Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/DJM6fw5AHM9BHw48MCjLPOzSqAc.roa
File:                     DJM6fw5AHM9BHw48MCjLPOzSqAc.roa (raw, json)
Hash identifier:          Hq6dkpBz+bj2LaDOpkx2eNMNSpRJ5fwZAqzXXX72oCM=
Subject key identifier:   0C:93:3A:7F:0E:40:1C:CF:41:1F:0E:3C:30:28:CB:3C:EC:D2:A8:07
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       DA
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/DJM6fw5AHM9BHw48MCjLPOzSqAc.roa
Signing time:             Fri 01 Apr 2022 01:28:20 +0000
ROA not before:           Fri 01 Apr 2022 01:28:20 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        153.248.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:20 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=0C933A7F0E401CCF411F0E3C3028CB3CECD2A807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:ed:96:9d:ce:9d:00:67:c2:68:f4:38:62:
                    9a:79:a6:49:f8:f1:fc:27:1e:2d:f7:9c:5f:0f:58:
                    5c:19:d5:5d:bb:3a:82:44:d3:7a:f1:37:67:5b:c8:
                    43:bc:d2:9b:d8:51:41:5c:f4:ec:92:a2:40:0c:28:
                    c1:96:24:04:d2:8c:90:40:2c:d1:fb:ce:9e:73:76:
                    59:ef:a8:bd:87:dc:b2:2c:a4:da:a7:67:79:5f:2e:
                    3a:b0:83:25:25:68:34:11:12:4a:ad:f6:2d:45:82:
                    4b:e4:bc:bc:3f:20:fe:4c:c5:40:58:0c:d6:f1:71:
                    a3:4b:fc:b2:34:1e:57:e0:8f:c9:b2:bf:48:f0:4a:
                    ae:64:bb:37:c4:4f:97:28:d6:d9:e9:2a:5e:0a:3c:
                    41:18:10:6c:3e:0c:99:a9:86:82:b5:10:5c:57:37:
                    ad:11:9b:13:6e:cb:07:90:9c:37:77:9b:15:4e:fa:
                    80:bc:e7:ea:cf:e2:76:a1:e9:35:9a:f7:76:2e:57:
                    39:1e:89:92:ba:7a:51:26:f8:32:fa:f1:34:4c:f5:
                    d3:47:88:7d:7f:b2:32:cf:8a:3a:f4:4c:c8:7f:49:
                    a8:f5:f3:07:41:4b:01:be:89:35:ca:9f:a1:0d:1f:
                    48:48:90:9a:d7:1e:cb:31:b3:eb:d0:fd:88:98:47:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:93:3A:7F:0E:40:1C:CF:41:1F:0E:3C:30:28:CB:3C:EC:D2:A8:07
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/DJM6fw5AHM9BHw48MCjLPOzSqAc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.248.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         71:b6:8b:52:35:11:d8:05:db:ad:0b:17:fc:0a:13:cd:65:19:
         fe:19:49:fa:c8:25:45:16:10:41:95:ba:7e:8c:0b:16:c1:f1:
         53:30:08:99:7b:64:f2:8c:6b:98:0c:1e:5e:e0:4f:2a:bd:9b:
         e0:c3:36:87:75:15:58:da:90:cd:06:88:9c:9b:e8:1d:51:d6:
         d8:01:5c:db:f8:3e:ea:07:cf:a0:00:a1:43:70:96:dc:8b:7f:
         c2:37:e5:0f:9c:aa:9d:d2:3f:96:95:29:1c:e6:7b:c9:93:dc:
         b4:1c:bb:8e:6d:f8:d6:ce:24:5e:56:26:5a:f2:80:05:66:22:
         4c:de:18:a2:5d:61:73:4e:e5:5f:ff:f7:1e:e9:58:ca:28:fd:
         5b:06:d8:da:1a:b4:32:6a:0b:d9:53:56:a0:9d:19:55:c6:45:
         c7:bd:aa:ae:44:e1:f1:94:6e:74:11:36:72:d9:06:c3:1a:1a:
         85:34:63:9e:83:35:1e:9b:65:6d:3a:66:0c:e4:d4:33:cf:55:
         37:93:ce:60:3e:6e:19:68:a3:9f:19:98:61:45:fc:47:43:b1:
         cd:2a:9e:97:b6:1d:3f:7c:0e:3e:75:f2:da:4a:73:2b:bb:21:
         5d:ad:27:16:75:0c:77:40:0e:4c:c3:e3:bd:1c:c5:8f:1b:c6:
         23:32:03:87
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICANowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MjBaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKDBDOTMzQTdGMEU0MDFD
Q0Y0MTFGMEUzQzMwMjhDQjNDRUNEMkE4MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9SO2Wnc6dAGfCaPQ4Ypp5pkn48fwnHi33nF8PWFwZ1V27OoJE
03rxN2dbyEO80pvYUUFc9OySokAMKMGWJATSjJBALNH7zp5zdlnvqL2H3LIspNqn
Z3lfLjqwgyUlaDQREkqt9i1FgkvkvLw/IP5MxUBYDNbxcaNL/LI0Hlfgj8myv0jw
Sq5kuzfET5co1tnpKl4KPEEYEGw+DJmphoK1EFxXN60RmxNuyweQnDd3mxVO+oC8
5+rP4nah6TWa93YuVzkeiZK6elEm+DL68TRM9dNHiH1/sjLPijr0TMh/Saj18wdB
SwG+iTXKn6ENH0hIkJrXHssxs+vQ/YiYR2d3AgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUDJM6fw5AHM9BHw48MCjLPOzSqAcwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL0RKTTZmdzVBSE05Qkh3NDhNQ2pMUE96U3FBYy5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwKZ+DANBgkqhkiG9w0BAQsFAAOCAQEA
cbaLUjUR2AXbrQsX/AoTzWUZ/hlJ+sglRRYQQZW6fowLFsHxUzAImXtk8oxrmAwe
XuBPKr2b4MM2h3UVWNqQzQaInJvoHVHW2AFc2/g+6gfPoAChQ3CW3It/wjflD5yq
ndI/lpUpHOZ7yZPctBy7jm341s4kXlYmWvKABWYiTN4Yol1hc07lX//3HulYyij9
WwbY2hq0MmoL2VNWoJ0ZVcZFx72qrkTh8ZRudBE2ctkGwxoahTRjnoM1HptlbTpm
DOTUM89VN5POYD5uGWijnxmYYUX8R0OxzSqel7YdP3wOPnXy2kpzK7shXa0nFnUM
d0AOTMPjvRzFjxvGIzIDhw==
-----END CERTIFICATE-----