Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/iQxLcTHUcK-w6Tnf3cjvgkzUmvs.roa
File:                     iQxLcTHUcK-w6Tnf3cjvgkzUmvs.roa (raw, json)
Hash identifier:          fZPDDm8fHhtmTDawNwEjtjl3UEThIga99t4/CYvzxak=
Subject key identifier:   89:0C:4B:71:31:D4:70:AF:B0:E9:39:DF:DD:C8:EF:82:4C:D4:9A:FB
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       4A
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/iQxLcTHUcK-w6Tnf3cjvgkzUmvs.roa
Signing time:             Wed 20 Apr 2022 09:37:41 +0000
ROA not before:           Wed 20 Apr 2022 09:37:41 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.33.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:37:41 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=890C4B7131D470AFB0E939DFDDC8EF824CD49AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:6d:0f:79:02:df:0f:ba:f8:5b:b9:6d:97:
                    e2:1d:58:03:a2:2d:4d:01:d4:aa:b9:d9:7f:11:c8:
                    13:da:99:33:49:07:58:b8:c7:8d:3c:2e:ce:d5:bd:
                    bc:4d:f6:f0:4a:15:c1:7a:26:bd:ba:1c:5e:09:1f:
                    6f:13:a8:cb:4f:44:e1:0f:3e:29:1d:6a:1c:f4:74:
                    d7:02:ac:ee:2c:5e:99:3a:81:e7:d2:24:fa:1f:ed:
                    69:81:eb:d8:f9:7a:cf:fa:5c:1d:59:fa:8e:8e:3a:
                    a3:69:95:06:04:8e:97:01:b2:98:e2:9a:05:9c:1c:
                    5b:d4:54:e4:ce:40:f3:9f:dd:bf:5a:f8:97:5b:da:
                    36:b1:4c:14:d6:7b:15:94:5b:02:fa:71:90:0f:d8:
                    10:95:f8:1f:35:87:36:ea:c7:82:0d:74:75:b9:29:
                    43:52:a3:a9:fb:02:ba:44:32:28:01:aa:83:ea:0b:
                    ac:7e:36:d3:6f:9c:85:d6:9e:9b:5f:6e:12:ac:06:
                    73:8d:36:70:05:81:b1:e0:74:b2:e3:45:b5:8f:4b:
                    db:36:65:9a:0a:84:41:6e:52:e0:fe:6f:5a:83:5c:
                    de:58:08:d4:d1:b1:a2:6d:3f:bd:7b:13:8c:b8:9f:
                    2c:82:df:cc:b3:dd:1a:fc:79:64:62:63:b7:b9:ec:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0C:4B:71:31:D4:70:AF:B0:E9:39:DF:DD:C8:EF:82:4C:D4:9A:FB
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/iQxLcTHUcK-w6Tnf3cjvgkzUmvs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.33.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:9b:a6:eb:24:c5:8b:a1:71:fa:4f:81:50:65:e5:12:53:7e:
         f1:15:d3:ae:a3:52:1b:be:58:85:cb:a6:66:18:b6:10:37:91:
         b6:5d:82:06:6c:22:e9:86:46:fd:3c:0a:17:24:95:be:87:c8:
         12:8d:49:d1:5a:05:45:a1:a3:c9:1e:9d:55:d5:52:70:df:4f:
         c3:ae:b8:53:ce:fa:98:78:11:d4:d3:9b:3c:de:af:88:a7:37:
         f6:76:0d:68:fc:35:f0:9a:ba:2a:60:b8:92:a8:33:c7:3a:db:
         92:b3:6d:96:91:89:68:da:e6:67:23:1f:2d:a4:c8:86:15:fb:
         2e:c9:1e:3f:2c:ee:03:c0:0c:29:c2:e2:7e:5d:68:36:dd:7d:
         d0:72:a2:57:c0:02:11:c2:11:10:02:39:c7:65:55:6f:b7:a7:
         5f:d3:cf:78:fa:ac:64:b3:d0:44:1f:14:88:e6:66:5b:1c:82:
         d1:6c:41:47:4a:e4:b0:8a:15:bf:77:c1:82:cf:aa:f6:b6:5e:
         4e:65:f0:8b:33:bd:b4:8d:c0:95:10:fa:3c:81:ce:46:a7:91:
         58:4c:04:93:1f:c3:17:b0:c1:55:71:51:a3:96:1e:de:cd:f1:
         b4:b1:d8:46:7c:f6:74:d2:f3:1b:c6:c5:be:32:2e:57:09:66:
         83:ec:2e:75
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
Mzc0MVoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoODkwQzRCNzEzMUQ0NzBB
RkIwRTkzOURGRERDOEVGODI0Q0Q0OUFGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL5pbQ95At8PuvhbuW2X4h1YA6ItTQHUqrnZfxHIE9qZM0kHWLjH
jTwuztW9vE328EoVwXomvbocXgkfbxOoy09E4Q8+KR1qHPR01wKs7ixemTqB59Ik
+h/taYHr2Pl6z/pcHVn6jo46o2mVBgSOlwGymOKaBZwcW9RU5M5A85/dv1r4l1va
NrFMFNZ7FZRbAvpxkA/YEJX4HzWHNurHgg10dbkpQ1KjqfsCukQyKAGqg+oLrH42
02+chdaem19uEqwGc402cAWBseB0suNFtY9L2zZlmgqEQW5S4P5vWoNc3lgI1NGx
om0/vXsTjLifLILfzLPdGvx5ZGJjt7ns2OcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSJDEtxMdRwr7DpOd/dyO+CTNSa+zAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvaVF4TGNUSFVjSy13NlRuZjNjanZna3pVbXZzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMohczANBgkqhkiG9w0BAQsFAAOCAQEA
W5um6yTFi6Fx+k+BUGXlElN+8RXTrqNSG75YhcumZhi2EDeRtl2CBmwi6YZG/TwK
FySVvofIEo1J0VoFRaGjyR6dVdVScN9Pw664U876mHgR1NObPN6viKc39nYNaPw1
8Jq6KmC4kqgzxzrbkrNtlpGJaNrmZyMfLaTIhhX7LskePyzuA8AMKcLifl1oNt19
0HKiV8ACEcIREAI5x2VVb7enX9PPePqsZLPQRB8UiOZmWxyC0WxBR0rksIoVv3fB
gs+q9rZeTmXwizO9tI3AlRD6PIHORqeRWEwEkx/DF7DBVXFRo5Ye3s3xtLHYRnz2
dNLzG8bFvjIuVwlmg+wudQ==
-----END CERTIFICATE-----