Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/qZUOWa4LXkjlEXa88Brac9kYOio.roa
File:                     qZUOWa4LXkjlEXa88Brac9kYOio.roa (raw, json)
Hash identifier:          zeRuB/Bj9a0BxzRUQOOkMScnhdAaG+Ptxtoj3s3heIw=
Subject key identifier:   A9:95:0E:59:AE:0B:5E:48:E5:11:76:BC:F0:1A:DA:73:D9:18:3A:2A
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       D4
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qZUOWa4LXkjlEXa88Brac9kYOio.roa
Signing time:             Fri 01 Apr 2022 01:28:19 +0000
ROA not before:           Fri 01 Apr 2022 01:28:19 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        122.16.0.0/12 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:19 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=A9950E59AE0B5E48E51176BCF01ADA73D9183A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:a0:b6:10:78:60:83:c8:9d:eb:9e:72:a1:
                    b1:33:2f:7d:88:0d:c4:d2:e0:bf:15:84:aa:84:db:
                    2b:2c:e2:dd:0f:ec:76:c0:74:dc:bc:b8:85:c1:e1:
                    8f:ba:32:7f:24:41:42:5b:7d:91:1b:ae:8e:37:ba:
                    93:e3:c0:be:4c:2e:e7:be:83:57:8a:c3:27:f2:d4:
                    53:0a:20:36:26:a6:11:9b:0f:59:0f:f5:20:c7:81:
                    b8:0b:c9:0b:3d:3a:9b:90:dd:4a:0d:4a:55:68:8b:
                    c8:5e:85:02:40:82:d4:3a:ed:3a:23:d0:28:b7:03:
                    cb:4c:53:13:a4:5d:2a:31:30:f9:d1:5b:07:23:eb:
                    88:09:cb:a8:65:92:19:72:ab:fb:84:c4:db:99:40:
                    89:45:a1:5f:10:c5:01:62:fa:7c:dd:19:ce:e9:d8:
                    26:6c:1c:04:94:31:7b:25:cb:29:6d:6e:01:73:59:
                    6a:73:a6:db:f7:ab:69:e4:c7:4c:88:06:5d:40:d7:
                    6e:5e:c2:9a:39:f2:f3:45:e5:25:e9:53:0a:33:e6:
                    d7:dc:4e:be:37:e5:34:e5:0b:1e:05:5c:91:a1:b5:
                    95:d9:0a:ec:61:f1:c6:9e:7f:a1:e3:c9:f9:48:f3:
                    76:a6:6f:20:40:82:59:12:70:09:87:51:79:fa:3a:
                    09:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:95:0E:59:AE:0B:5E:48:E5:11:76:BC:F0:1A:DA:73:D9:18:3A:2A
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qZUOWa4LXkjlEXa88Brac9kYOio.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.16.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         6f:43:73:ab:53:cd:fd:b1:11:83:1c:a1:c4:c7:d9:33:1a:3f:
         cc:f7:7c:c5:56:e0:27:ae:5e:f0:30:a0:f4:5f:80:01:85:6f:
         bd:bb:fe:44:6c:de:86:a2:3b:64:52:87:3e:e4:ad:de:bf:87:
         f1:78:8f:1b:c9:17:80:8d:21:d9:71:60:21:e9:66:8f:6e:2c:
         99:13:26:45:1a:05:d6:d8:d9:ef:8c:6b:24:f8:3c:ca:b6:01:
         b2:d3:09:3c:5b:31:05:33:ee:86:f0:ab:49:be:43:26:cc:30:
         7e:c9:d8:72:49:a2:7e:2c:06:91:1e:01:c8:34:12:5c:da:ae:
         8b:ff:e8:a2:27:ee:4c:06:bb:73:55:84:71:7e:13:3f:d3:12:
         2a:5b:b2:a5:65:01:34:6b:86:b5:ea:d2:69:75:12:ab:53:f8:
         4e:00:87:7b:ab:75:d5:26:69:f3:5f:71:d2:47:90:86:d5:56:
         92:77:67:5b:0d:d4:f7:2e:15:6c:c5:fa:fb:c1:f9:de:34:42:
         f0:44:9f:e1:bd:6f:70:df:b9:15:4f:37:c9:c3:3f:84:18:ea:
         ce:81:f6:ed:10:79:d3:ca:aa:7c:ff:fb:a2:9c:dd:2a:44:a2:
         c2:b3:9f:70:e9:b9:48:05:64:b0:9d:0e:68:7c:d1:78:91:3b:
         21:0b:12:e6
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MTlaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKEE5OTUwRTU5QUUwQjVF
NDhFNTExNzZCQ0YwMUFEQTczRDkxODNBMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqXaC2EHhgg8id655yobEzL32IDcTS4L8VhKqE2yss4t0P7HbA
dNy8uIXB4Y+6Mn8kQUJbfZEbro43upPjwL5MLue+g1eKwyfy1FMKIDYmphGbD1kP
9SDHgbgLyQs9OpuQ3UoNSlVoi8hehQJAgtQ67Toj0Ci3A8tMUxOkXSoxMPnRWwcj
64gJy6hlkhlyq/uExNuZQIlFoV8QxQFi+nzdGc7p2CZsHASUMXslyyltbgFzWWpz
ptv3q2nkx0yIBl1A125ewpo58vNF5SXpUwoz5tfcTr435TTlCx4FXJGhtZXZCuxh
8caef6HjyflI83ambyBAglkScAmHUXn6OglvAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUqZUOWa4LXkjlEXa88Brac9kYOiowHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL3FaVU9XYTRMWGtqbEVYYTg4QnJhYzlrWU9pby5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwR6EDANBgkqhkiG9w0BAQsFAAOCAQEA
b0Nzq1PN/bERgxyhxMfZMxo/zPd8xVbgJ65e8DCg9F+AAYVvvbv+RGzehqI7ZFKH
PuSt3r+H8XiPG8kXgI0h2XFgIelmj24smRMmRRoF1tjZ74xrJPg8yrYBstMJPFsx
BTPuhvCrSb5DJswwfsnYckmifiwGkR4ByDQSXNqui//ooifuTAa7c1WEcX4TP9MS
KluypWUBNGuGterSaXUSq1P4TgCHe6t11SZp819x0keQhtVWkndnWw3U9y4VbMX6
+8H53jRC8ESf4b1vcN+5FU83ycM/hBjqzoH27RB508qqfP/7opzdKkSiwrOfcOm5
SAVksJ0OaHzReJE7IQsS5g==
-----END CERTIFICATE-----