Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/_xwX_zAlO8xHbGzsiSeMuAQHn0o.roa
File:                     _xwX_zAlO8xHbGzsiSeMuAQHn0o.roa (raw, json)
Hash identifier:          +Gi2h9x58jjko9Fx5Ls9kmyuOdEZ0IRCgvKMmSp4p/M=
Subject key identifier:   FF:1C:17:FF:30:25:3B:CC:47:6C:6C:EC:89:27:8C:B8:04:07:9F:4A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       034A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/_xwX_zAlO8xHbGzsiSeMuAQHn0o.roa
Signing time:             Tue 25 May 2021 02:43:02 +0000
ROA not before:           Tue 25 May 2021 02:43:02 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        211.133.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842 (0x34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:02 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=FF1C17FF30253BCC476C6CEC89278CB804079F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:21:05:ed:fa:6f:69:58:5d:d4:e2:d0:0c:2c:
                    6c:cc:b3:8f:58:33:27:c5:38:64:69:ba:20:20:14:
                    8e:4c:ea:9a:4c:be:f0:f2:59:a7:61:88:45:ab:89:
                    28:c7:71:f7:51:a4:23:7e:29:3e:22:50:cf:68:ea:
                    66:9b:25:2a:4f:e0:1c:91:65:20:43:21:eb:a4:46:
                    3d:4e:ba:ff:7e:69:47:c6:91:af:59:99:9a:ef:b4:
                    0d:d0:dd:e3:24:09:ca:69:93:56:b0:ca:11:eb:f5:
                    c8:10:f2:cd:92:db:b6:c9:c2:73:9c:c2:ea:42:67:
                    f9:f3:df:cd:dc:c0:52:c2:ee:c5:72:f4:1c:89:35:
                    39:e4:32:94:78:b7:7d:60:2d:5e:49:1c:c8:6f:ad:
                    04:bb:e6:8f:e4:13:9d:ef:14:4e:4d:f0:ae:aa:79:
                    bf:89:6a:5b:31:ce:72:8d:77:0b:a9:a2:ff:fc:4b:
                    bd:77:79:95:0a:4f:63:b4:00:47:35:5c:66:de:b6:
                    5a:8a:7d:d8:85:95:b3:6e:a7:2c:07:96:7a:ba:b9:
                    55:8a:4d:0a:8d:7f:e8:7b:fa:b2:e9:8b:7b:bd:47:
                    1d:be:d2:8d:7b:ae:e9:ff:4f:68:6f:a0:f0:f3:8a:
                    40:69:f2:61:a4:40:d4:b3:b9:57:f2:37:17:e7:bb:
                    6d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1C:17:FF:30:25:3B:CC:47:6C:6C:EC:89:27:8C:B8:04:07:9F:4A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/_xwX_zAlO8xHbGzsiSeMuAQHn0o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:39:59:8e:1e:c8:26:f0:07:cc:87:59:e8:54:10:f6:2f:f3:
         f5:25:91:35:9b:1b:c7:73:c5:67:74:55:2d:aa:ee:dd:ca:42:
         07:f1:d1:6c:ce:49:ea:c8:e4:50:18:1a:ac:a1:3c:29:f4:61:
         0c:0e:f3:5e:71:16:cf:34:95:70:43:e5:e6:5e:5c:e7:77:f7:
         9b:a7:2c:ce:80:fb:88:96:fa:f9:93:49:f7:8b:43:14:06:49:
         c9:2f:5f:0d:b7:03:40:39:9b:e3:08:86:50:df:93:4a:d1:7b:
         6c:9d:4a:47:f7:ad:f5:f7:3a:b9:0b:91:2c:0b:68:6a:58:a3:
         ae:f9:ad:93:c3:00:ee:75:e9:d6:94:c5:cd:43:57:ff:0e:68:
         34:19:74:64:a0:89:f9:7b:68:5a:9f:1f:55:30:ca:ad:62:bd:
         71:c9:cb:33:4c:20:72:8c:34:4d:a9:40:b6:c7:6c:43:d9:bc:
         1d:84:2c:11:03:6b:e7:85:51:05:f2:fb:8a:ee:7c:b0:2a:c1:
         a7:1f:ab:f5:b0:24:47:95:79:53:28:17:69:b0:8b:22:e5:a1:
         4b:66:dd:a3:99:85:70:07:c6:8f:99:bf:79:10:fc:45:b1:8f:
         94:22:5d:0d:af:7e:b8:2b:ae:58:0d:72:0b:ff:c3:47:48:d6:
         4c:ea:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----