Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JtoIMw4mHs5cAwN-kkpdk1Ar5Uw.roa
File:                     JtoIMw4mHs5cAwN-kkpdk1Ar5Uw.roa (raw, json)
Hash identifier:          EWK6DGKZaa6raILitnxoBeh18KXw2cEu6cnQ/aOI5LU=
Subject key identifier:   26:DA:08:33:0E:26:1E:CE:5C:03:03:7E:92:4A:5D:93:50:2B:E5:4C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       B3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JtoIMw4mHs5cAwN-kkpdk1Ar5Uw.roa
Signing time:             Tue 14 Jun 2022 09:11:49 +0000
ROA not before:           Tue 14 Jun 2022 09:11:49 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.190.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:11:49 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=26DA08330E261ECE5C03037E924A5D93502BE54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:f0:23:da:5b:32:2b:7e:e5:53:99:a9:11:
                    92:5e:83:bb:4d:1c:e7:da:2a:f9:3c:c4:6e:18:b7:
                    b9:78:b1:b0:f8:06:1d:f6:87:db:e2:55:82:a5:68:
                    42:c3:65:af:46:df:51:e5:a7:81:cc:34:f2:8d:9c:
                    ea:67:1f:ee:36:3a:18:02:91:5d:a1:c5:fa:f2:f6:
                    11:b0:58:e4:61:71:02:a2:3f:6b:72:e4:2e:01:b5:
                    19:99:07:6d:fa:9c:9a:1b:fb:fc:cc:5c:ad:a5:0b:
                    3b:a8:7a:0d:5f:d7:52:60:57:5e:4e:d8:31:46:00:
                    b5:77:b4:f1:32:9c:93:6a:71:eb:0e:44:38:bd:51:
                    da:2c:b4:87:fc:f6:41:c1:e6:9b:c8:1e:53:e6:ae:
                    52:93:34:fa:b1:51:d2:dc:2b:4d:c8:10:90:ca:d5:
                    2b:e3:28:80:34:21:aa:24:ff:1f:87:86:cd:8d:aa:
                    58:6d:3c:18:df:99:cd:d2:3b:9e:4e:25:e0:11:7d:
                    17:eb:7c:f3:41:52:85:46:97:97:6b:41:4c:c7:fd:
                    74:3e:c0:45:f1:2e:9b:0b:3c:71:2d:5b:cd:63:ee:
                    dc:3e:03:1b:16:32:23:68:3e:67:28:91:8e:07:23:
                    41:56:3a:24:7f:06:fa:d7:99:02:4b:e7:db:4e:ce:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DA:08:33:0E:26:1E:CE:5C:03:03:7E:92:4A:5D:93:50:2B:E5:4C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JtoIMw4mHs5cAwN-kkpdk1Ar5Uw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.190.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         82:5c:90:93:eb:b2:47:20:59:4d:1d:58:f4:67:4f:9e:2f:b0:
         24:5a:75:7b:69:1b:fe:76:ea:95:78:22:b2:54:7f:56:e5:27:
         f9:18:c0:64:cd:3a:4a:75:86:4f:38:36:03:e9:98:bb:c8:81:
         ad:e4:9d:89:4d:83:e0:7e:92:16:40:6f:5b:ed:e1:56:29:80:
         bc:c6:af:c5:59:e2:ee:c1:66:4e:b2:b6:4c:94:92:1c:e2:1e:
         1c:2f:b9:09:35:9a:8f:38:ff:55:b0:d6:ad:7a:61:ab:9b:86:
         f8:c1:a2:0a:cf:a5:07:f3:cb:1a:1b:85:3f:64:98:61:79:e3:
         86:fb:f9:f6:a2:52:68:6a:f4:fe:12:14:a1:05:2b:17:ce:ca:
         7f:16:0d:76:0c:68:11:4e:a7:cc:61:f3:1f:b7:7e:94:0b:dc:
         64:41:91:ab:5f:dc:93:1e:57:77:20:b0:02:45:ac:d7:2d:38:
         8c:72:74:ed:85:17:ce:0a:7c:f1:85:85:0d:04:36:48:46:49:
         db:db:c0:69:3e:3a:db:65:f8:10:f9:b7:d9:60:26:ad:bc:7b:
         bf:99:37:f9:e3:e3:58:90:d9:1b:db:1a:a0:c6:40:66:39:da:
         0f:c4:6b:78:be:e9:33:93:e1:ca:ca:c7:6b:bf:33:12:30:00:
         73:56:d3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----