Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ywd4acMgDbCaQAqJZmDIIGfRH1U.roa
File:                     ywd4acMgDbCaQAqJZmDIIGfRH1U.roa (raw, json)
Hash identifier:          LYOFEjxLSwNJFMvWkRxXSbeLMH1M9ybCgdSwuCas9g8=
Subject key identifier:   CB:07:78:69:C3:20:0D:B0:9A:40:0A:89:66:60:C8:20:67:D1:1F:55
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       CB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ywd4acMgDbCaQAqJZmDIIGfRH1U.roa
Signing time:             Tue 14 Jun 2022 09:21:50 +0000
ROA not before:           Tue 14 Jun 2022 09:21:50 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        125.28.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:21:50 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=CB077869C3200DB09A400A896660C82067D11F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:69:1e:cf:1a:c2:0a:7d:8d:ee:e4:24:3e:
                    8b:35:cc:7d:5f:d3:7d:c8:04:5d:24:4d:3d:d0:07:
                    d8:b5:31:6f:0a:ef:38:4b:2e:f7:1c:b0:8c:e8:93:
                    4f:b0:41:79:0c:52:02:42:31:a3:40:ed:d7:8f:36:
                    9c:b4:da:f0:5c:72:31:f5:05:06:68:78:8a:d9:50:
                    3e:33:af:04:f5:62:90:c4:18:32:c2:c9:b3:f2:02:
                    db:33:ed:cb:b1:e9:7a:77:c1:e7:c3:9f:86:c8:65:
                    9c:12:10:44:ef:a0:99:e4:1a:b3:cf:b0:f5:39:9a:
                    28:16:e2:4e:6e:62:a5:13:e2:1b:c3:51:bc:9e:2d:
                    38:db:b3:00:49:89:fe:24:58:18:e0:f2:c8:42:86:
                    07:d9:e8:62:6b:c4:c1:ed:43:2b:1b:ab:5a:f8:aa:
                    5d:3c:38:c5:34:60:b9:70:ee:71:16:1c:e5:81:5f:
                    37:36:39:a8:c9:c9:32:2a:02:5e:07:d6:51:42:af:
                    87:40:f3:2d:8e:e8:f9:89:e6:2c:03:5b:33:e3:8a:
                    e2:d6:82:00:7c:27:3c:72:c9:4d:e7:ea:95:00:6d:
                    54:b6:d2:17:7d:05:80:fa:0b:03:21:cd:22:2d:bf:
                    df:43:7a:d5:d1:ad:3e:29:0a:ba:57:60:5e:0b:b6:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:07:78:69:C3:20:0D:B0:9A:40:0A:89:66:60:C8:20:67:D1:1F:55
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ywd4acMgDbCaQAqJZmDIIGfRH1U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.28.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:e0:6d:2d:5c:29:ca:f4:43:d9:1e:aa:9e:b5:4f:19:da:
         70:f1:80:72:53:8e:44:7f:4e:19:2a:e8:c9:ac:e8:ea:25:af:
         70:c1:b5:71:7a:b1:1d:e3:14:41:5e:1a:a9:20:29:ce:90:ec:
         41:8d:3c:d7:85:20:cc:50:59:85:a7:b9:24:c6:f2:67:d1:68:
         5e:11:86:2e:fc:4c:e6:8b:c0:b0:70:fb:f7:25:89:71:5c:74:
         37:f1:f6:7a:c5:0d:9d:20:13:4b:b3:e1:1b:07:ec:98:ff:e0:
         46:8f:89:61:92:8d:4f:01:cc:61:d2:42:43:b0:f7:ab:30:66:
         15:25:05:df:ce:a5:25:08:1c:58:07:60:36:e3:5f:57:fc:27:
         7b:6c:af:0c:41:70:38:b0:b3:26:84:7e:0d:a1:60:a1:f6:87:
         b9:fa:7c:cc:fd:f7:51:b9:35:26:e5:6b:ea:1f:31:1f:b0:cf:
         6c:83:7f:d6:73:fd:51:e6:8d:18:13:4e:e1:97:44:68:7e:2f:
         8d:fa:55:ec:bc:32:5f:81:c1:f7:fe:98:7d:59:3f:f9:7c:8b:
         ac:20:67:1b:a7:5a:44:b4:58:34:d5:ac:fa:bf:6e:2d:0b:83:
         c4:7c:4a:5b:03:61:e0:0b:8d:5b:25:b5:92:2d:b6:94:3f:db:
         7b:aa:a1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----