Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/R7i8a9I_33DO9lYLcTeNquwbohk.roa
File:                     R7i8a9I_33DO9lYLcTeNquwbohk.roa (raw, json)
Hash identifier:          rX7viyZFplvKhugFBtef7qL6AW93X8CyhvLgh0jG15E=
Subject key identifier:   47:B8:BC:6B:D2:3F:DF:70:CE:F6:56:0B:71:37:8D:AA:EC:1B:A2:19
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       37
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/R7i8a9I_33DO9lYLcTeNquwbohk.roa
Signing time:             Tue 25 May 2021 02:46:50 +0000
ROA not before:           Tue 25 May 2021 02:46:50 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     7671
IP address blocks:        125.252.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: May 25 02:46:50 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=47B8BC6BD23FDF70CEF6560B71378DAAEC1BA219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:63:4b:a3:34:bf:9b:7f:57:d2:36:e4:82:40:
                    2b:c1:bc:d4:c9:c7:43:3c:f1:64:ff:e0:ad:8f:5b:
                    dc:35:7b:75:26:77:97:7f:26:89:f5:df:9d:ec:11:
                    c5:18:74:3f:59:61:67:1e:c7:65:3e:62:fe:a4:ae:
                    87:90:db:9e:91:6e:06:35:c3:e3:43:ca:bb:c5:bb:
                    9e:1c:b8:3e:f2:ee:ab:2f:f1:e4:ac:14:81:2c:b7:
                    20:2f:93:f8:fd:3a:87:25:53:3f:90:b2:cd:5b:76:
                    29:9a:3f:56:12:87:61:e2:ec:d4:28:e6:af:ae:db:
                    b0:7b:9b:b6:09:95:9f:82:ee:39:cc:1d:e3:9f:e4:
                    e6:45:85:74:5a:68:0a:3b:df:6b:70:90:26:34:cc:
                    c9:78:c6:b5:b3:80:4f:e9:b2:de:62:7e:e8:1b:b9:
                    59:f5:21:f0:29:d8:32:87:9b:01:c8:e3:44:79:48:
                    90:11:c6:96:d8:ef:03:ed:6a:5f:66:fc:a0:89:49:
                    64:c7:e0:f8:d2:f1:dd:a8:a4:07:84:d8:ce:8c:bc:
                    a0:df:cb:2b:82:cb:32:78:8a:7b:6e:db:98:56:c0:
                    0d:a1:9f:8c:ac:f9:49:fa:ae:31:b8:cf:72:14:7f:
                    cc:0b:34:b0:57:49:a0:8d:c0:27:9d:d2:a2:88:e7:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:BC:6B:D2:3F:DF:70:CE:F6:56:0B:71:37:8D:AA:EC:1B:A2:19
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/R7i8a9I_33DO9lYLcTeNquwbohk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.252.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a7:08:d7:9d:34:ba:41:d0:a5:d3:40:29:3a:b8:68:09:b2:a3:
         16:b2:69:27:fc:71:35:a3:43:6e:96:4e:83:4b:e4:22:36:6b:
         2f:a2:f4:91:f1:3a:72:3f:fc:e1:51:96:e8:35:db:0f:92:35:
         30:ca:0c:59:91:8e:d0:a3:4a:8b:c1:0e:80:5c:7a:ba:0f:b7:
         77:12:a4:ff:b0:73:90:6d:a8:9b:e9:69:2b:38:01:fb:7a:ea:
         6e:c9:1a:96:79:30:1e:ac:fa:b2:8a:39:04:8b:67:f9:dc:35:
         e0:a1:26:32:5d:3f:4a:ec:b0:58:88:b2:5e:c6:34:19:68:af:
         15:6f:18:23:62:e8:b1:e2:81:e7:0d:20:27:b2:48:d6:b3:34:
         33:99:12:6e:87:48:8f:dc:1c:94:73:63:36:9a:2c:d5:fd:3b:
         0c:3d:3f:64:89:4d:c7:ea:9a:89:10:13:a3:d2:16:f5:a9:3a:
         96:f1:17:20:be:4c:6b:05:65:97:56:0b:9b:a3:43:97:36:3c:
         da:74:d0:76:b3:77:87:84:ba:f3:dd:7f:19:43:37:83:5e:68:
         c8:59:9b:c8:5d:e7:15:03:c8:2a:d8:10:ce:18:89:25:fb:0d:
         6f:fc:c8:48:8b:d1:8a:15:d2:b3:b1:c0:97:23:0f:01:95:53:
         79:43:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----