Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/1pt5u2heHQsN02fLec1MugsPxCM.roa
File:                     1pt5u2heHQsN02fLec1MugsPxCM.roa (raw, json)
Hash identifier:          xZZxoSpL25ENBSnjTs/HrlP4I05cEp5tzufzVmbEIns=
Subject key identifier:   D6:9B:79:BB:68:5E:1D:0B:0D:D3:67:CB:79:CD:4C:BA:0B:0F:C4:23
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       07
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/1pt5u2heHQsN02fLec1MugsPxCM.roa
Signing time:             Wed 29 Sep 2021 09:59:11 +0000
ROA not before:           Wed 29 Sep 2021 09:59:11 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     131921
IP address blocks:        153.122.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Sep 29 09:59:11 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=D69B79BB685E1D0B0DD367CB79CD4CBA0B0FC423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:7c:49:51:5f:81:b4:d0:04:3f:00:01:43:
                    c1:d0:66:1a:94:71:17:e2:ea:de:7f:fb:fa:f1:a4:
                    c7:4b:14:12:ef:93:34:cc:04:5d:05:23:f3:b3:5e:
                    92:3c:9c:4d:6e:5c:2c:e6:57:5a:69:db:07:89:bc:
                    d7:b7:20:be:31:27:d7:7a:47:1c:e8:c9:05:08:83:
                    c2:dc:9a:76:29:4d:cf:1c:fc:75:b7:09:4f:66:0a:
                    74:d8:21:8a:4d:87:bd:6e:fe:71:7d:2b:0c:b1:25:
                    84:c7:e3:bc:23:69:06:f2:41:56:25:46:3b:85:2e:
                    63:fa:83:35:6d:41:b2:8e:88:ee:96:ef:9f:15:62:
                    fa:93:e6:46:a1:ef:68:15:b4:be:09:db:8f:b7:80:
                    43:02:dc:39:dc:23:19:c1:1b:d9:e3:18:87:3b:16:
                    ca:57:9d:38:32:d3:f5:08:0c:f7:38:61:29:3f:fc:
                    ce:d7:64:04:c6:cc:20:5e:20:0d:58:5e:60:98:2b:
                    c2:b5:d0:04:92:62:d5:93:65:17:60:fe:e5:13:57:
                    25:20:69:6e:f9:a8:54:84:88:77:03:c7:cc:32:60:
                    93:90:72:33:b9:1b:c7:94:2b:96:d2:2c:67:d5:55:
                    cb:f3:f2:11:18:e8:02:95:fc:fc:35:bf:43:68:eb:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9B:79:BB:68:5E:1D:0B:0D:D3:67:CB:79:CD:4C:BA:0B:0F:C4:23
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/1pt5u2heHQsN02fLec1MugsPxCM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:cf:79:5e:6a:d0:57:b0:0d:a0:52:ad:7e:93:6d:33:ae:c3:
         ee:1b:47:8b:21:a1:56:7c:a2:70:cd:00:e0:bb:cb:84:8f:c7:
         9e:74:9e:b8:4d:30:50:76:ff:a0:0f:48:90:32:36:7e:d2:dc:
         7c:8c:21:f5:4c:09:77:e3:55:ee:b1:ad:32:a3:12:da:1d:3f:
         93:ce:3f:df:04:98:2c:30:f6:14:81:c3:db:71:b9:b6:c8:57:
         c3:f4:d2:53:65:e4:24:54:ce:b0:ed:2c:e1:21:d1:0f:aa:79:
         fc:a3:3b:fa:a0:7b:56:fc:5a:79:2d:0e:d8:cb:7a:9f:79:a4:
         7f:8a:28:f3:ac:36:e4:2a:c7:22:1e:27:bb:5d:89:a5:90:6a:
         23:87:35:5f:4a:9e:a3:f0:98:b6:28:aa:2d:0c:cf:ca:d0:62:
         bc:fa:df:72:1f:c1:81:46:1d:25:90:03:b2:28:7a:cf:48:fd:
         e3:49:3c:e3:13:a6:b7:38:a8:28:97:f4:78:55:fc:d7:44:f3:
         a3:17:d3:db:70:4b:69:ed:1d:de:22:e6:d3:e3:6a:4c:71:ea:
         61:bb:ea:a7:34:dc:aa:da:b5:6d:96:95:f3:ea:0b:f0:5c:56:
         1b:ca:6f:4d:10:33:59:86:e3:87:d9:91:14:4d:97:ff:ae:d2:
         54:cc:bc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----