Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/uYwEutka6i6ciwFzAHT1YClH2V8.roa
File:                     uYwEutka6i6ciwFzAHT1YClH2V8.roa (raw, json)
Hash identifier:          GsiEj5GDqIERXAN4Dxs7Q61zFvAx2OoKhlKoCuY/lsI=
Subject key identifier:   B9:8C:04:BA:D9:1A:EA:2E:9C:8B:01:73:00:74:F5:60:29:47:D9:5F
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       0A
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/uYwEutka6i6ciwFzAHT1YClH2V8.roa
Signing time:             Wed 20 Apr 2022 08:47:23 +0000
ROA not before:           Wed 20 Apr 2022 08:47:23 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        61.196.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 08:47:23 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=B98C04BAD91AEA2E9C8B01730074F5602947D95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:aa:a8:99:33:81:47:c5:ff:37:63:4f:2d:
                    c7:ac:b8:1d:4d:2c:49:d5:d2:d3:7d:45:a8:c8:5b:
                    69:b0:f8:f2:33:cd:ed:42:27:e4:ff:e8:b1:15:68:
                    5a:70:d4:89:5c:f5:55:ad:44:70:8b:d1:4f:c0:f6:
                    88:dc:c9:d4:08:91:92:f5:ab:96:c0:98:d2:91:5b:
                    ea:6a:97:31:70:9d:8e:b1:5e:9d:a0:04:0f:64:ea:
                    29:c4:2b:91:56:38:02:00:56:89:cd:c8:9b:cc:9b:
                    f3:a4:89:1d:2b:ca:ff:95:2f:b4:3a:b0:23:59:ef:
                    1d:c9:da:a4:1a:c5:14:8c:b2:ea:56:8b:98:6d:3c:
                    13:d8:5f:e1:b5:43:1d:9c:e2:8d:25:27:b6:d8:fc:
                    e5:0f:65:6b:ac:1d:cc:8f:54:a1:fe:95:20:c9:b3:
                    0e:4d:8c:70:8f:dd:eb:e5:ba:13:be:72:db:e1:61:
                    06:7b:71:86:ac:07:f1:ff:e1:42:9c:cf:03:41:30:
                    29:3b:41:44:ae:2f:c0:25:a9:23:ec:3c:e4:d4:e8:
                    5f:e1:b5:c3:54:da:19:4a:1f:84:5e:87:85:82:d6:
                    9e:b5:f0:c8:9a:ce:e5:3d:19:5e:db:be:52:1e:e3:
                    57:af:bc:78:74:a9:9d:80:54:be:7f:e7:3a:4a:cc:
                    97:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8C:04:BA:D9:1A:EA:2E:9C:8B:01:73:00:74:F5:60:29:47:D9:5F
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/uYwEutka6i6ciwFzAHT1YClH2V8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.196.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:65:53:3e:30:94:43:5e:3c:7c:d3:81:d0:d9:a1:75:6c:34:
         dd:26:96:f7:6c:db:9e:44:f3:38:b8:42:c6:60:ee:8f:82:7c:
         3d:95:36:f8:a7:96:d7:23:07:42:b7:6f:5c:df:ff:e5:8e:31:
         41:82:69:79:ac:86:c0:79:5a:92:93:b3:eb:b3:13:76:62:82:
         8d:f8:0c:64:cc:4f:d7:2a:3a:9e:5e:e1:be:d2:e1:e8:e5:39:
         cb:87:de:f8:0a:b9:12:23:16:28:f0:a9:7e:a8:c0:f1:a6:b5:
         e7:dc:53:99:c7:00:fb:1c:4d:97:41:9d:00:3c:65:4c:80:69:
         12:91:cf:9d:64:2b:97:02:89:f4:a1:4a:f5:cf:8a:80:10:3a:
         87:2d:31:c6:bd:43:da:82:d1:18:3c:dc:70:82:c9:21:7e:34:
         57:af:44:3e:2e:9c:63:94:b0:c8:ce:39:7b:24:6a:e7:8e:55:
         ed:38:b0:01:83:fa:55:b4:84:19:72:35:30:cd:ab:08:8d:ee:
         2a:be:ce:47:ca:fa:4a:df:de:4a:ef:48:52:d5:8b:70:a3:3c:
         11:aa:75:7a:dd:5e:10:9d:cb:d7:4d:2b:fa:45:4f:26:25:3b:
         5a:54:74:48:99:33:b3:d1:08:35:06:d5:6f:91:21:09:ce:c3:
         cd:96:7d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----