Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/zak0DKFFEDpd7x8I8LA_5DZSp_E.roa
File:                     zak0DKFFEDpd7x8I8LA_5DZSp_E.roa (raw, json)
Hash identifier:          6J3kNYhEljfBn0Oj1Won526uWC/zVXIqzzSNOP26wjs=
Subject key identifier:   CD:A9:34:0C:A1:45:10:3A:5D:EF:1F:08:F0:B0:3F:E4:36:52:A7:F1
Certificate issuer:       /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial:       1B
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/zak0DKFFEDpd7x8I8LA_5DZSp_E.roa
Signing time:             Fri 01 Apr 2022 01:28:33 +0000
ROA not before:           Fri 01 Apr 2022 01:28:33 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     63786
IP address blocks:        103.123.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
        Validity
            Not Before: Apr  1 01:28:33 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=CDA9340CA145103A5DEF1F08F0B03FE43652A7F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:74:28:86:8c:53:fc:32:72:d8:a2:d1:be:b1:
                    d5:c3:43:8e:49:1a:91:54:76:ed:70:7b:53:ef:12:
                    8c:7f:26:27:f6:52:37:a9:17:87:b5:1a:d9:a4:53:
                    fd:e3:d5:f5:c4:5f:2f:23:f4:45:75:ef:cb:ce:c9:
                    b0:62:11:e4:7e:28:53:b4:31:86:90:70:6b:61:dd:
                    9a:68:55:b1:d1:25:56:54:d3:ec:da:e2:7c:35:a8:
                    6a:c7:a5:24:e8:3d:06:32:be:a4:20:b0:1e:45:1d:
                    4d:27:e7:f2:db:65:fc:90:8c:71:cd:9e:21:7a:00:
                    df:d4:15:4b:01:9d:11:61:25:fb:b1:04:94:96:0b:
                    4a:12:70:12:60:b7:35:fb:9b:4f:07:e4:05:2c:41:
                    94:ca:fc:f5:08:99:07:6d:7b:1a:c4:0c:f2:f5:ee:
                    f6:a9:79:33:c0:63:14:b5:48:2d:70:07:13:64:d5:
                    87:90:e4:57:1b:ce:96:27:15:49:cb:25:ec:65:9b:
                    cd:6d:a1:2b:65:80:52:1f:ec:74:60:72:5e:d6:90:
                    5c:ff:a5:df:29:dd:45:f6:33:44:8a:4c:37:69:9c:
                    3f:63:d6:ac:a1:ad:81:c1:f7:ba:58:5b:e6:bc:5e:
                    48:bc:ce:b1:e2:3f:a9:c4:87:e6:89:ee:cd:2a:77:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A9:34:0C:A1:45:10:3A:5D:EF:1F:08:F0:B0:3F:E4:36:52:A7:F1
            X509v3 Authority Key Identifier:
                keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/zak0DKFFEDpd7x8I8LA_5DZSp_E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:59:d9:fb:6a:dd:97:d2:89:0b:6d:e3:cb:be:a8:0c:84:51:
         a3:5a:ae:18:50:e8:b1:39:04:8d:a4:3b:7f:68:bb:8b:81:26:
         b1:59:b2:b3:e8:5c:1d:e8:0d:08:97:5a:84:7a:d1:6d:80:d8:
         04:19:da:9a:26:21:6c:c9:9a:12:38:13:95:6d:3c:38:87:74:
         f0:fb:84:1c:da:d3:72:de:04:e8:6b:c2:b7:e6:54:75:7a:4f:
         b0:59:d9:f9:ab:ba:b1:8c:04:aa:b1:c8:7a:14:33:e7:44:7a:
         58:36:69:f1:70:c8:5a:ba:c2:19:5f:47:a3:77:c2:fc:6e:a5:
         91:4f:c6:96:66:86:a5:d6:f8:dd:7b:dd:ec:79:0a:df:19:30:
         4e:19:2d:a7:a3:35:ba:13:1d:12:6b:56:6b:7d:ab:39:fa:0f:
         df:3f:62:6e:34:31:29:80:04:61:d6:e2:d7:3f:5b:f4:17:33:
         76:86:24:4f:a3:b0:67:22:23:eb:97:e6:07:d6:86:ab:80:14:
         7b:07:a3:52:85:d2:30:2f:c5:9a:1b:98:ac:81:5b:26:cf:19:
         42:b2:bf:e4:2e:58:fb:30:92:61:ee:b3:7a:5c:12:fe:3b:e9:
         bf:12:36:9c:7f:9f:06:c6:ae:42:95:34:9c:5d:84:05:b8:2a:
         ad:3e:e1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----