Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/jokug8NBsowkGkygNpLPo2mfZls.roa
File:                     jokug8NBsowkGkygNpLPo2mfZls.roa (raw, json)
Hash identifier:          L6qLGbVADOn7Qz1H8U/yd0zB+glXIPyE2xqCpBKAYOs=
Subject key identifier:   8E:89:2E:83:C3:41:B2:8C:24:1A:4C:A0:36:92:CF:A3:69:9F:66:5B
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       2B
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/jokug8NBsowkGkygNpLPo2mfZls.roa
Signing time:             Tue 25 May 2021 02:46:48 +0000
ROA not before:           Tue 25 May 2021 02:46:48 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     59105
IP address blocks:        103.247.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: May 25 02:46:48 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=8E892E83C341B28C241A4CA03692CFA3699F665B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:9c:22:2e:4d:3a:86:dc:ce:b3:d6:21:c0:
                    ce:b4:be:73:f6:57:ca:5b:d1:4a:a9:65:f9:5b:dc:
                    78:05:3f:72:84:4f:52:91:4c:7d:f5:69:55:84:cd:
                    3d:ee:eb:4e:f8:4b:42:d8:41:22:db:83:e3:47:a2:
                    b1:30:27:92:08:99:5e:b2:56:7f:80:26:29:62:3a:
                    b9:a5:00:6c:5f:7b:9b:86:88:fe:73:c6:04:09:cd:
                    b4:d9:1e:2d:14:bc:66:05:a0:8f:f5:e5:84:7f:72:
                    8f:70:43:61:8a:c4:9a:28:f3:20:82:22:e2:06:74:
                    9c:3f:c4:08:22:99:21:58:9a:18:56:c8:8a:5d:c3:
                    6f:29:3c:bb:41:4f:2f:ba:ef:c4:9a:e4:56:b3:e8:
                    4c:2f:f4:98:e3:6d:ac:59:f7:81:26:a0:b7:db:c8:
                    a8:aa:39:6b:c0:f2:5b:81:c2:5c:96:fb:06:a5:19:
                    70:da:09:73:72:5b:35:15:22:d5:a4:6b:ad:7c:a4:
                    b0:0c:36:42:9f:83:6e:42:39:a4:f3:1c:1c:ed:be:
                    34:3e:c4:70:4a:1b:69:6f:4d:27:b6:81:4d:ce:16:
                    f2:fa:1e:a9:e0:31:8e:41:6d:70:9e:34:83:80:98:
                    e3:75:7e:53:97:f1:d7:47:25:fa:e0:47:da:8f:b8:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:89:2E:83:C3:41:B2:8C:24:1A:4C:A0:36:92:CF:A3:69:9F:66:5B
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/jokug8NBsowkGkygNpLPo2mfZls.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:18:81:fc:2f:b4:f8:79:a1:0a:8d:3c:55:5f:ba:05:34:c4:
         fc:a8:5f:5a:1e:6d:e4:ff:a6:5b:36:f7:9c:61:37:40:c6:40:
         e1:95:d7:d6:51:99:75:fa:f7:17:64:4f:e8:06:61:06:99:77:
         89:78:eb:e8:b1:d5:3d:1e:69:0e:e8:60:52:43:3f:69:23:9a:
         e2:6c:11:79:37:19:4f:ee:59:fa:2e:3e:ab:19:c8:b8:14:e2:
         fa:60:09:28:95:eb:14:83:61:5d:19:f9:c2:66:00:bd:b9:43:
         72:e5:0b:f4:85:39:27:1f:91:7b:21:3f:e8:5f:0e:13:7f:95:
         8c:ce:8f:5a:82:33:2b:2b:a0:a9:ef:ef:bd:9e:b3:b5:2f:98:
         da:fd:e1:2c:6b:4c:6d:2b:a1:6c:60:db:c0:1d:21:b9:a8:e2:
         b2:b9:72:f6:ce:d7:71:52:c7:43:95:cb:e7:16:65:2e:e5:85:
         b8:d8:2d:59:f0:56:0a:25:70:7b:72:93:a6:b0:25:7a:b4:53:
         4b:79:f3:f1:d1:27:a9:7e:48:33:db:7b:e4:d6:b2:ca:bb:04:
         53:85:57:da:dd:46:e0:09:b4:a5:5a:86:46:dd:67:46:96:44:
         3e:e6:e8:6d:02:d9:86:07:42:0d:12:f5:9e:94:f6:02:4f:77:
         48:44:27:56
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMkZE
RjkwQTk5NkYwQTMwRDMxRTkwOUM3MkJFMDU2REQ0NEEwNkU0MB4XDTIxMDUyNTAy
NDY0OFoXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoOEU4OTJFODNDMzQxQjI4
QzI0MUE0Q0EwMzY5MkNGQTM2OTlGNjY1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ8OnCIuTTqG3M6z1iHAzrS+c/ZXylvRSqll+VvceAU/coRPUpFM
ffVpVYTNPe7rTvhLQthBItuD40eisTAnkgiZXrJWf4AmKWI6uaUAbF97m4aI/nPG
BAnNtNkeLRS8ZgWgj/XlhH9yj3BDYYrEmijzIIIi4gZ0nD/ECCKZIViaGFbIil3D
byk8u0FPL7rvxJrkVrPoTC/0mONtrFn3gSagt9vIqKo5a8DyW4HCXJb7BqUZcNoJ
c3JbNRUi1aRrrXyksAw2Qp+DbkI5pPMcHO2+ND7EcEobaW9NJ7aBTc4W8voeqeAx
jkFtcJ40g4CY43V+U5fx10cl+uBH2o+4tJMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSOiS6Dw0GyjCQaTKA2ks+jaZ9mWzAfBgNVHSMEGDAWgBTC/fkKmW8KMNMekJxy
vgVt1EoG5DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTk4L3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRSS0J1US5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRS
S0J1US5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81OTgvam9rdWc4TkJzb3drR2t5Z05wTFBvMm1mWmxzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3tTANBgkqhkiG9w0BAQsFAAOCAQEA
ZxiB/C+0+HmhCo08VV+6BTTE/KhfWh5t5P+mWzb3nGE3QMZA4ZXX1lGZdfr3F2RP
6AZhBpl3iXjr6LHVPR5pDuhgUkM/aSOa4mwReTcZT+5Z+i4+qxnIuBTi+mAJKJXr
FINhXRn5wmYAvblDcuUL9IU5Jx+ReyE/6F8OE3+VjM6PWoIzKyugqe/vvZ6ztS+Y
2v3hLGtMbSuhbGDbwB0huajisrly9s7XcVLHQ5XL5xZlLuWFuNgtWfBWCiVwe3KT
prAlerRTS3nz8dEnqX5IM9t75NayyrsEU4VX2t1G4Am0pVqGRt1nRpZEPubobQLZ
hgdCDRL1npT2Ak93SEQnVg==
-----END CERTIFICATE-----