Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uDnkAcSM6xS0wyKEFCuzRIh59ho.roa
File:                     uDnkAcSM6xS0wyKEFCuzRIh59ho.roa (raw, json)
Hash identifier:          Y4B4swh44XWn/hWKGxV8z2ehdvkhWk/2r0j8Ln1W7GI=
Subject key identifier:   B8:39:E4:01:C4:8C:EB:14:B4:C3:22:84:14:2B:B3:44:88:79:F6:1A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0154
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uDnkAcSM6xS0wyKEFCuzRIh59ho.roa
Signing time:             Wed 15 Feb 2023 02:28:32 +0000
ROA not before:           Wed 15 Feb 2023 02:28:32 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.26/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:32 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=B839E401C48CEB14B4C32284142BB3448879F61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:91:08:04:6e:5a:22:0d:ac:90:96:d0:6e:
                    8c:95:c7:ba:2c:4e:5a:04:ff:ed:9a:d3:47:79:f2:
                    37:ca:00:4d:5d:e3:35:b5:2b:53:2f:b0:bb:e2:73:
                    bf:4d:ee:d7:71:59:be:b6:1f:34:8d:3e:41:44:9d:
                    c4:25:75:e5:13:99:89:5e:a2:7d:48:d4:82:fc:a9:
                    9e:07:8c:71:49:c0:ac:87:97:ff:4d:9c:31:7a:e2:
                    71:ef:5a:92:09:7b:f7:46:a8:a7:85:dd:2b:88:d2:
                    da:85:c6:0b:cc:4f:d9:70:c0:0a:c0:a1:5f:a9:a3:
                    a7:45:aa:2c:d3:51:f2:9c:09:91:d1:f2:91:8e:ba:
                    2a:a5:b0:f9:7b:49:92:a2:23:b9:09:cf:11:2f:04:
                    10:ba:10:ab:e9:2e:85:84:8a:25:77:0a:07:f3:50:
                    26:b1:37:cf:10:e1:1a:26:42:a8:e6:3a:be:9a:c2:
                    22:c3:de:82:42:05:78:77:d0:e3:d5:93:a0:22:6f:
                    c9:ea:cd:f1:0e:4a:76:23:0b:e6:89:83:5c:1c:d9:
                    ee:ff:b5:25:a9:54:da:95:0e:f0:f3:81:94:ab:ff:
                    25:74:31:5d:09:fa:f2:e7:be:36:dc:39:a5:b5:af:
                    cb:fb:33:26:26:99:c4:f8:9d:f9:e1:ee:f0:c0:6e:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:39:E4:01:C4:8C:EB:14:B4:C3:22:84:14:2B:B3:44:88:79:F6:1A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/uDnkAcSM6xS0wyKEFCuzRIh59ho.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.26/32

    Signature Algorithm: sha256WithRSAEncryption
         23:70:62:7c:3a:04:75:cb:6d:be:b9:ba:48:5d:40:f8:65:ef:
         09:92:0f:dc:f3:0d:a0:f8:78:7d:d0:1d:02:3a:10:dc:3e:d3:
         28:f3:85:65:e1:58:13:65:8c:fe:26:c1:9e:65:f2:e1:83:20:
         26:66:11:39:93:a8:56:1e:96:e4:bc:eb:7d:35:c8:f8:a7:1f:
         5c:1d:bf:89:15:f0:7c:ec:66:a1:d2:4b:4f:fd:20:44:ab:64:
         59:ed:e8:ed:61:5d:9e:58:1d:ed:b7:9e:11:a3:c4:17:2e:ad:
         17:b9:e5:5c:aa:36:71:d6:a8:09:b9:74:fc:ac:79:ab:c1:68:
         90:34:fe:6b:69:39:1e:b0:11:80:20:22:86:2c:ee:69:09:51:
         e6:95:c4:23:eb:e5:0d:d2:8e:ca:1b:e0:7b:dc:08:67:86:40:
         f0:90:b3:5b:a4:0e:96:7c:f0:a6:30:6b:1f:2c:6f:b6:63:c3:
         01:58:b7:d1:1a:d4:29:59:f8:9e:3f:a4:45:18:42:ec:ca:fe:
         d2:a8:dc:a2:50:84:a6:a1:20:ed:a3:26:31:de:c8:2a:0d:af:
         a8:f8:eb:95:27:11:db:71:fa:5e:2d:dd:8f:48:9d:d7:a6:ca:
         66:b4:2c:44:ea:67:8a:fe:96:54:ae:c0:d8:9b:c7:62:c4:45:
         2a:f6:0b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----