Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/s0EgV6uqG6ZRS0PvCwbFqkSnolo.roa
File:                     s0EgV6uqG6ZRS0PvCwbFqkSnolo.roa (raw, json)
Hash identifier:          hZXWDlWUHX+9omfdSIfdvvIEnaDeagDlHunRPjmn4t8=
Subject key identifier:   B3:41:20:57:AB:AA:1B:A6:51:4B:43:EF:0B:06:C5:AA:44:A7:A2:5A
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       2B
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/s0EgV6uqG6ZRS0PvCwbFqkSnolo.roa
Signing time:             Wed 20 Apr 2022 09:17:23 +0000
ROA not before:           Wed 20 Apr 2022 09:17:23 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        210.151.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:17:23 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=B3412057ABAA1BA6514B43EF0B06C5AA44A7A25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:cd:74:08:d1:bd:70:19:64:a0:f5:46:93:
                    8a:a3:51:a7:35:65:4b:98:a1:98:3f:3a:41:60:27:
                    88:e1:87:76:73:f9:bc:92:23:b9:03:c5:d9:fe:36:
                    4f:9a:36:f8:ec:6a:46:f4:54:23:0f:30:ff:19:cf:
                    de:18:6f:a3:ec:31:b7:28:c3:31:fe:8c:ff:17:9a:
                    e7:e6:cf:f8:e0:41:40:27:82:ce:7b:39:79:19:98:
                    67:62:30:be:3f:83:80:4e:b0:98:be:71:18:b2:32:
                    92:68:4b:1d:a3:d6:b7:a6:8d:7d:3f:f6:ba:5d:46:
                    1e:5b:41:ac:71:b7:7e:01:60:de:0a:e8:18:56:c1:
                    49:5b:80:4a:55:28:68:05:86:83:c6:2e:97:eb:28:
                    fe:d2:3e:aa:7e:ea:86:4c:e1:77:77:fb:92:6a:a7:
                    aa:a1:c2:48:f5:dd:61:d4:d3:f6:35:2e:75:02:73:
                    00:c4:0f:3d:d3:4b:7a:fc:f7:28:3a:d8:7f:45:1f:
                    87:e1:39:a8:10:d8:94:4f:cc:0a:5c:51:94:e5:29:
                    68:be:27:af:a5:dd:39:b4:4c:7d:19:c2:b0:cb:ac:
                    fe:58:d7:4e:e4:c5:41:76:9e:04:eb:d0:f3:78:31:
                    23:14:8e:4c:84:cb:89:a6:f3:11:5b:f6:a9:7e:36:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:20:57:AB:AA:1B:A6:51:4B:43:EF:0B:06:C5:AA:44:A7:A2:5A
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/s0EgV6uqG6ZRS0PvCwbFqkSnolo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.151.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:26:3f:5f:12:33:74:ac:ec:fd:69:c1:99:0c:8e:66:bf:12:
         19:94:8e:ad:67:32:a0:85:76:fa:76:b4:c2:d9:ec:91:90:de:
         d3:6d:59:08:c0:74:9c:2f:9b:99:a4:18:9b:17:93:c1:60:26:
         7e:8d:bd:0f:04:3a:66:fb:e3:7c:54:51:ac:b3:68:39:4d:5d:
         c8:3c:55:c3:e2:df:d5:cf:18:d0:02:2a:00:6c:1c:99:e4:6d:
         1f:4e:16:fc:f7:73:2c:a5:06:34:49:71:e6:12:cf:fd:40:fc:
         02:8c:c8:c0:35:08:17:5b:1f:a2:6d:48:34:56:6b:7b:c8:b8:
         4c:cd:ad:7f:c6:09:7d:e3:8e:51:d2:1c:76:63:c3:17:19:0e:
         4a:70:f9:aa:ca:97:4d:32:4e:4e:c5:ab:08:ab:cb:3c:65:bb:
         96:9d:11:3d:8b:c9:b8:32:f4:a0:29:59:3a:e9:39:93:4d:b8:
         9e:58:cf:16:e0:44:b6:da:60:bc:4a:43:fe:38:3c:ad:e7:d2:
         89:c6:f9:43:6e:bf:30:5a:3b:62:2d:e3:8c:de:cb:c8:c2:c4:
         ee:66:96:c7:ea:c0:5c:d4:07:85:93:bd:ef:ba:cb:9b:81:d5:
         ac:cc:35:8f:6b:aa:db:3e:36:e1:78:fe:39:0c:60:d0:be:52:
         88:f3:f4:59
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MTcyM1oXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQjM0MTIwNTdBQkFBMUJB
NjUxNEI0M0VGMEIwNkM1QUE0NEE3QTI1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL7xzXQI0b1wGWSg9UaTiqNRpzVlS5ihmD86QWAniOGHdnP5vJIj
uQPF2f42T5o2+OxqRvRUIw8w/xnP3hhvo+wxtyjDMf6M/xea5+bP+OBBQCeCzns5
eRmYZ2Iwvj+DgE6wmL5xGLIykmhLHaPWt6aNfT/2ul1GHltBrHG3fgFg3groGFbB
SVuASlUoaAWGg8Yul+so/tI+qn7qhkzhd3f7kmqnqqHCSPXdYdTT9jUudQJzAMQP
PdNLevz3KDrYf0Ufh+E5qBDYlE/MClxRlOUpaL4nr6XdObRMfRnCsMus/ljXTuTF
QXaeBOvQ83gxIxSOTITLiabzEVv2qX42VusCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSzQSBXq6obplFLQ+8LBsWqRKeiWjAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvczBFZ1Y2dXFHNlpSUzBQdkN3YkZxa1Nub2xvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtKXADANBgkqhkiG9w0BAQsFAAOCAQEA
kSY/XxIzdKzs/WnBmQyOZr8SGZSOrWcyoIV2+na0wtnskZDe021ZCMB0nC+bmaQY
mxeTwWAmfo29DwQ6ZvvjfFRRrLNoOU1dyDxVw+Lf1c8Y0AIqAGwcmeRtH04W/Pdz
LKUGNElx5hLP/UD8AozIwDUIF1sfom1INFZre8i4TM2tf8YJfeOOUdIcdmPDFxkO
SnD5qsqXTTJOTsWrCKvLPGW7lp0RPYvJuDL0oClZOuk5k024nljPFuBEttpgvEpD
/jg8refSicb5Q26/MFo7Yi3jjN7LyMLE7maWx+rAXNQHhZO977rLm4HVrMw1j2uq
2z424Xj+OQxg0L5SiPP0WQ==
-----END CERTIFICATE-----