Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nTgLNTD8TYma2JOJk6V_LSBwl5M.roa
File:                     nTgLNTD8TYma2JOJk6V_LSBwl5M.roa (raw, json)
Hash identifier:          2/Oqymgab2fRrWXMJ/hNVSD8OXFIJdSRcqeA7OruW1g=
Subject key identifier:   9D:38:0B:35:30:FC:4D:89:9A:D8:93:89:93:A5:7F:2D:20:70:97:93
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       52
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nTgLNTD8TYma2JOJk6V_LSBwl5M.roa
Signing time:             Tue 07 Jun 2022 10:01:12 +0000
ROA not before:           Tue 07 Jun 2022 10:01:12 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        27.95.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:01:12 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=9D380B3530FC4D899AD8938993A57F2D20709793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:93:d9:db:48:50:75:b7:8d:cd:67:81:97:
                    68:bf:14:1f:4f:f1:41:f9:98:49:cb:2c:6b:8a:56:
                    fa:c1:35:d6:e6:06:4f:a5:19:0f:df:00:9b:a7:49:
                    20:e0:00:ad:98:f1:b6:20:83:3d:bb:af:0f:9c:bd:
                    ae:85:a0:b7:85:94:03:5d:ff:a6:27:40:5c:fd:00:
                    91:73:7c:50:9c:3c:19:23:3e:3d:89:18:7e:9c:86:
                    7b:c0:63:f7:60:e7:60:b9:e8:3e:de:41:86:f7:b4:
                    6f:a9:93:af:50:bb:17:36:e8:6f:ac:8b:4f:31:fe:
                    69:d9:f9:ad:ba:a7:39:30:11:68:b3:25:7a:5f:86:
                    9c:a0:56:df:ab:42:e6:b0:8b:d8:73:f7:9a:36:47:
                    00:a6:fd:68:4d:a3:0f:45:2d:3b:19:92:62:94:f7:
                    90:52:0b:b2:e3:76:b0:9b:53:2a:5a:e5:42:2a:31:
                    9c:4b:49:4c:27:ba:37:e3:12:37:55:1f:c2:8c:fa:
                    72:94:f0:88:c2:df:c9:00:b2:5e:b7:c6:81:c9:5a:
                    af:80:a6:ce:d9:7a:1c:18:d0:e3:b4:23:af:ca:9c:
                    af:4e:0b:2e:12:be:32:fd:22:76:1c:6b:b6:23:d4:
                    c9:82:84:ec:77:5d:47:86:6f:56:51:4b:45:b0:74:
                    ab:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:38:0B:35:30:FC:4D:89:9A:D8:93:89:93:A5:7F:2D:20:70:97:93
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nTgLNTD8TYma2JOJk6V_LSBwl5M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.95.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:08:1f:b9:a0:ba:33:a7:d1:e3:68:60:4e:8b:54:45:08:8f:
         51:c4:54:a0:81:03:8c:84:bd:99:98:a4:6a:ac:23:39:0b:9d:
         1b:2a:aa:09:34:d2:96:8e:b8:e2:c2:7f:46:89:29:92:84:53:
         83:3c:ba:db:b4:4f:79:c3:c0:85:57:35:5a:c0:a8:80:e7:a2:
         0b:f6:67:94:b4:5b:db:77:4e:71:f9:7d:30:43:26:05:b8:1f:
         f1:06:14:e9:1d:29:86:7a:7d:58:b7:4e:31:dc:b9:e8:41:ba:
         bc:97:cb:78:a6:83:55:b4:04:27:a9:da:e8:c5:3e:49:3e:5e:
         a3:38:43:9b:64:20:e5:3b:30:a4:04:7e:f6:75:2f:bd:f9:bf:
         89:a9:41:68:0b:57:c2:e0:4a:92:dd:48:97:d8:ef:2e:6a:56:
         7e:8c:99:4c:80:a9:02:8b:a3:dd:46:1d:01:74:52:6a:c5:a2:
         eb:07:a1:47:a7:f6:32:9e:ba:5e:12:72:25:11:2f:63:e4:e0:
         35:2f:0c:4a:72:a9:ea:0d:fc:39:8c:37:0e:7e:bc:0b:88:04:
         3a:c2:e2:86:43:55:67:b5:39:fd:95:f4:ee:6d:4e:67:44:5d:
         81:db:d8:f5:1d:4c:55:d9:77:d3:a4:d5:90:08:36:6d:80:21:
         b8:1c:ac:80
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzEw
MDExMloXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoOUQzODBCMzUzMEZDNEQ4
OTlBRDg5Mzg5OTNBNTdGMkQyMDcwOTc5MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALcbk9nbSFB1t43NZ4GXaL8UH0/xQfmYScssa4pW+sE11uYGT6UZ
D98Am6dJIOAArZjxtiCDPbuvD5y9roWgt4WUA13/pidAXP0AkXN8UJw8GSM+PYkY
fpyGe8Bj92DnYLnoPt5Bhve0b6mTr1C7Fzbob6yLTzH+adn5rbqnOTARaLMlel+G
nKBW36tC5rCL2HP3mjZHAKb9aE2jD0UtOxmSYpT3kFILsuN2sJtTKlrlQioxnEtJ
TCe6N+MSN1Ufwoz6cpTwiMLfyQCyXrfGgclar4Cmztl6HBjQ47Qjr8qcr04LLhK+
Mv0idhxrtiPUyYKE7HddR4ZvVlFLRbB0qz8CAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBSdOAs1MPxNiZrYk4mTpX8tIHCXkzAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvblRnTE5URDhUWW1hMkpPSms2Vl9MU0J3bDVNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDABtfMA0GCSqGSIb3DQEBCwUAA4IBAQBVCB+5oLozp9HjaGBOi1RFCI9RxFSg
gQOMhL2ZmKRqrCM5C50bKqoJNNKWjrjiwn9GiSmShFODPLrbtE95w8CFVzVawKiA
56IL9meUtFvbd05x+X0wQyYFuB/xBhTpHSmGen1Yt04x3LnoQbq8l8t4poNVtAQn
qdroxT5JPl6jOEObZCDlOzCkBH72dS+9+b+JqUFoC1fC4EqS3UiX2O8ualZ+jJlM
gKkCi6PdRh0BdFJqxaLrB6FHp/YynrpeEnIlES9j5OA1LwxKcqnqDfw5jDcOfrwL
iAQ6wuKGQ1VntTn9lfTubU5nRF2B29j1HUxV2XfTpNWQCDZtgCG4HKyA
-----END CERTIFICATE-----