Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/QNRk1GmYGK477JK-qeKNt0aT7O0.roa
File:                     QNRk1GmYGK477JK-qeKNt0aT7O0.roa (raw, json)
Hash identifier:          On82A6EchLQu1mmI+6ZRzXXCFJa/1kZdEbESxj3woCs=
Subject key identifier:   40:D4:64:D4:69:98:18:AE:3B:EC:92:BE:A9:E2:8D:B7:46:93:EC:ED
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       032F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QNRk1GmYGK477JK-qeKNt0aT7O0.roa
Signing time:             Tue 25 May 2021 02:42:54 +0000
ROA not before:           Tue 25 May 2021 02:42:54 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:54 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=40D464D4699818AE3BEC92BEA9E28DB74693ECED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:e3:ca:05:82:72:3f:0f:8b:20:7e:65:51:
                    80:ed:71:44:91:dc:33:d5:89:5e:74:5a:fb:96:e3:
                    60:d2:91:bc:a0:06:c0:4c:ca:24:9c:37:bf:f7:56:
                    35:ef:ba:fc:fa:c3:f9:a8:b5:df:3a:bd:8a:e2:02:
                    e8:f0:92:2c:c7:49:46:a5:58:90:11:75:b8:67:f6:
                    e4:d0:6d:a7:25:a6:52:5c:37:b5:58:5b:43:2f:96:
                    e9:47:76:b5:9a:14:0f:ab:eb:68:15:ef:d8:29:ee:
                    99:7d:1d:a7:d7:a5:ef:b8:6e:61:43:72:6d:e3:9c:
                    ea:37:8b:69:e3:9e:60:1a:3f:57:25:9f:d6:aa:06:
                    6a:1c:76:a0:cc:cc:98:a9:a3:a9:3f:be:49:58:c8:
                    07:f7:8d:86:f9:8d:e5:e2:ed:83:a7:bd:c7:3d:f8:
                    99:86:da:27:52:c9:33:77:7b:a0:50:08:96:16:24:
                    8e:67:b5:46:ba:31:5e:b2:ce:b0:ec:58:9d:04:1b:
                    a0:9e:05:da:dd:03:fc:af:6b:b6:7c:1e:02:41:c6:
                    c6:af:57:6e:87:3a:5b:70:b4:09:21:ab:47:65:38:
                    10:d0:aa:38:70:a7:84:d8:d0:09:79:9e:d2:a1:90:
                    f9:80:75:6d:5f:c0:1f:f2:3f:eb:4b:97:d8:f9:7c:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D4:64:D4:69:98:18:AE:3B:EC:92:BE:A9:E2:8D:B7:46:93:EC:ED
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QNRk1GmYGK477JK-qeKNt0aT7O0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:72:95:b0:9c:ba:36:58:81:93:00:3f:42:b9:0d:7f:95:68:
         5c:69:1c:88:fa:20:2c:42:2b:15:0b:ef:6b:fc:1f:7f:d4:cf:
         c9:21:9a:46:0c:54:b5:0b:74:fa:b0:04:37:20:cf:8c:eb:cb:
         80:82:5a:95:ca:4c:0e:28:47:52:d0:79:69:b6:c3:c3:85:8e:
         f1:44:d6:57:89:01:d8:3c:27:1c:7b:61:de:c6:4c:a8:bf:14:
         30:fe:9c:85:dc:25:e8:47:e8:03:4d:7f:2d:bb:66:c0:cf:51:
         82:bb:ae:98:67:68:ef:48:b5:ef:b9:11:81:11:ae:d7:1b:1a:
         b0:22:0f:f2:f5:69:30:b7:48:21:f9:16:36:0c:01:ca:07:ec:
         17:f9:b3:45:db:99:a7:cb:00:62:89:9b:7f:cc:c5:8a:5f:99:
         f1:f6:12:cf:13:99:13:29:17:4a:50:47:0b:5b:99:00:48:4a:
         17:ef:d9:50:c8:36:e6:85:36:44:4d:e8:69:1f:d3:d7:f3:2a:
         60:2f:29:7e:ac:12:3b:44:b1:56:e0:8d:83:47:fe:a5:45:d4:
         a4:cb:c9:ab:b3:9e:82:c8:7c:73:db:41:05:22:2f:a8:34:b9:
         59:db:a4:e4:83:ad:c7:bf:bd:6c:27:6a:7a:45:53:52:9d:6d:
         e3:70:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----