Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/whCRgXVTddlhnPhUbmjUeQA70bE.roa
File:                     whCRgXVTddlhnPhUbmjUeQA70bE.roa (raw, json)
Hash identifier:          hveeeAfUmY43b/i5W9bD9J7qF7KQxj2G9AY0nHzEN2I=
Subject key identifier:   C2:10:91:81:75:53:75:D9:61:9C:F8:54:6E:68:D4:79:00:3B:D1:B1
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       22
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/whCRgXVTddlhnPhUbmjUeQA70bE.roa
Signing time:             Tue 01 Mar 2022 01:28:03 +0000
ROA not before:           Tue 01 Mar 2022 01:28:03 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     10011
IP address blocks:        219.100.68.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Mar  1 01:28:03 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=C2109181755375D9619CF8546E68D479003BD1B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:3c:94:d3:9b:52:ea:4e:6c:1b:a0:2e:84:
                    86:58:90:78:2e:60:6f:c1:62:48:d0:c4:d2:c3:5a:
                    f5:92:7f:bf:72:51:be:30:a2:e3:c1:4d:8a:05:97:
                    c7:b7:1c:86:9e:a9:11:f6:3e:29:9e:57:b7:66:d4:
                    28:3c:ab:99:28:e4:d2:3b:4d:ba:68:fe:b2:9f:28:
                    79:14:b8:17:5f:fe:e0:dd:b7:3c:3d:99:d3:d6:8b:
                    ac:95:4f:36:b5:c0:43:ff:fb:cc:96:73:0b:46:7b:
                    b7:2d:4c:f8:eb:24:8a:37:a6:f9:be:d1:21:48:54:
                    79:0e:06:05:e4:da:76:31:0d:5a:83:d6:4b:13:25:
                    6c:8f:d8:14:20:4f:92:47:ac:12:d7:65:9b:4d:bc:
                    90:3b:43:0f:9f:89:03:3b:94:8a:c5:68:a7:87:07:
                    ad:89:dc:b2:86:ca:de:d3:a7:14:cb:3c:d5:26:57:
                    62:f4:bc:5a:f6:09:6f:bf:8f:f4:92:09:01:df:22:
                    82:7d:3c:47:d3:51:1f:13:25:5e:65:9b:a1:e2:77:
                    15:b3:f8:90:68:8d:d2:68:23:62:48:b1:d6:fc:e6:
                    3b:c5:3a:e9:b0:e4:c4:c3:25:91:bd:15:8a:8f:66:
                    ba:e9:8d:1b:5e:6d:78:35:10:9f:76:42:0e:4a:38:
                    0d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:10:91:81:75:53:75:D9:61:9C:F8:54:6E:68:D4:79:00:3B:D1:B1
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/whCRgXVTddlhnPhUbmjUeQA70bE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:53:36:ef:52:ef:41:27:30:e9:4f:2d:e7:d1:cc:c6:ee:8e:
         7d:b0:7e:6c:a1:04:96:b3:c6:15:1d:72:6f:65:19:cc:ff:94:
         c0:03:31:2f:4b:04:5c:2f:38:3b:f5:c6:07:be:e1:45:ed:27:
         7f:27:56:41:58:b2:d5:bf:4a:ad:99:a4:1c:6a:1a:8e:0d:95:
         61:6c:9c:af:bd:51:bb:7a:a9:43:99:37:cd:eb:5a:69:ff:33:
         13:a9:f3:84:60:bc:44:3d:38:ef:1a:6b:80:84:c8:b4:cf:a2:
         2e:84:21:0d:6f:3f:7b:1d:8e:b1:52:72:84:bf:06:94:c8:e1:
         4e:94:60:b2:16:6a:d7:49:d7:a1:a8:ed:69:33:3e:7c:ff:71:
         cb:ff:b8:2b:90:f3:a4:84:aa:94:cf:82:07:7a:2e:d2:5a:39:
         80:12:c3:1d:7f:42:17:7c:c2:42:df:d6:5a:c0:7d:bd:62:cb:
         bb:7b:0a:43:31:d5:5f:59:f1:ef:2b:df:c6:e9:25:8f:40:82:
         fd:b1:ab:28:6c:a3:ff:92:93:51:37:34:54:17:93:eb:0c:ae:
         0b:5a:68:80:7e:4a:cb:48:db:62:40:d5:62:04:78:63:ec:9d:
         62:5f:d9:c4:3b:11:a6:09:09:34:ef:23:48:b3:c0:f5:f3:38:
         cf:7c:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----