Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/4t-hJPhXEgyUoSuqsPbn8yiBanw.roa
File:                     4t-hJPhXEgyUoSuqsPbn8yiBanw.roa (raw, json)
Hash identifier:          rE2hLkc45/L+VpSCRFf1eErcC9VEXP4Jv53dmHsBFyM=
Subject key identifier:   E2:DF:A1:24:F8:57:12:0C:94:A1:2B:AA:B0:F6:E7:F3:28:81:6A:7C
Certificate issuer:       /CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Certificate serial:       25
Authority key identifier: DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/4t-hJPhXEgyUoSuqsPbn8yiBanw.roa
Signing time:             Sun 01 May 2022 01:31:14 +0000
ROA not before:           Sun 01 May 2022 01:31:14 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2504
IP address blocks:        192.50.24.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
        Validity
            Not Before: May  1 01:31:14 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=E2DFA124F857120C94A12BAAB0F6E7F328816A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:69:bf:33:19:b8:f8:4d:b6:dd:29:32:f0:
                    11:09:31:8a:6c:42:7c:e3:5f:f5:e3:ca:74:fe:46:
                    51:3a:99:4e:f3:1b:44:83:c2:bf:cb:35:12:43:5e:
                    36:02:ce:75:59:75:ba:5f:22:3c:84:4b:de:4a:6a:
                    d8:e6:96:6c:a5:c8:99:71:2a:1e:d3:31:3c:d1:2c:
                    5a:1c:4f:42:69:1e:d8:30:8f:a5:5c:cd:94:f2:21:
                    50:d9:bf:af:f3:67:c7:d1:71:3d:9d:65:62:84:91:
                    61:3b:96:ca:fe:45:dd:44:37:5e:92:d8:c7:cf:42:
                    14:5d:7e:76:45:47:a8:94:eb:f2:7d:2d:14:43:47:
                    7f:95:58:1a:ca:7c:49:7c:86:96:4a:69:94:85:c0:
                    33:f7:6a:7b:c1:c8:50:47:72:95:19:ee:66:17:3c:
                    c9:e0:aa:9d:b8:18:23:65:92:30:02:b2:5e:ed:19:
                    2d:ff:af:12:40:6b:b7:aa:f3:2c:23:0e:66:aa:7e:
                    c9:16:6d:b4:0e:9c:4b:da:d1:5a:69:2e:20:22:a3:
                    29:e4:91:f1:f6:9e:c9:4f:80:f1:95:ee:1c:c9:ea:
                    ef:d0:e0:ee:04:42:1c:40:94:96:5b:77:38:3e:02:
                    29:c2:d8:09:7f:a8:b9:69:23:bb:01:b5:53:99:85:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DF:A1:24:F8:57:12:0C:94:A1:2B:AA:B0:F6:E7:F3:28:81:6A:7C
            X509v3 Authority Key Identifier:
                keyid:DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/4t-hJPhXEgyUoSuqsPbn8yiBanw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:28:e4:b7:73:31:67:c7:ca:4d:92:4e:eb:21:3f:76:43:b4:
         64:54:90:ad:32:26:d6:0c:de:bc:19:a6:f5:64:ac:35:dd:5d:
         88:76:57:fb:cc:11:17:b2:0c:03:cd:ca:7b:dc:fe:d5:1d:5c:
         f1:2b:c6:eb:9a:db:07:e0:2c:09:68:11:ac:23:a9:29:d7:c0:
         3b:e4:18:67:c2:f7:57:f8:e8:65:61:f0:9e:03:9b:96:c2:0b:
         24:77:1f:fe:44:89:f3:0f:08:a2:6f:01:1d:75:97:e6:17:1c:
         9a:32:c0:db:df:27:a9:83:da:57:dd:c2:9f:91:75:ea:0d:ae:
         49:78:42:34:73:03:23:d9:9c:eb:1b:d0:e8:5b:c8:b5:20:eb:
         85:9c:97:98:92:30:93:41:ee:92:66:d4:49:c8:ea:b8:5c:82:
         b6:d6:a1:37:7c:63:23:dd:17:32:c9:d8:1f:81:f5:09:6d:6e:
         94:70:88:0f:71:de:5a:c8:2e:d0:54:23:1d:68:7b:2b:ca:18:
         60:fe:f6:58:dc:fa:2a:9e:72:1f:8e:c8:70:cb:80:cf:12:e7:
         f5:91:e6:dd:d4:47:c1:69:32:a3:86:d2:c2:8d:75:d7:2c:d0:
         75:20:21:db:7a:23:3c:68:ce:c7:c4:e5:07:63:fd:a4:f4:b2:
         b7:a8:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----