Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WkZ2b-ULSUGgu6TJ1Kd-gKacIM4.roa
File:                     WkZ2b-ULSUGgu6TJ1Kd-gKacIM4.roa (raw, json)
Hash identifier:          FUMM4RUk0An89ZL6pZOSt7lcaaOPcdcfyFBn/2pIHcE=
Subject key identifier:   5A:46:76:6F:E5:0B:49:41:A0:BB:A4:C9:D4:A7:7E:80:A6:9C:20:CE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01CE
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WkZ2b-ULSUGgu6TJ1Kd-gKacIM4.roa
Signing time:             Mon 20 Feb 2023 07:55:22 +0000
ROA not before:           Mon 20 Feb 2023 07:55:22 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.158/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:22 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=5A46766FE50B4941A0BBA4C9D4A77E80A69C20CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:e4:ce:99:21:5c:43:49:63:55:81:4d:e7:
                    07:b6:3d:92:ed:ee:56:b4:c6:0d:0a:ce:aa:3d:68:
                    bf:f8:38:1c:7f:3e:68:16:7e:26:f8:f5:b2:57:08:
                    41:7d:5d:f9:79:39:74:1c:53:05:3f:19:dc:ee:26:
                    cf:62:b7:32:0a:6d:62:85:6c:f7:4b:42:da:c1:73:
                    d7:fa:43:10:db:e4:b0:7d:6f:ac:d1:d3:aa:9a:55:
                    6a:d9:87:07:19:c8:3f:86:a1:0a:fb:b9:68:37:4f:
                    e1:64:cb:68:5b:8b:40:0d:3e:48:84:a2:76:82:02:
                    08:dd:86:9b:95:f1:54:1b:e6:9a:ff:9d:6d:1c:70:
                    00:dc:4e:93:49:b9:8f:00:58:df:1a:dd:79:d6:97:
                    e5:31:c3:26:24:07:f1:27:6b:8a:eb:b0:09:b8:16:
                    a0:4e:5e:2a:74:da:e9:51:ef:ca:f1:18:93:df:b6:
                    0d:ad:a0:b3:31:55:9a:32:d1:d4:de:aa:8e:2c:e7:
                    08:19:a5:67:0c:9f:22:0f:8d:f8:d8:c7:ee:12:2a:
                    4d:37:96:90:e3:d1:f4:8e:b3:e0:f7:90:ca:6b:eb:
                    7f:fd:97:1e:49:5a:03:49:0a:45:82:2c:83:e2:79:
                    7c:88:b9:b0:15:17:29:a6:e8:28:9f:a0:9b:c6:d0:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:46:76:6F:E5:0B:49:41:A0:BB:A4:C9:D4:A7:7E:80:A6:9C:20:CE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WkZ2b-ULSUGgu6TJ1Kd-gKacIM4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.158/32

    Signature Algorithm: sha256WithRSAEncryption
         28:10:6f:11:4f:b6:0b:70:e3:98:0b:3b:ec:01:2f:33:3c:f9:
         c3:50:bc:4a:af:9b:e4:52:d8:28:c4:10:50:44:bb:0a:c0:33:
         b6:ea:2b:96:46:82:c3:f3:2f:9c:55:1e:3f:f0:af:be:a7:af:
         13:1d:96:6d:34:b4:04:3c:a6:59:bc:9a:a6:bc:b2:05:89:7d:
         c7:d2:bd:06:de:d1:a7:6e:5e:34:67:ea:b2:af:8f:2b:d6:ae:
         4d:e4:85:c2:62:75:39:35:5c:79:a2:ed:c1:db:48:82:2a:41:
         ef:67:a0:56:c9:f7:4e:cb:93:e0:a5:46:cb:1a:d8:fc:6a:d6:
         f0:82:6e:8c:1f:b5:69:3c:12:60:1d:d7:9a:8f:7e:59:1f:8e:
         ae:aa:05:3f:9a:6c:d1:51:20:9f:27:4f:13:87:12:d4:d6:ed:
         07:47:09:24:00:ae:81:92:e1:8c:ce:f9:ad:9b:df:c9:9b:f4:
         0b:3a:85:12:17:73:44:e7:fb:e4:e2:f7:94:a9:cf:8f:21:60:
         1c:fd:1e:4d:d8:01:b9:49:82:7d:2d:32:b6:13:82:88:6f:a2:
         7d:d6:3c:ca:a3:c8:e8:6e:9f:47:f7:51:04:81:0a:76:d5:21:
         03:f9:54:a0:7c:e8:11:18:48:79:ae:d1:3c:89:dd:3c:d5:41:
         9f:ca:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----