Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/xwHKwPY9Ysvhnkuu1k290zvX8lU.roa
File:                     xwHKwPY9Ysvhnkuu1k290zvX8lU.roa (raw, json)
Hash identifier:          DkLwwc2fnhP60tJUfuf39n4RBWB5PLPLzfN6MRwstGY=
Subject key identifier:   C7:01:CA:C0:F6:3D:62:CB:E1:9E:4B:AE:D6:4D:BD:D3:3B:D7:F2:55
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       68
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/xwHKwPY9Ysvhnkuu1k290zvX8lU.roa
Signing time:             Wed 01 Dec 2021 05:29:18 +0000
ROA not before:           Wed 01 Dec 2021 05:29:18 +0000
ROA not after:            Tue 15 Nov 2022 01:30:01 +0000
asID:                     10021
IP address blocks:        27.110.63.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 05:29:18 2021 GMT
            Not After : Nov 15 01:30:01 2022 GMT
        Subject: CN=C701CAC0F63D62CBE19E4BAED64DBDD33BD7F255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cd:5c:27:ad:03:0a:6e:15:b7:39:28:c8:8c:
                    4d:b8:7d:ce:6a:66:d1:49:e4:18:53:59:cf:01:e5:
                    5d:1a:52:b1:f3:f0:60:78:72:51:2a:8e:14:7c:08:
                    dc:b1:02:57:1c:e0:f2:91:5c:8b:3b:ae:d0:e6:66:
                    9e:0f:8c:8c:4d:04:19:d5:0f:fa:46:96:c8:6b:33:
                    02:af:95:70:7c:c0:95:e0:3e:db:f2:ec:59:8e:00:
                    40:87:d3:82:cf:93:55:28:ed:aa:10:59:fc:48:89:
                    8f:40:f2:12:1a:da:5d:85:45:56:87:0b:9e:68:bb:
                    4f:4d:e0:cc:85:ab:30:85:94:73:25:a8:97:13:eb:
                    59:ff:3b:1b:e8:f7:65:ed:73:99:f2:5f:91:1a:14:
                    03:49:88:7f:ff:ab:c9:24:8e:f8:c0:6d:d5:a9:d2:
                    39:67:46:c9:32:67:e4:db:af:ad:c3:44:cb:d8:5e:
                    b6:97:3a:2b:f9:9b:9e:8f:ef:50:5c:ef:1d:a9:f7:
                    12:dd:96:00:f1:28:f7:0e:ad:51:1c:c9:fa:45:31:
                    eb:b9:34:45:3f:d9:b3:e1:4c:bb:ae:5e:f6:8a:d4:
                    b4:ae:d1:36:73:9d:bf:a6:d4:e8:de:fa:96:ac:25:
                    2c:6e:77:45:8a:d2:ac:be:83:70:d5:65:64:a7:81:
                    d9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:01:CA:C0:F6:3D:62:CB:E1:9E:4B:AE:D6:4D:BD:D3:3B:D7:F2:55
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/xwHKwPY9Ysvhnkuu1k290zvX8lU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:a9:e1:52:88:60:a7:56:84:0c:ae:9d:37:3c:28:9e:51:d1:
         92:5a:4e:dc:68:a2:d6:32:c5:22:f1:97:94:5e:3f:55:49:75:
         c9:eb:90:cb:ab:63:a8:a1:de:5b:84:7d:bc:2d:ec:a8:45:dc:
         59:f2:60:a1:48:b8:d6:82:7d:63:7e:e9:10:bf:d3:3c:b8:dc:
         48:a3:25:e1:35:27:6e:17:76:8e:64:8a:ec:b9:72:78:8a:43:
         41:09:93:28:f9:71:80:88:c3:cf:fe:e5:ac:c3:95:c6:a8:3e:
         e1:ae:c9:0b:1e:6f:f2:07:00:c9:2d:f9:31:64:c8:92:61:a1:
         34:44:89:e9:a8:3b:7d:d7:42:aa:2d:d9:05:ee:89:d9:6f:61:
         4b:dc:34:7b:e4:4e:25:ad:ec:35:b2:e2:16:d5:98:23:e1:fd:
         7c:94:d7:e4:49:dc:b0:97:82:51:02:0b:5b:40:31:7d:54:ec:
         b1:ac:b2:db:ae:78:0d:59:a4:36:d9:02:74:9d:f2:ed:c9:2a:
         ed:eb:f1:b8:94:c3:33:36:fc:26:61:5f:32:c6:f1:33:b6:d7:
         6f:18:94:03:22:da:0d:9b:f3:7b:62:96:8f:39:a9:ee:5c:aa:
         21:df:cd:3d:75:f2:7b:12:cf:26:2c:69:a5:03:42:7e:20:75:
         83:c5:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----