Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/cUAhMS4qGhmG9hkKAg36ehooxEI.roa
File:                     cUAhMS4qGhmG9hkKAg36ehooxEI.roa (raw, json)
Hash identifier:          dFKTPJc5HDlr6T9h+GELO4VkTaHGQsPSdn+hTMQRM28=
Subject key identifier:   71:40:21:31:2E:2A:1A:19:86:F6:19:0A:02:0D:FA:7A:1A:28:C4:42
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       2E
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/cUAhMS4qGhmG9hkKAg36ehooxEI.roa
Signing time:             Tue 19 Apr 2022 07:24:09 +0000
ROA not before:           Tue 19 Apr 2022 07:24:09 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     9622
IP address blocks:        203.191.208.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr 19 07:24:09 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=714021312E2A1A1986F6190A020DFA7A1A28C442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:29:e5:ff:e2:c4:f4:7d:4f:4b:84:cd:63:
                    98:8a:b2:1e:79:c7:74:65:3f:e8:ba:ab:76:61:cd:
                    ec:c0:4e:22:b9:10:62:76:f7:e0:10:98:e7:c7:bc:
                    ff:fd:63:0c:7f:bc:52:b5:f8:ac:2b:82:33:13:98:
                    e4:45:e5:94:42:78:92:db:9f:02:dd:8d:be:c5:68:
                    1f:9b:bc:00:a3:b4:3b:1e:7b:a1:65:cd:ff:23:74:
                    b0:c0:34:b6:6d:00:1f:63:4d:e5:a3:28:7a:61:98:
                    62:44:94:2b:a3:e2:cc:eb:a3:bb:13:13:68:b7:e1:
                    26:14:e2:1b:06:00:aa:23:2e:99:b2:2a:7a:bd:f8:
                    1c:a0:f0:29:fc:44:5f:cb:97:91:5f:3c:d5:1f:7d:
                    e4:ac:33:8c:84:c3:a4:22:ec:e6:d2:b1:80:8d:76:
                    d6:7c:cb:b0:d5:ba:67:f8:cd:19:25:6a:a1:c0:16:
                    ee:94:4f:ea:83:3c:80:3c:98:b1:21:6c:b3:40:37:
                    52:9d:3b:0b:57:44:0b:2e:34:4d:b5:53:0f:f3:3a:
                    ab:70:64:c2:77:73:3f:aa:7f:f7:22:3a:36:36:2f:
                    92:ad:40:74:0b:eb:ce:e4:74:43:78:11:51:4a:8c:
                    fa:53:d9:07:e1:b2:df:43:0e:cc:0a:00:1c:49:59:
                    99:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:40:21:31:2E:2A:1A:19:86:F6:19:0A:02:0D:FA:7A:1A:28:C4:42
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/cUAhMS4qGhmG9hkKAg36ehooxEI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.191.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:1e:08:4e:59:07:5b:0d:4a:26:2c:53:9a:4b:dd:63:6c:bb:
         6c:06:03:85:95:24:94:f1:a1:67:14:8f:6b:31:96:f9:ef:76:
         58:7a:bb:bc:f0:7a:15:bd:4d:b7:e0:5e:23:99:3b:cd:1e:3a:
         5f:4c:3b:48:86:cc:4b:2c:ff:86:04:94:1e:62:67:9a:b2:d3:
         76:88:93:8b:56:da:ea:14:3d:9f:58:7c:07:a0:b7:1d:2c:88:
         13:81:07:35:ff:c5:eb:56:e3:c6:9e:46:81:01:15:f8:9d:65:
         35:6a:0b:79:74:bd:1d:6e:53:39:5c:84:ca:67:29:cc:14:cf:
         3d:b1:75:98:80:a6:97:72:83:f4:09:d4:cb:57:2d:26:f0:b9:
         89:1a:30:bd:38:d6:09:44:1b:c6:2d:54:4b:ee:97:82:d1:98:
         92:61:b7:bc:57:1b:cb:a3:60:60:38:41:28:62:ee:ba:3c:98:
         63:99:84:08:64:32:4b:ae:5d:f5:4b:e7:cb:65:72:c0:c2:18:
         e8:db:ba:b9:94:fc:40:b9:d5:86:cc:96:82:4f:6f:3e:1c:50:
         f3:c2:ae:a7:76:1c:f4:79:f8:da:2f:00:e0:45:93:5d:b1:8b:
         87:f7:41:63:37:6e:47:45:3f:3a:5e:8a:cb:03:c5:53:23:ff:
         69:45:96:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----