Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/M1P_BzX25I44utq4TE4L3-fAN2s.roa
File:                     M1P_BzX25I44utq4TE4L3-fAN2s.roa (raw, json)
Hash identifier:          U7C4pZ6WlY5MdyURg0VdiiPROKaerp4NZGJ21aLVyVU=
Subject key identifier:   33:53:FF:07:35:F6:E4:8E:38:BA:DA:B8:4C:4E:0B:DF:E7:C0:37:6B
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       1E
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/M1P_BzX25I44utq4TE4L3-fAN2s.roa
Signing time:             Wed 20 Apr 2022 09:12:22 +0000
ROA not before:           Wed 20 Apr 2022 09:12:22 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        210.252.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:12:22 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=3353FF0735F6E48E38BADAB84C4E0BDFE7C0376B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:61:44:13:47:a8:17:60:30:19:a1:c8:68:
                    c9:55:62:ad:4d:79:d2:9d:c6:6c:98:23:39:b5:ab:
                    bd:4c:17:54:ce:69:34:b3:0c:b4:4e:02:2c:bd:01:
                    4d:15:c4:44:9b:92:3a:38:e1:fc:0c:20:cf:a8:1d:
                    1e:2f:2e:88:65:ed:7a:f4:bd:03:e1:d5:5a:1e:51:
                    a2:b7:b3:d0:82:2a:fb:8f:17:60:d2:01:ee:bb:07:
                    b7:6f:60:17:1e:ce:c3:26:32:4a:6c:ce:08:b1:22:
                    89:0c:98:2e:ef:d4:4e:4b:76:4e:34:2a:d4:90:16:
                    ca:b8:00:76:11:2c:b3:56:83:5c:5e:98:f1:bc:c0:
                    66:8e:b0:e3:f2:14:ae:47:75:3b:7a:15:4b:8a:f3:
                    2c:94:32:6e:1b:e6:66:4d:d4:b8:25:58:53:20:af:
                    f5:20:e2:ac:02:11:37:35:b6:4d:04:08:31:d0:ee:
                    64:be:6d:bd:70:65:9f:81:ec:cd:4a:8e:f8:44:81:
                    82:a2:e4:58:b5:db:63:3c:58:da:08:5e:78:1e:ee:
                    9b:c4:95:f0:a5:b8:a9:95:3d:00:c1:3b:8e:7e:14:
                    87:c5:a3:0c:96:0d:d3:7f:fb:21:1a:dd:63:77:bb:
                    7b:99:88:74:c8:3c:14:8e:c0:91:90:3f:52:1d:82:
                    48:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:53:FF:07:35:F6:E4:8E:38:BA:DA:B8:4C:4E:0B:DF:E7:C0:37:6B
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/M1P_BzX25I44utq4TE4L3-fAN2s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.252.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0c:cf:4d:27:bd:2e:68:b5:e2:9a:ed:19:67:40:59:42:75:6c:
         18:b5:e4:a4:c9:1b:74:39:d6:42:67:a1:d8:79:55:b4:78:5d:
         14:42:ca:31:2d:52:1f:f9:0f:8a:19:7a:93:c5:50:81:31:e9:
         1d:a1:b3:8d:55:5c:ef:1f:4c:f6:0f:91:ed:5d:25:3c:b8:de:
         95:0e:fb:f3:ab:49:d9:05:6b:72:7a:e9:b4:25:27:2b:d9:8b:
         db:95:fa:1c:ae:03:60:f3:62:eb:01:7b:77:e4:7b:14:7b:04:
         29:2d:89:79:de:56:f8:3b:e0:28:38:e7:c8:2e:91:60:c5:8a:
         fb:7c:1b:16:33:72:7d:96:4e:1e:86:55:39:67:bd:f3:24:bd:
         f9:c4:23:76:fc:1d:d6:09:fa:50:cc:03:89:fd:73:d6:db:c5:
         61:8f:dd:d3:18:ac:b7:de:d4:13:17:bf:9e:36:31:93:dd:2f:
         e5:12:be:ca:2c:b8:16:f3:47:22:a5:1c:da:8f:0b:c7:fb:95:
         1d:e3:3b:e7:f6:1c:2e:c4:07:34:99:cb:62:98:ea:e2:0d:ee:
         35:70:ef:a3:2f:52:44:21:85:6f:46:e6:f8:a7:a3:da:ed:5d:
         b0:ef:da:a6:bf:92:71:3f:85:3c:77:76:04:74:70:f9:8c:0a:
         c7:ac:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----