d:f1:2a:be:51:d6:4e:9c:2e:c4:eb:ac:48:a9:6c:fc:
         8c:94:b1:b6:97:c4:d0:56:4f:bd:9a:de:b6:a1:d7:4e:9b:49:
         53:48:93:ee:5f:71:a5:4d:cd:e6:bf:12:c3:c4:e6:35:fa:6e:
         d9:17:01:0b:4b:91:a9:3f:7d:6c:04:a9:2a:d9:63:2e:46:44:
         e1:19:10:16:51:11:84:bf:41:da:b3:94:3e:d7:e4:ee:f2:e3:
         cf:cc:b7:1d:8a:f6:7c:17:57:6f:8c:ee:d9:f0:d2:d8:3d:05:
         4b:61:55:8a:73:52:e9:66:fc:b0:91:06:df:ab:93:03:7e:ca:
         3b:1c:ae:d9:cd:9b:b2:ee:d0:da:b0:9e:2b:03:27:5c:e0:3e:
         93:26:75:a5:81:c2:9b:29:72:c2:73:aa:71:70:de:92:a2:1e:
         9e:81:5e:84:3c:17:af:5e:f4:44:eb:94:ca:95:ae:a6:ef:77:
         29:4c:de:87:80:05:19:12:52:6b:24:8f:4d:ed:85:fe:86:2e:
         42:8f:89:a2:70:d1:f3:99:28:0c:64:94:22:59:05:b2:7f:17:
         b4:56:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----