Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/PeEQ4VnXDfuguCExv8lnKVX5p_k.roa
File:                     PeEQ4VnXDfuguCExv8lnKVX5p_k.roa (raw, json)
Hash identifier:          eMNYuD+ff5vZjyqyY4nAMucIp6Qft46T4CTmLGlm+lA=
Subject key identifier:   3D:E1:10:E1:59:D7:0D:FB:A0:B8:21:31:BF:C9:67:29:55:F9:A7:F9
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       C7
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/PeEQ4VnXDfuguCExv8lnKVX5p_k.roa
Signing time:             Fri 01 Apr 2022 01:28:15 +0000
ROA not before:           Fri 01 Apr 2022 01:28:15 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        210.170.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:15 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=3DE110E159D70DFBA0B82131BFC9672955F9A7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:43:e1:e0:fe:73:91:9e:7a:9b:b9:c7:db:
                    c6:20:0a:38:49:62:9a:dc:84:f2:87:2b:94:7e:9e:
                    96:e8:2d:54:d9:87:29:68:37:bb:fb:4a:2a:93:4e:
                    8a:b7:d6:46:79:27:2e:13:26:01:73:50:65:6d:81:
                    c4:a7:db:1a:61:b6:d6:b8:49:c1:12:1e:31:f3:c2:
                    a1:16:19:4b:32:54:31:50:dc:08:bc:2e:8e:e5:c7:
                    7c:be:a3:04:67:d9:36:40:1d:44:dd:aa:a5:66:e0:
                    ea:1a:3b:45:e3:c3:ec:4a:3f:e0:75:97:54:46:ab:
                    3d:e2:e9:42:30:e7:e3:7a:9e:87:25:82:93:4b:c3:
                    c2:ca:7a:1f:66:e0:ef:b9:01:6d:59:b7:3e:5c:c6:
                    9d:66:89:50:d3:23:1a:db:66:ef:a3:c5:73:e4:59:
                    c1:fd:33:ee:83:4c:fd:10:93:bc:c4:fc:85:f0:be:
                    42:d1:e5:46:7d:4f:26:db:30:c1:79:bd:c7:b2:38:
                    94:3c:92:ad:72:ec:06:68:a6:0e:3d:50:f7:f6:b8:
                    5f:df:0b:52:0b:b4:51:99:42:2b:d4:48:c0:3c:ce:
                    22:5e:ee:9f:11:97:e6:91:fd:52:ea:79:ba:84:02:
                    7a:3a:4c:48:10:72:6d:8b:29:b2:47:91:be:e6:e9:
                    0b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E1:10:E1:59:D7:0D:FB:A0:B8:21:31:BF:C9:67:29:55:F9:A7:F9
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/PeEQ4VnXDfuguCExv8lnKVX5p_k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2b:e1:62:a0:cf:88:13:03:34:f1:54:4d:93:3e:59:97:85:85:
         7d:9f:e6:b5:7e:c1:98:f6:71:4d:65:bf:e9:02:3a:e8:47:3b:
         d5:15:8b:f7:95:74:59:0c:5a:9d:af:fb:e8:25:15:e0:f9:7d:
         0a:cc:80:73:6b:58:7d:ac:cd:5e:fb:eb:da:60:30:89:15:bc:
         76:73:08:aa:33:1d:4a:55:ca:34:79:cf:2a:e2:da:60:7d:03:
         05:ac:51:76:bd:03:b9:a3:af:30:d8:7e:60:32:a5:e4:9d:de:
         c2:3a:eb:4d:5f:dc:94:ca:ff:03:d3:49:59:2e:65:6f:a2:eb:
         83:7e:7e:dc:a6:8f:68:c1:38:4c:c1:7b:0e:39:ac:6b:ff:68:
         aa:81:40:95:8c:11:f4:a5:8e:68:e9:64:a0:23:d3:9e:1f:4a:
         f7:67:6d:5f:01:c5:63:86:2f:f5:4b:8f:c8:d8:c9:fb:d7:eb:
         b7:a6:9b:b5:9a:79:69:77:6d:79:da:2d:7f:c3:2e:9f:b3:eb:
         6b:5c:35:a9:a9:40:64:4a:75:fd:85:44:64:86:79:eb:bb:b7:
         95:a7:07:b9:ce:06:83:15:b8:db:b9:30:ce:69:4d:99:3b:84:
         53:19:da:11:ff:57:bd:88:82:39:ef:af:9b:f6:1e:f9:2c:4e:
         ac:9a:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----