Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/cL8BoZC04cGefDT0j98pHn-3UDI.roa
File:                     cL8BoZC04cGefDT0j98pHn-3UDI.roa (raw, json)
Hash identifier:          /zcoTz8i3bBThYRJdVk6R/0VtKgbYf08dU4fAYPskj4=
Subject key identifier:   70:BF:01:A1:90:B4:E1:C1:9E:7C:34:F4:8F:DF:29:1E:7F:B7:50:32
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       2F
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/cL8BoZC04cGefDT0j98pHn-3UDI.roa
Signing time:             Wed 18 Aug 2021 07:54:25 +0000
ROA not before:           Wed 18 Aug 2021 07:54:25 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     2518
IP address blocks:        218.42.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug 18 07:54:25 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=70BF01A190B4E1C19E7C34F48FDF291E7FB75032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:a4:22:79:01:ae:01:2f:26:bf:d2:ab:c3:
                    e1:67:6a:94:0f:c4:b6:6a:b5:2e:34:44:b7:d4:02:
                    49:0f:d3:22:87:7a:ca:b3:7f:83:73:98:84:78:b6:
                    db:31:71:44:4c:bc:0b:71:b7:06:a3:24:d2:80:4f:
                    de:ac:aa:77:79:52:15:9c:7b:83:14:43:c7:98:61:
                    d1:e7:4c:94:41:72:5e:36:e9:ae:46:31:40:99:c6:
                    55:1c:85:a2:06:ec:ef:54:a8:9a:ec:c8:ec:1c:22:
                    88:02:d9:08:19:ea:1c:ac:15:57:d2:33:18:4b:76:
                    18:3a:c6:72:a5:8c:91:ff:d0:22:6e:d3:14:55:4b:
                    97:b3:c3:57:62:d4:56:77:b1:91:ef:2a:d6:2c:84:
                    bb:7a:93:66:ef:95:0a:b5:12:9c:c0:ef:8e:89:31:
                    8b:18:2a:d8:02:77:4d:0c:4c:cf:42:3a:ff:17:9c:
                    99:61:7b:7b:97:2d:7b:e3:39:66:b9:0a:0f:ca:8d:
                    63:a9:78:22:92:1f:e3:da:fb:71:14:d5:1e:4c:bb:
                    95:79:2e:21:99:e2:c7:29:db:9f:91:d4:01:78:f5:
                    e3:e0:76:3b:e2:81:a4:a0:51:f1:7e:42:28:a0:ad:
                    56:bc:82:89:f0:9a:65:fc:08:36:69:14:37:dc:27:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BF:01:A1:90:B4:E1:C1:9E:7C:34:F4:8F:DF:29:1E:7F:B7:50:32
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/cL8BoZC04cGefDT0j98pHn-3UDI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.42.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         27:9f:00:0e:69:ad:d6:02:bc:9e:c7:e2:9f:eb:0c:59:a1:36:
         bb:0a:25:26:de:bd:5a:b6:83:81:25:53:6d:96:f1:f2:c6:9b:
         18:e0:cd:29:87:64:a5:06:4f:94:f7:89:9e:21:88:3e:21:ed:
         bd:d3:a9:df:8f:d7:53:23:25:bb:4f:35:cb:f8:01:82:b7:3c:
         f0:90:1e:96:c6:9a:05:bf:35:08:7e:69:02:cf:9c:ea:03:12:
         06:e2:47:fa:25:0a:d9:94:7f:f6:fb:9d:89:55:a5:14:c0:d0:
         99:97:cc:d0:bf:89:03:73:a4:0a:72:0c:c3:90:a2:24:13:93:
         c2:9d:59:18:ef:3b:d8:f6:87:cc:4c:77:6a:08:50:65:f4:0b:
         0e:13:86:7f:21:e5:ba:d8:f2:89:06:79:b3:d8:9a:1d:46:38:
         54:d3:f6:91:99:d8:01:9e:f8:62:36:f3:de:d8:3d:b2:5b:e6:
         e5:b9:f5:54:a5:a8:91:1d:1c:09:77:5c:31:ef:6b:7e:cf:8c:
         fb:46:f0:1f:de:1c:36:62:7e:07:51:cb:cd:d6:e4:79:1c:49:
         76:81:67:ed:bd:8b:88:31:62:4b:38:66:e3:74:7e:f2:a3:af:
         91:9a:0c:2b:18:e3:cf:6b:3f:65:5e:58:57:7a:94:de:d7:5e:
         2a:7d:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----