Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/DGReWr0WloKtLjG0wS6q2UtWqQo.roa
File:                     DGReWr0WloKtLjG0wS6q2UtWqQo.roa (raw, json)
Hash identifier:          e1WNftsll9ahL/ime/0v6Fa1ApmwZymO3gDruYO0x/w=
Subject key identifier:   0C:64:5E:5A:BD:16:96:82:AD:2E:31:B4:C1:2E:AA:D9:4B:56:A9:0A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       034D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/DGReWr0WloKtLjG0wS6q2UtWqQo.roa
Signing time:             Tue 25 May 2021 02:43:03 +0000
ROA not before:           Tue 25 May 2021 02:43:03 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        219.126.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845 (0x34d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:03 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=0C645E5ABD169682AD2E31B4C12EAAD94B56A90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:ea:94:f0:14:14:9c:b4:87:8f:5a:2d:8c:
                    52:d7:29:8d:11:82:1c:e1:14:f9:21:93:ec:20:95:
                    c5:08:1f:e5:1a:06:ef:54:38:36:36:8d:ec:58:b1:
                    aa:2f:31:5e:ad:a7:94:14:df:39:6d:4b:c4:b8:43:
                    c5:ee:ee:84:91:40:da:02:58:71:25:9b:ad:2f:1a:
                    49:b0:4e:77:f2:ba:2a:2b:a9:38:49:e6:0d:80:5c:
                    8e:8b:25:c6:a0:d3:01:4f:af:05:52:85:1e:22:34:
                    1e:b8:e8:59:43:39:cd:e7:5f:a0:0f:12:46:a2:2c:
                    c9:e0:e8:bb:30:75:fa:20:a4:96:56:11:57:3a:96:
                    3f:13:f5:f5:76:d1:6c:1c:d9:c3:ea:47:d2:cd:b7:
                    bf:59:87:91:15:71:4a:6d:b1:a3:ab:e1:ea:e8:ef:
                    38:07:4b:1b:41:f8:73:3b:2d:dd:7d:f7:79:ed:b1:
                    f3:81:d3:27:a9:a8:01:4d:0e:25:4f:9f:5d:66:26:
                    00:46:a6:2e:00:60:c5:7b:db:79:40:37:79:ad:1d:
                    db:70:5f:d9:64:47:f0:fa:98:90:02:35:62:fe:c3:
                    ce:f2:8b:c5:a6:38:0d:57:48:a8:d2:f6:a2:b2:a3:
                    db:de:63:c9:29:d7:e3:55:bc:d8:ad:dd:6d:c6:aa:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:64:5E:5A:BD:16:96:82:AD:2E:31:B4:C1:2E:AA:D9:4B:56:A9:0A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/DGReWr0WloKtLjG0wS6q2UtWqQo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.126.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ae:08:f4:86:be:80:5f:7c:2e:8b:9b:09:85:d2:26:18:c3:02:
         a4:8f:b3:3f:8a:6d:51:5d:9d:9e:9f:a2:aa:8d:5b:46:ad:74:
         d3:e4:fe:af:63:14:d4:ad:df:ca:33:e6:2e:4e:28:12:0b:8d:
         5b:13:d7:57:f0:be:cc:02:97:10:39:c7:52:7f:03:18:6d:d1:
         f0:8e:97:00:cf:c0:8a:ea:c8:39:bd:58:7e:02:60:e1:a2:fa:
         55:93:c6:eb:f4:9c:de:d8:3e:6f:b6:40:1e:96:2b:94:96:17:
         5d:79:fa:b5:e0:53:5f:10:9e:8d:89:d1:85:b7:51:4c:7a:ab:
         b0:ca:4d:b3:23:59:83:82:af:f4:7c:a9:b3:b4:48:01:03:f1:
         28:c4:54:15:8b:ca:35:6c:50:d8:a5:0c:6c:a6:39:1a:d9:39:
         5f:2d:dd:93:33:4a:7a:e0:72:d6:26:61:34:ae:8b:7f:8e:4d:
         d4:7d:e0:4f:d4:2c:ac:86:0e:98:81:ff:44:4c:c2:2b:3f:8a:
         61:7c:7d:a6:13:ec:3c:7e:3a:d0:40:2a:dc:1b:2c:dc:36:bf:
         29:fd:ec:9a:5d:7a:7b:d8:7d:3e:c1:35:1d:71:ef:a5:4b:9e:
         ea:2e:32:20:7d:d4:75:54:53:d3:bf:65:13:d6:9f:1a:02:be:
         6c:e9:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----