Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/c9TjNbOKhwHxoj2CqwJ-S3oONVc.roa
File:                     c9TjNbOKhwHxoj2CqwJ-S3oONVc.roa (raw, json)
Hash identifier:          NEv9noZ6bnH6vv541icZAumWQ0ThR5MCct8kMo4puJ8=
Subject key identifier:   73:D4:E3:35:B3:8A:87:01:F1:A2:3D:82:AB:02:7E:4B:7A:0E:35:57
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0359
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/c9TjNbOKhwHxoj2CqwJ-S3oONVc.roa
Signing time:             Tue 25 May 2021 02:43:07 +0000
ROA not before:           Tue 25 May 2021 02:43:07 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        211.7.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:07 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=73D4E335B38A8701F1A23D82AB027E4B7A0E3557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:a1:49:a4:59:10:50:9c:e4:18:c2:a6:1a:
                    b4:b1:96:21:19:f2:56:2c:d0:94:e7:e2:65:ab:db:
                    b3:86:61:08:a5:5a:69:85:d5:ba:f6:fa:99:c3:b4:
                    1e:41:7b:41:71:03:33:85:44:dd:1b:3a:ff:97:88:
                    22:c1:14:1e:92:24:a8:e5:9f:36:c9:5f:41:40:bf:
                    04:68:7f:74:58:f2:72:36:15:b1:91:ba:c5:43:8e:
                    95:1f:0f:03:ce:f0:e7:71:86:02:58:96:f1:4a:82:
                    2f:0e:29:f7:d1:aa:42:ef:3d:cb:1a:09:7e:e1:2b:
                    56:22:ce:09:fb:b8:6d:99:f8:31:47:b9:6b:d7:b7:
                    32:db:49:bc:b1:13:70:65:9f:d9:54:97:b2:cb:5a:
                    56:7d:22:1c:ba:a5:87:b0:65:71:77:2e:83:37:12:
                    4f:1a:9c:0c:7c:03:38:e8:d0:94:8f:a6:68:e5:87:
                    07:af:92:04:a6:6d:b5:f1:4e:75:57:cd:ab:ad:44:
                    bc:e5:5f:a2:5b:20:60:8c:34:8c:b9:2a:ad:c8:20:
                    18:6b:8c:cc:8f:dc:97:20:03:08:da:1a:aa:da:cf:
                    91:08:eb:5b:bc:58:f8:69:b8:f5:08:77:b4:23:a2:
                    cd:1b:aa:94:ef:1d:53:b3:79:2c:15:68:8d:93:59:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D4:E3:35:B3:8A:87:01:F1:A2:3D:82:AB:02:7E:4B:7A:0E:35:57
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/c9TjNbOKhwHxoj2CqwJ-S3oONVc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:94:1c:1b:98:b6:74:a2:1e:c3:da:12:63:46:6a:40:c8:11:
         60:80:ca:4f:3a:4f:23:a9:9d:1c:7f:a0:c1:bb:a4:c2:44:d2:
         c4:e5:85:da:c8:42:60:88:99:15:52:da:92:ec:8b:54:29:3f:
         3b:09:43:ce:3d:69:ec:db:e6:57:99:4a:ed:8f:99:fc:ff:97:
         51:d5:e2:0b:74:15:e8:7a:7e:b7:40:ad:2c:36:8d:5a:4f:d8:
         aa:95:c0:a8:1f:ef:40:6b:ad:af:ec:bd:1b:90:24:6c:ce:61:
         ac:3d:1e:cb:0f:0c:3f:5a:42:65:87:4e:39:cc:2a:81:97:48:
         99:95:ad:8b:cf:70:61:4b:e4:8d:6d:15:49:21:60:c7:0d:d9:
         ef:e4:a9:00:b9:05:d6:01:c3:56:7f:5f:ad:97:99:8c:a7:2d:
         4b:d4:98:07:23:99:9f:d1:a8:04:c3:93:84:1c:de:ed:8d:e0:
         84:f1:82:a6:24:06:ac:f6:ae:79:1d:32:52:4c:10:b7:4f:91:
         04:b6:f7:94:e4:38:2c:a2:91:b9:40:61:ca:84:66:f8:de:57:
         30:bf:5d:d3:30:39:cd:a8:2c:74:f1:36:e5:07:93:4c:22:73:
         22:f6:c2:6b:e0:01:74:3e:28:c4:5d:b3:5a:66:c7:ed:0a:e2:
         93:c1:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----