Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/RzKF3UNaxeXTE3UhjV4l4JN119w.roa
File:                     RzKF3UNaxeXTE3UhjV4l4JN119w.roa (raw, json)
Hash identifier:          uD12prMtMY0Ed+rWW7LddpChmq4Ze3qE1VVEke1iFcs=
Subject key identifier:   47:32:85:DD:43:5A:C5:E5:D3:13:75:21:8D:5E:25:E0:93:75:D7:DC
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02E3
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/RzKF3UNaxeXTE3UhjV4l4JN119w.roa
Signing time:             Tue 25 May 2021 02:41:51 +0000
ROA not before:           Tue 25 May 2021 02:41:51 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:51 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=473285DD435AC5E5D31375218D5E25E09375D7DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:b3:09:d0:dd:48:8a:89:87:e9:db:22:ce:
                    7b:81:3e:1c:7e:b8:0a:a5:2b:90:ee:10:ff:ca:34:
                    11:01:17:e0:b7:13:db:3a:ed:06:a1:2f:04:0e:de:
                    14:4b:44:0f:aa:30:bd:0c:f2:1e:e6:f3:47:ae:1c:
                    09:1b:fd:8c:0c:51:54:5e:2a:89:5e:d9:92:c9:6e:
                    cf:8d:39:fa:40:71:66:68:f0:94:11:ee:4d:80:a5:
                    5d:83:f9:ac:8a:68:03:cf:44:01:e0:3b:87:2c:97:
                    e4:01:17:91:eb:f6:98:ac:2f:a1:05:6d:70:f0:89:
                    1b:cd:de:48:bd:25:27:79:88:f2:43:24:54:d7:d0:
                    55:bc:35:8c:d3:7a:77:62:c3:8e:2a:67:ef:b0:a0:
                    72:1b:46:98:6e:24:cb:b8:7d:c5:a0:b1:ed:05:dc:
                    e2:95:29:ce:de:89:d8:25:3f:ea:ee:a9:1c:16:e6:
                    19:80:86:ee:ae:b9:5d:e7:00:25:a9:b5:0e:93:28:
                    0f:64:cb:61:80:78:92:07:4b:e7:d8:f3:56:ae:77:
                    d8:5b:0a:59:b9:55:4a:68:9b:6c:94:91:97:e0:57:
                    fc:82:ff:7e:b8:a3:8a:a0:7e:30:43:d2:65:04:63:
                    ac:6f:93:fa:c5:3f:13:d4:a7:ba:3b:52:14:3a:bb:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:32:85:DD:43:5A:C5:E5:D3:13:75:21:8D:5E:25:E0:93:75:D7:DC
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/RzKF3UNaxeXTE3UhjV4l4JN119w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:e8:95:86:36:72:4f:cf:d3:19:38:15:8f:75:4f:77:7c:88:
         8a:ae:5e:b0:57:07:4f:08:07:d9:63:12:1b:a2:e9:d6:9e:24:
         63:9a:0a:e8:ea:7f:6d:10:44:02:51:05:c9:89:9a:21:22:10:
         3f:3a:98:14:1a:ef:6b:e1:57:23:19:c4:ce:00:fd:2d:09:f1:
         f1:f2:38:59:bd:89:84:3f:ca:59:ce:8e:f7:15:45:4c:0f:4b:
         58:86:4a:6f:0d:31:09:fc:59:65:6b:0b:00:47:d7:f9:66:98:
         c8:ea:74:2d:f4:d7:21:0a:16:be:65:69:d5:bf:2e:ac:d2:84:
         1c:9f:53:62:bb:52:b9:ec:47:be:4a:cb:c0:f1:5e:d1:e1:25:
         8a:dc:23:8d:8c:81:69:07:15:91:88:ee:8b:7f:9a:0d:f0:ab:
         a3:f3:cf:a6:c9:cf:45:39:a0:22:0f:73:0b:00:0e:a4:06:88:
         56:85:30:d1:81:5f:83:4d:67:2b:fd:d3:72:42:c1:de:2f:96:
         8a:a0:9d:14:e3:56:27:bb:c6:6c:9b:97:91:65:75:ce:64:4c:
         b4:46:12:f1:c9:df:9c:5f:d9:b9:3b:65:f8:8b:e4:7f:24:03:
         d3:0c:39:ab:20:35:2e:4b:5d:54:16:a0:b5:3d:b4:b1:ef:ed:
         14:3d:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----