Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/0ZJ3AoshOStYal1Zi1G9nb6plSY.roa
File:                     0ZJ3AoshOStYal1Zi1G9nb6plSY.roa (raw, json)
Hash identifier:          UFnCX+waZwVqZGYb+dPI9xAAUl1T1Q2/lywipO5jHSU=
Subject key identifier:   D1:92:77:02:8B:21:39:2B:58:6A:5D:59:8B:51:BD:9D:BE:A9:95:26
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0108
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0ZJ3AoshOStYal1Zi1G9nb6plSY.roa
Signing time:             Fri 10 Jun 2022 03:10:28 +0000
ROA not before:           Fri 10 Jun 2022 03:10:28 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        114.144.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:10:28 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=D19277028B21392B586A5D598B51BD9DBEA99526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:28:9a:b0:cd:74:d8:ac:21:95:96:29:92:b9:
                    c5:14:94:2b:72:27:ba:cd:2f:05:9e:8c:1b:b7:9b:
                    1a:7f:8b:8c:24:c6:2c:4c:76:d9:b4:f3:35:1f:ab:
                    66:0d:96:70:87:c4:5d:7b:7d:21:2f:76:e9:a7:2f:
                    21:d4:52:cf:f7:33:78:24:c3:45:4e:ac:5d:57:4e:
                    2d:ed:1a:1e:c7:0f:bf:36:e1:ab:47:16:a3:c5:d3:
                    bd:83:7f:ae:d5:70:d9:3d:82:97:a7:8f:c9:64:90:
                    bc:53:98:43:c0:48:a1:57:ce:11:1b:2c:35:a8:5c:
                    fd:23:73:56:6a:63:b2:e0:31:18:30:3b:28:32:8a:
                    bd:f6:cc:12:cb:53:ab:3f:b3:34:69:09:f3:50:9b:
                    8a:11:d9:ae:2d:f7:8d:38:a5:2d:bb:7f:ee:04:a8:
                    d6:03:d4:87:6c:ac:13:16:55:b6:6c:09:cd:ec:41:
                    88:a2:c6:94:ec:74:aa:ff:da:48:2e:4c:d0:58:e2:
                    f4:75:fe:a3:bb:64:c7:df:94:97:45:59:7f:fc:48:
                    85:77:eb:4c:1c:b7:4c:5c:bf:b1:be:28:7f:3d:6b:
                    fd:71:dc:eb:6f:1a:c4:45:d8:06:28:07:72:bc:e5:
                    1e:03:e2:bd:a5:10:08:99:c2:14:13:bd:80:e3:0d:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:92:77:02:8B:21:39:2B:58:6A:5D:59:8B:51:BD:9D:BE:A9:95:26
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0ZJ3AoshOStYal1Zi1G9nb6plSY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.144.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         bc:7e:6a:24:b0:5d:5b:b2:e4:13:36:7d:4d:3b:55:f3:48:82:
         2d:ee:75:16:ac:a4:39:be:b8:07:65:7b:99:c3:2a:a0:fc:ef:
         08:4f:2e:80:db:12:ff:2f:1c:63:ea:a7:98:ad:24:c9:f3:e3:
         87:13:27:52:e4:ad:03:6d:e4:bc:06:63:08:98:61:32:57:6e:
         8a:4e:4b:cb:92:8d:e8:32:23:61:f0:29:c0:2a:02:5e:31:8f:
         74:9f:1b:a8:79:96:d5:af:b9:63:71:75:64:2e:c1:63:f9:ef:
         b3:c6:73:c7:45:b4:e2:81:27:29:80:f2:b4:92:b7:07:84:30:
         38:0a:da:b5:6f:c1:60:0b:a9:f9:7e:b4:0f:67:4b:a3:dd:71:
         fb:9f:bf:f5:77:28:b8:1b:e6:48:70:77:a6:ac:7f:02:f8:5f:
         ae:64:39:3c:bc:db:b8:26:20:17:13:f0:fa:68:6f:ea:c2:96:
         be:32:04:4f:2c:04:1a:71:bb:79:4d:06:85:28:23:c7:42:1d:
         6e:61:fb:6a:62:18:de:cc:ca:e9:40:cb:1f:c7:be:fa:6e:c3:
         20:9a:b2:f1:86:a8:7d:95:33:ed:be:3c:34:a7:56:63:21:b5:
         6e:1f:4e:0f:41:68:5d:1d:2d:74:98:d6:75:36:8f:52:54:14:
         ee:94:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----