Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QA38vpuxTBSH44LBEEhRJmExoMc.roa
File:                     QA38vpuxTBSH44LBEEhRJmExoMc.roa (raw, json)
Hash identifier:          YyLOUqImBloesgqAgLacNqacwm88JghMAlfb3e5FRTk=
Subject key identifier:   40:0D:FC:BE:9B:B1:4C:14:87:E3:82:C1:10:48:51:26:61:31:A0:C7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       B9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QA38vpuxTBSH44LBEEhRJmExoMc.roa
Signing time:             Tue 14 Jun 2022 09:11:51 +0000
ROA not before:           Tue 14 Jun 2022 09:11:51 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        211.134.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:11:51 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=400DFCBE9BB14C1487E382C1104851266131A0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:15:d5:2f:8e:4b:0f:94:c9:91:6d:b3:c5:42:
                    db:85:3c:5f:d1:a6:7a:c0:cb:b3:03:f5:70:ae:58:
                    f2:43:63:8c:7e:24:ed:ff:4c:ec:de:e1:3c:b5:59:
                    93:72:f2:22:24:42:57:08:7d:cf:81:af:0b:93:d0:
                    00:ed:4d:5a:e0:c4:19:36:00:70:bc:5e:e4:59:fb:
                    ad:9d:0e:85:9d:2a:36:6b:e6:09:1c:d3:3a:71:14:
                    5d:35:87:8b:03:13:4a:11:31:74:a9:be:f8:59:24:
                    bb:54:bb:ea:ae:47:44:62:4c:60:92:b8:44:03:d5:
                    22:b3:4c:31:71:59:67:05:a3:4c:96:c2:05:33:b8:
                    d7:dd:f9:07:4a:27:e9:cf:95:85:aa:b2:0a:bf:32:
                    6c:39:2e:73:b1:b4:58:53:ae:0e:ce:15:ac:52:74:
                    ad:36:3f:60:95:e4:82:d0:76:af:6e:d7:38:b3:e0:
                    95:4a:34:de:86:04:09:72:32:b6:f6:63:31:01:5d:
                    ba:79:9c:b2:39:e7:c3:3b:8a:6e:75:53:ce:e1:c9:
                    39:42:f6:a4:0c:d6:85:2b:dd:78:ca:b0:b6:6f:80:
                    44:e6:77:93:19:e2:d2:24:3d:1e:fe:69:a4:cc:ff:
                    71:0b:26:f6:ed:1e:27:9a:2d:94:3b:68:cb:6e:46:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0D:FC:BE:9B:B1:4C:14:87:E3:82:C1:10:48:51:26:61:31:A0:C7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QA38vpuxTBSH44LBEEhRJmExoMc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:a3:b1:7e:64:31:95:61:f9:5f:1c:96:98:25:54:32:60:3c:
         80:f4:9c:2b:33:2a:00:51:c7:77:d5:40:c2:23:4d:a8:dd:08:
         58:34:da:20:ea:60:9c:11:13:27:2d:7d:fc:cb:cf:58:a1:06:
         42:bf:9d:ec:bf:99:69:5e:d1:73:98:dd:8a:18:c1:b8:1d:55:
         78:65:60:40:4e:cf:4b:51:34:3b:97:4c:ee:2a:7a:f9:24:c9:
         77:15:6d:6f:2a:93:d1:f0:56:b2:4b:61:0f:2a:7d:b1:af:f0:
         9d:37:40:91:a4:dc:ff:12:6a:18:01:4b:c8:e1:b9:7f:4e:36:
         3f:2e:ee:47:11:a1:43:13:ea:bf:d6:fb:c8:f8:14:40:1a:31:
         28:34:6c:00:06:e1:f4:1c:de:e8:3f:4f:26:39:b2:a9:18:97:
         a1:29:c6:e9:99:c5:e5:5b:2a:30:25:39:4d:ef:1f:fd:b3:f0:
         59:8e:20:4d:e9:05:49:fb:cd:0c:4a:5d:3d:a5:d2:ae:81:a3:
         30:1c:df:34:6c:23:fb:d9:5b:e7:29:12:61:90:31:85:e5:c3:
         88:df:5e:25:72:c3:e9:74:70:da:ef:f8:cf:98:40:b0:cd:9f:
         64:83:ee:09:28:3f:da:27:73:d4:a0:26:55:db:ea:91:51:5c:
         f2:f9:b4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----