Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/IJNR8I4LsKGLmVly2sSyv09pRtw.roa
File:                     IJNR8I4LsKGLmVly2sSyv09pRtw.roa (raw, json)
Hash identifier:          K61MWm/OcHyO+y7ArSHYBR4eX3Rl4uNxYSgLJMhasWY=
Subject key identifier:   20:93:51:F0:8E:0B:B0:A1:8B:99:59:72:DA:C4:B2:BF:4F:69:46:DC
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       0A
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/IJNR8I4LsKGLmVly2sSyv09pRtw.roa
Signing time:             Fri 25 Feb 2022 07:12:39 +0000
ROA not before:           Fri 25 Feb 2022 07:12:39 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     17676
IP address blocks:        61.195.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb 25 07:12:39 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=209351F08E0BB0A18B995972DAC4B2BF4F6946DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:f4:d3:79:a1:6d:9b:67:71:9b:c5:22:6e:
                    ce:a8:54:01:5d:da:22:1a:a1:2a:6d:57:50:b6:b4:
                    03:f7:7a:78:ac:8a:5f:7b:b9:55:e0:2c:b8:dd:15:
                    5f:a9:5a:a2:7e:5e:19:26:59:63:9e:3e:06:ed:cb:
                    c9:54:52:77:1a:2d:5d:9d:cb:63:0b:cd:1b:5d:f9:
                    89:1b:3b:5f:89:af:4b:58:01:87:06:7c:ef:51:3b:
                    e6:69:e7:58:8b:f6:a9:95:09:a4:98:96:e3:a5:5e:
                    73:33:71:96:4b:f0:39:17:ef:b8:6c:89:59:cb:be:
                    2c:d3:90:bd:13:d1:b0:52:da:90:d0:98:31:c8:15:
                    c2:0c:36:9b:e5:9f:75:4d:1f:d0:13:04:d3:0b:43:
                    c6:43:af:3e:e8:81:a9:99:5e:8a:ed:c7:fe:dd:4d:
                    f8:a8:ec:40:ce:9d:32:47:3a:e2:ad:38:27:7a:8b:
                    06:b9:16:05:01:19:df:37:4a:39:ac:3c:45:cc:13:
                    56:70:2f:d8:33:51:15:2c:3c:1d:db:0d:6f:41:61:
                    96:81:94:34:67:fa:8e:a7:6b:1c:f5:50:fa:5f:c6:
                    05:b4:3a:fe:74:af:5b:f7:c8:85:e4:11:70:f9:60:
                    8a:59:fe:c8:1b:de:7e:31:54:f7:d1:1b:c0:96:f6:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:93:51:F0:8E:0B:B0:A1:8B:99:59:72:DA:C4:B2:BF:4F:69:46:DC
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/IJNR8I4LsKGLmVly2sSyv09pRtw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:87:ee:f0:18:5d:d2:fd:19:db:6f:ce:2d:5e:02:ee:c4:83:
         19:05:63:09:ea:3c:13:a5:0f:39:20:3f:98:c2:b9:f6:35:ec:
         e2:84:d9:f1:5d:d4:03:17:75:1a:a9:02:84:57:af:7f:80:34:
         16:3d:2d:87:e8:f0:58:a8:d9:90:80:ca:f0:cc:2a:e9:e2:ae:
         76:58:31:e4:38:dd:d6:ac:54:ca:b9:b1:6b:ef:19:8a:2f:c7:
         28:44:22:45:40:0c:24:0f:82:ac:57:b5:15:37:a3:b8:9a:10:
         76:6e:a4:ca:3d:bc:1a:93:cd:0a:e2:84:cc:8c:8c:25:91:59:
         c8:b1:cc:39:16:95:29:7f:ad:9f:41:32:1b:3e:da:50:41:e5:
         7a:e7:dc:f4:70:af:ee:7c:24:23:d0:d0:6d:5d:79:c5:e6:5b:
         fa:7a:00:d8:6f:4f:6d:39:19:ca:67:08:f9:9a:20:f1:d5:ce:
         0e:43:29:87:88:e0:3d:10:c6:7a:6d:24:04:9e:2e:df:b9:16:
         4b:8a:4b:dd:c9:d2:ca:34:91:22:db:2f:70:5d:14:91:5d:02:
         1a:55:7c:c1:ed:eb:b9:42:5b:fc:7b:14:23:3c:4f:11:05:ed:
         7e:8d:f6:ce:20:19:44:14:35:ea:a9:2c:07:1b:d2:f9:4a:e8:
         66:f6:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----