Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/QYZaz5TNCLdi2tnC9V2BBxr4ew0.roa
File:                     QYZaz5TNCLdi2tnC9V2BBxr4ew0.roa (raw, json)
Hash identifier:          hRTCnQFpjKLtL9VC6buJ1iaN554iOQkvumrxhW77EPo=
Subject key identifier:   41:86:5A:CF:94:CD:08:B7:62:DA:D9:C2:F5:5D:81:07:1A:F8:7B:0D
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       31
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/QYZaz5TNCLdi2tnC9V2BBxr4ew0.roa
Signing time:             Wed 20 Apr 2022 09:22:25 +0000
ROA not before:           Wed 20 Apr 2022 09:22:25 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        210.134.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:22:25 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=41865ACF94CD08B762DAD9C2F55D81071AF87B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:95:2f:29:fe:81:a3:11:23:17:4f:87:21:
                    9c:cb:ca:52:b4:13:03:85:2a:b5:e3:b9:69:79:7a:
                    81:e3:3a:2a:d8:c5:3e:22:96:7f:f6:88:8d:83:ef:
                    e5:21:11:f3:b8:b1:f1:c5:fd:50:f8:1f:b9:9a:90:
                    6d:5a:cf:db:a4:3d:6e:d3:f7:71:99:e6:4a:ee:1d:
                    96:a8:46:76:88:c4:b9:25:96:77:4f:ab:b3:93:20:
                    94:97:ca:32:b2:30:82:b5:91:75:cf:25:0c:ca:0c:
                    f0:e2:bd:1a:e3:9d:13:04:8d:a3:98:8f:da:30:a5:
                    2a:4c:d2:dc:01:7a:f2:98:b6:20:e3:d1:95:40:16:
                    6b:e2:e9:5a:b0:93:0c:44:75:1c:98:62:eb:3c:29:
                    3f:0f:6c:53:aa:aa:41:be:8c:be:07:9c:3c:63:18:
                    32:45:3f:a5:73:4c:a3:eb:02:47:d5:ae:6d:7b:b5:
                    c4:4d:32:10:95:44:64:02:f8:b8:78:b1:a7:7a:2c:
                    cd:e2:a4:4c:3d:34:bb:fd:89:fc:8a:9e:22:bd:d5:
                    2a:f1:ac:6f:f2:0d:45:52:3e:a2:1a:24:41:54:9f:
                    54:5f:c9:27:13:40:d9:62:b0:3a:81:9b:26:63:7c:
                    99:18:e2:73:9d:96:bd:e1:ac:94:8b:9e:38:54:7c:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:86:5A:CF:94:CD:08:B7:62:DA:D9:C2:F5:5D:81:07:1A:F8:7B:0D
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/QYZaz5TNCLdi2tnC9V2BBxr4ew0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.134.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:63:6e:b5:11:76:37:93:bb:b6:52:00:2d:94:ff:f5:0e:0a:
         aa:7f:f7:1b:66:b9:98:2b:e7:6a:ba:f3:0d:e8:35:b3:ed:12:
         40:26:11:c3:f3:f9:ff:6c:96:c2:18:6d:22:d1:c8:5e:44:b6:
         4b:09:3a:a6:38:f1:73:76:5f:a5:07:f1:4f:b7:02:08:02:fb:
         9a:07:a7:86:77:14:c2:bc:b4:cb:ff:77:64:07:9d:1f:c6:38:
         07:c1:bf:33:e3:38:76:3a:33:68:31:ab:e7:d4:98:61:11:75:
         17:7b:a4:42:73:6d:10:55:2f:97:01:19:7e:2a:f0:20:87:b6:
         aa:fa:b6:43:d4:07:fe:51:9f:81:bb:7b:6b:69:ec:ce:de:35:
         42:e3:42:c2:c7:40:01:6e:b3:87:fa:e1:89:1a:95:a1:c1:77:
         c4:2f:02:9b:5a:93:ca:46:8d:95:e1:b5:f0:6e:91:54:f4:56:
         77:cc:98:64:9f:be:a2:94:17:2b:e3:eb:90:a3:8d:fe:8c:94:
         df:3c:fe:b2:13:1d:b0:ba:ec:3c:92:45:aa:6c:66:9e:ec:32:
         a0:1d:7b:28:97:40:3e:57:f5:0b:11:02:96:54:21:13:6c:03:
         26:66:7e:2b:f2:4d:84:c9:22:bc:f3:34:5c:60:9c:29:47:98:
         e8:3b:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----