Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/UgE3BdA2Xzv5K3zdiW3ueBe1B0k.roa
File:                     UgE3BdA2Xzv5K3zdiW3ueBe1B0k.roa (raw, json)
Hash identifier:          C/gUicbpwFdoXPIlKYBqUjhkVtCqR2SXxRYgzFqvplg=
Subject key identifier:   52:01:37:05:D0:36:5F:3B:F9:2B:7C:DD:89:6D:EE:78:17:B5:07:49
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       8D
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/UgE3BdA2Xzv5K3zdiW3ueBe1B0k.roa
Signing time:             Tue 01 Feb 2022 01:31:03 +0000
ROA not before:           Tue 01 Feb 2022 01:31:03 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     10021
IP address blocks:        203.167.32.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Feb  1 01:31:03 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=52013705D0365F3BF92B7CDD896DEE7817B50749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:20:27:8b:8f:20:21:fc:05:32:7b:4c:3e:
                    11:a3:d8:80:b6:1a:ff:97:4b:58:7a:cd:df:f9:9a:
                    07:ba:d7:bc:e9:3f:f7:74:87:de:35:d1:58:90:76:
                    2c:95:bb:1a:c6:17:55:c4:44:13:c9:0e:60:25:e9:
                    d8:4b:9e:65:61:86:6d:b0:6d:90:b9:78:33:c3:e2:
                    a1:a7:63:ad:b3:14:16:b6:5d:5c:74:16:9e:c4:a5:
                    6b:41:56:92:46:a1:43:f1:1a:05:f9:d9:b8:2c:cf:
                    1e:e3:3f:b0:dd:99:7d:02:96:05:48:a2:10:56:98:
                    44:09:c3:7a:17:7f:a2:f3:f1:73:51:13:eb:cd:ae:
                    c0:14:3a:7c:17:30:de:31:73:d6:81:18:9d:d6:a3:
                    a4:cd:e6:b8:b0:d7:25:bf:e2:a1:83:b3:b6:a6:15:
                    50:95:e4:a8:5d:4d:c5:84:6a:2f:53:a0:63:1d:80:
                    1d:d4:ad:c9:8b:17:c0:30:c1:bc:71:5d:75:73:3f:
                    09:c9:9c:d7:cd:39:f1:f3:e3:49:51:61:da:6b:9f:
                    b4:ab:6f:59:d2:96:32:29:9f:f6:3d:4a:95:e5:34:
                    46:77:48:00:10:54:65:56:d4:40:a1:9f:b3:ca:c8:
                    87:4f:e2:f3:e6:c2:ce:ca:69:22:e1:b5:3e:bb:6f:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:01:37:05:D0:36:5F:3B:F9:2B:7C:DD:89:6D:EE:78:17:B5:07:49
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/UgE3BdA2Xzv5K3zdiW3ueBe1B0k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:7d:93:89:ad:23:bc:e2:14:ae:ad:9d:53:aa:48:5e:39:b9:
         7c:1d:37:45:a1:f6:69:84:ef:8d:56:fc:98:65:73:a8:cc:c7:
         ee:fb:1c:af:0b:ed:3e:fa:22:ca:cd:aa:1a:d4:e0:bc:6a:50:
         b9:d3:b4:d6:46:f9:e0:44:a0:74:0a:f0:f1:a6:27:16:56:e7:
         4b:2a:bb:f6:5b:c2:8d:e7:24:30:06:dc:8d:b4:cd:56:b1:aa:
         a5:b0:74:f0:04:f4:da:b4:9d:7e:9f:30:ed:02:97:24:a8:e9:
         36:b4:ce:44:be:f0:e8:63:db:38:08:92:50:22:53:a9:8e:cf:
         04:4c:0f:8c:d5:26:34:7a:0c:0b:64:db:4f:3c:ff:e3:31:f0:
         7b:3d:b7:99:96:97:02:f7:4d:66:a9:ec:30:3d:35:f8:0b:bc:
         4d:24:10:05:03:b9:db:41:86:4a:32:c9:8f:51:1f:da:28:23:
         60:53:74:93:f6:4c:a7:ec:85:1d:a1:af:f7:ab:5a:ee:e4:a8:
         1e:2d:ad:dd:1f:aa:6f:2b:59:56:a4:4b:eb:24:ed:2f:6f:3d:
         e4:72:33:d1:ed:5a:e4:5c:16:5e:b2:15:41:73:4f:e9:44:30:
         98:03:07:b7:fe:6b:99:13:68:ec:f9:cb:b9:31:be:fd:30:b6:
         03:19:1a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----