Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Cyyq4dksp5NxOGCaJHZwkiAXekA.roa
File:                     Cyyq4dksp5NxOGCaJHZwkiAXekA.roa (raw, json)
Hash identifier:          9XPIqorJJ/vaJF7utbyt3nF3CAMD797hIrVn7AV+QT0=
Subject key identifier:   0B:2C:AA:E1:D9:2C:A7:93:71:38:60:9A:24:76:70:92:20:17:7A:40
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       010A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Cyyq4dksp5NxOGCaJHZwkiAXekA.roa
Signing time:             Fri 10 Jun 2022 03:12:25 +0000
ROA not before:           Fri 10 Jun 2022 03:12:25 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        118.0.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:12:25 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=0B2CAAE1D92CA7937138609A2476709220177A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:c7:8c:4f:a9:8c:68:3f:88:9f:6d:d0:85:
                    7b:d0:33:92:c1:94:52:40:fb:50:54:68:c1:3d:41:
                    37:b0:34:0f:e6:33:55:34:8e:3c:d7:45:e1:94:66:
                    55:55:50:a4:81:ef:b9:2e:eb:38:5c:56:71:28:bf:
                    9f:d5:05:12:f1:a0:07:56:02:d1:6e:97:f6:d1:ef:
                    f9:6f:f1:c1:0a:ae:32:98:c9:b9:46:f7:57:71:9c:
                    ea:c0:2c:1b:5d:e7:6c:d3:33:df:cb:45:af:f0:40:
                    ad:c7:45:7e:92:c0:c3:bd:11:53:b1:dc:b9:0f:40:
                    57:71:cd:f2:da:15:f4:83:00:9a:0e:21:71:71:c5:
                    95:f2:33:ab:09:c1:f0:af:2c:55:8e:c1:d4:fe:81:
                    6a:d7:dd:10:38:9f:b3:ee:d6:e8:35:4b:a6:9d:97:
                    2d:51:9f:1e:7d:f2:fc:44:2b:79:0e:c7:0a:77:ec:
                    d1:88:36:bc:dc:7f:ff:40:84:0d:fe:29:c2:84:66:
                    b8:e8:49:da:6c:89:c9:d8:3c:0c:83:1b:9e:46:b0:
                    3a:f1:8f:fc:00:21:5c:35:54:3a:ba:f4:75:d6:f5:
                    ca:28:5b:3f:48:94:90:31:90:f4:9c:5e:28:db:d4:
                    f7:cb:2a:17:8f:0a:03:62:ad:23:eb:98:77:45:ab:
                    25:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2C:AA:E1:D9:2C:A7:93:71:38:60:9A:24:76:70:92:20:17:7A:40
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Cyyq4dksp5NxOGCaJHZwkiAXekA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.0.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         62:0c:85:9c:3d:7f:28:19:8e:95:71:e1:5e:1d:96:44:c3:9e:
         62:f4:e4:72:c7:b6:3e:5c:17:5d:a0:e6:0c:07:f6:16:13:25:
         d6:a2:02:27:35:fe:0b:4d:6f:47:e0:c8:2e:85:80:c8:65:da:
         ce:ad:de:c4:4e:c7:40:01:e3:44:2f:bd:1b:57:a9:bf:da:5a:
         e6:8e:32:56:e5:d6:e0:e8:83:32:ba:72:a1:03:a4:f6:5e:78:
         c4:92:d8:b8:17:69:37:a3:63:70:d2:69:8e:40:2b:af:a2:42:
         67:7c:04:3d:f3:8d:41:a3:c8:40:4b:05:3d:bf:ac:7b:8b:be:
         35:79:a6:e9:d9:11:db:b2:8e:6b:7d:34:27:93:15:01:2d:ea:
         1c:58:53:3f:13:29:ad:1c:73:b3:1e:10:4e:dd:2b:36:c5:44:
         3e:97:d3:a2:d8:5c:f5:b7:df:f9:0f:ac:22:0c:c4:1f:f0:89:
         af:1b:ee:d7:f0:92:0d:71:ab:68:2e:d2:a9:d9:0e:15:57:77:
         91:7b:57:8f:2e:5c:ba:f0:95:52:ce:f5:f0:86:7c:31:f2:7d:
         89:d2:e3:f8:0b:a3:a8:26:57:d7:da:d5:a6:cc:b2:64:d0:5f:
         3a:69:b2:55:54:03:cd:82:2e:7b:2f:9b:bb:b8:49:c0:e5:1a:
         86:b7:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----