Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/iTBmEBj8slifUcAOPnZPmjLeTP0.roa
File:                     iTBmEBj8slifUcAOPnZPmjLeTP0.roa (raw, json)
Hash identifier:          j2CpRS7tdNkJsLPWHlRS8rSjEEhvijUoojB8YTUgB/Q=
Subject key identifier:   89:30:66:10:18:FC:B2:58:9F:51:C0:0E:3E:76:4F:9A:32:DE:4C:FD
Certificate issuer:       /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Certificate serial:       09
Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/iTBmEBj8slifUcAOPnZPmjLeTP0.roa
Signing time:             Thu 28 Oct 2021 02:33:05 +0000
ROA not before:           Thu 28 Oct 2021 02:33:05 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     131921
IP address blocks:        180.222.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
        Validity
            Not Before: Oct 28 02:33:05 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=8930661018FCB2589F51C00E3E764F9A32DE4CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:81:10:78:ad:1c:7d:21:7a:00:b6:2d:c8:32:
                    70:89:82:32:65:45:0a:27:29:b2:24:b2:c6:6b:76:
                    e5:b7:74:c1:a6:17:ac:a3:fc:95:5f:69:bd:0b:ee:
                    12:4a:86:56:45:bf:99:4f:78:ad:51:76:7c:0c:de:
                    b4:f4:60:e2:5a:4b:fa:53:94:5f:f2:7e:19:8f:ca:
                    14:86:bb:1a:bf:99:47:90:bd:29:2c:2b:d0:dd:be:
                    55:6e:58:9d:29:58:7d:d3:f5:b4:e7:d3:20:99:50:
                    68:d1:11:c6:37:43:4f:4a:bc:cf:fa:de:49:8c:ef:
                    13:87:a3:bd:82:24:6c:79:0f:c9:f3:8f:23:73:d1:
                    78:16:64:7b:32:2a:01:c3:e7:1b:13:ec:f7:db:5b:
                    a8:4d:97:15:27:29:94:0d:9e:ea:e0:c6:2e:a9:a9:
                    d8:ac:5c:d2:96:74:36:23:0d:cc:5f:42:56:e4:ca:
                    0b:82:74:c4:2b:ff:57:cf:c3:ab:13:fc:ec:ef:d7:
                    ad:7d:ba:f4:a8:13:9b:ef:3c:32:13:1e:28:04:45:
                    a1:33:41:b6:99:f8:37:e3:e6:f3:ef:99:e9:f8:a3:
                    ce:53:cc:0c:17:69:57:46:84:b0:06:d2:92:f3:3d:
                    41:2e:7d:6a:2f:fa:90:46:38:98:54:e2:df:1e:c5:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:30:66:10:18:FC:B2:58:9F:51:C0:0E:3E:76:4F:9A:32:DE:4C:FD
            X509v3 Authority Key Identifier:
                keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/iTBmEBj8slifUcAOPnZPmjLeTP0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.222.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:ac:6a:3c:6c:86:3e:67:85:a2:be:09:ed:02:a7:05:51:
         65:db:a6:20:78:75:fa:b3:a4:d0:22:d1:c6:ee:17:f8:91:c1:
         00:c3:01:bb:03:9c:17:bb:5e:13:9c:4d:49:c2:09:76:f3:88:
         1f:59:1c:e2:44:82:3c:ff:63:d3:6b:8d:b2:a6:db:48:69:83:
         97:66:60:0c:4a:0c:33:1e:a2:b6:c4:63:d3:b1:30:62:c8:38:
         f8:9a:7c:b3:41:df:cf:2a:9a:71:95:6c:68:d5:21:8a:55:05:
         4c:d5:2d:11:f4:b1:ef:c0:5e:6f:4f:c4:27:05:0c:ce:d4:34:
         bc:65:64:08:38:4e:3d:04:07:0b:4a:33:cb:f5:6d:1d:5a:ac:
         4b:13:6f:f1:34:2a:37:9d:17:d5:8d:b2:c3:3e:a7:98:56:f9:
         1f:fc:2f:3e:be:56:74:01:a8:2b:b5:02:8a:37:35:70:0f:7b:
         ba:88:5d:99:8c:95:da:3c:79:94:da:4b:52:63:5c:e6:9b:4a:
         2d:e7:11:f6:98:3a:45:b9:65:34:63:f7:11:24:47:c4:87:8a:
         28:e7:40:db:f9:7c:fc:49:1c:16:07:10:9a:61:e7:ca:72:ac:
         60:62:f1:4a:97:b1:5b:21:c8:fd:35:63:24:43:29:5b:8d:98:
         0b:18:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----