Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/EQ1nvxPiUERo5k7vVIn2ssbeqF0.roa
File:                     EQ1nvxPiUERo5k7vVIn2ssbeqF0.roa (raw, json)
Hash identifier:          aKl0nT2N0f9vd8JLfYkFBDE1cZsHEnXhEC1hnZaBoD4=
Subject key identifier:   11:0D:67:BF:13:E2:50:44:68:E6:4E:EF:54:89:F6:B2:C6:DE:A8:5D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02E0
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/EQ1nvxPiUERo5k7vVIn2ssbeqF0.roa
Signing time:             Tue 25 May 2021 02:41:50 +0000
ROA not before:           Tue 25 May 2021 02:41:50 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        27.98.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:50 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=110D67BF13E2504468E64EEF5489F6B2C6DEA85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:ab:4f:4b:15:43:02:e0:ee:0b:54:37:b0:
                    fa:04:23:8a:9a:d8:d0:bb:00:0a:22:c7:7d:be:96:
                    ee:67:4e:53:df:8a:35:7e:09:c7:ea:29:64:a7:bb:
                    7d:28:5f:6e:16:24:d3:91:be:36:b6:97:eb:81:ee:
                    45:c3:d1:01:d6:83:21:39:02:49:f6:bd:1d:5b:25:
                    cb:1c:56:a1:ac:a8:b1:81:05:f2:dc:d0:d8:5e:a4:
                    90:8e:bc:ca:7b:a2:6d:8e:32:2e:da:e5:9b:be:44:
                    bf:bb:92:cb:81:32:15:7f:10:3f:00:89:0d:df:a9:
                    92:39:e7:56:04:43:dd:50:de:63:5e:46:84:2c:fa:
                    3e:a7:f7:40:3d:36:af:4e:76:f5:64:f3:e8:bb:4a:
                    d9:93:12:79:5b:74:75:c9:14:3d:b3:82:6a:1d:de:
                    b6:3c:70:a2:31:d8:6e:2c:22:c3:04:c2:40:e2:25:
                    f0:d7:ce:ee:10:ca:c4:6f:0f:ab:b2:7f:e6:71:2a:
                    e2:a3:5f:36:b3:58:f3:dd:27:ec:c9:f0:82:3b:ff:
                    34:14:d1:42:c9:80:6b:9f:b6:34:ed:70:0f:07:58:
                    b8:b7:ba:1d:89:7d:65:1f:63:0f:46:79:cc:1e:47:
                    c7:3c:f9:4a:30:d3:bb:1c:68:43:57:31:cf:84:00:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0D:67:BF:13:E2:50:44:68:E6:4E:EF:54:89:F6:B2:C6:DE:A8:5D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/EQ1nvxPiUERo5k7vVIn2ssbeqF0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.98.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         73:d6:62:bd:5e:31:e5:8c:50:bb:a3:12:ef:e6:c6:ea:02:36:
         bb:48:88:d8:a1:b9:7e:66:a2:13:bb:ee:0b:7a:91:05:2a:71:
         1c:83:fd:78:0f:0e:4d:2a:67:aa:73:dd:38:f8:de:e2:98:5a:
         a2:db:44:86:1a:45:e1:76:14:2a:76:1a:e0:47:c1:8c:40:9b:
         7a:72:60:82:23:aa:bf:f7:1f:ed:d3:28:1e:c2:b4:7b:8e:3a:
         a2:95:c7:39:d8:92:50:10:8c:38:57:a6:fe:50:80:4b:e6:99:
         d6:8e:4d:ed:53:fb:28:b2:46:81:a1:24:3b:c8:94:31:4f:53:
         b0:26:cf:bf:b6:69:29:36:41:7c:b7:3a:76:55:d2:57:87:43:
         da:14:2f:45:37:df:93:c0:23:90:dc:c5:80:61:4a:56:c8:43:
         3c:d9:c0:3a:65:a0:04:38:c7:1c:64:9c:6d:05:af:b5:7d:6b:
         b3:f7:96:3b:4b:0e:a3:e0:6f:3f:db:c7:60:a6:c8:e3:8a:34:
         d2:a1:21:57:f2:48:cc:e5:c5:9a:80:e1:f4:86:c3:b2:1a:90:
         18:ec:92:95:f3:ee:64:59:c0:5f:38:cc:ff:20:33:14:23:81:
         85:12:1e:c3:0e:fc:d5:51:ad:1b:35:f1:d0:f6:f0:0b:c1:f3:
         a0:63:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----