Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/nElKyG6Wilw0EVsqnnYCRZU_pjY.roa
File:                     nElKyG6Wilw0EVsqnnYCRZU_pjY.roa (raw, json)
Hash identifier:          FGOuLIqLuMaQeYTfZkv8Y30tvZdp94DGMFymsbo86CQ=
Subject key identifier:   9C:49:4A:C8:6E:96:8A:5C:34:11:5B:2A:9E:76:02:45:95:3F:A6:36
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       C8
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/nElKyG6Wilw0EVsqnnYCRZU_pjY.roa
Signing time:             Fri 01 Apr 2022 01:28:15 +0000
ROA not before:           Fri 01 Apr 2022 01:28:15 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        219.114.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:15 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=9C494AC86E968A5C34115B2A9E760245953FA636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:7f:52:c7:59:f8:ed:5d:40:88:3b:5e:44:
                    80:9c:82:90:dc:64:d7:e2:1e:13:f3:33:01:fd:a9:
                    c6:93:e3:f9:b5:17:86:29:a9:50:04:46:39:5f:80:
                    da:be:0d:51:18:7e:d2:b9:6d:14:11:b6:ec:c0:f9:
                    08:e7:62:71:11:8e:3b:48:1e:46:72:f8:ce:cb:40:
                    7a:91:23:43:b3:29:ca:cf:c5:d1:58:92:07:52:f0:
                    7e:b9:95:4e:0c:1d:19:1f:8a:cd:6c:44:ba:2c:79:
                    52:2c:c8:b9:0c:02:39:b1:43:60:16:9e:49:ef:78:
                    fb:65:46:ee:74:4f:c7:e3:ff:c6:de:3a:b3:9d:c4:
                    1a:ee:e5:ce:d2:21:ea:d6:a1:33:42:93:b3:0d:31:
                    14:16:fa:05:38:7d:fe:04:8b:e9:09:73:a6:ed:c4:
                    6a:6e:f3:33:db:60:23:61:58:57:d6:01:f8:07:82:
                    4e:49:8d:5f:e5:67:07:da:ae:ed:b1:2d:e8:47:74:
                    8d:1c:63:9c:be:c7:b8:b6:46:39:dc:76:01:0d:6c:
                    47:43:6c:b8:5c:e1:8c:2c:d3:45:73:56:3d:36:c5:
                    5f:d7:33:ab:c7:2a:b8:6a:76:a0:6f:7d:25:ff:6f:
                    67:f8:4d:c0:c8:d5:80:81:27:77:9e:bf:cc:12:fd:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:49:4A:C8:6E:96:8A:5C:34:11:5B:2A:9E:76:02:45:95:3F:A6:36
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/nElKyG6Wilw0EVsqnnYCRZU_pjY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ad:46:6d:fe:2f:6e:a7:5c:a2:cb:4b:bb:61:61:76:64:19:73:
         03:14:72:cd:8c:e4:42:f8:eb:bc:84:6c:fc:9e:72:51:61:4d:
         4e:2e:38:76:5c:ee:50:81:33:db:b7:93:92:d5:5c:59:8a:4d:
         f3:9f:67:67:f0:96:f8:b1:46:ad:7e:83:bc:66:52:fe:1b:c5:
         2e:aa:e1:c2:87:a3:99:b9:8d:44:97:fc:2d:46:45:be:cf:ca:
         45:88:c4:cb:aa:b1:91:a4:31:36:4a:15:9a:7b:b1:5d:0d:c0:
         98:ad:a1:45:ff:e8:cf:69:d7:dd:d9:81:9f:4e:50:21:6f:26:
         93:15:56:8d:97:85:3a:d4:68:4e:82:3f:9c:a7:c4:52:9f:3b:
         a4:49:e3:5d:2f:7a:09:05:2c:9b:54:bd:71:6d:a5:0e:79:fe:
         48:60:71:2f:4f:87:38:85:9e:d5:d8:27:03:ea:e7:3d:8e:af:
         1c:2e:d5:60:ae:73:ea:0f:79:85:5e:04:0d:ba:75:87:85:4b:
         ec:70:3d:d1:8c:6e:10:70:9a:97:ea:9b:6f:20:4a:a8:39:52:
         65:59:e5:35:1c:c0:8a:35:b1:84:20:a3:a2:07:16:35:b1:53:
         96:4e:1c:33:6f:de:1c:d9:55:46:26:e8:37:a0:8b:72:cb:10:
         11:59:e7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----