Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/-PvlepggTb5OWL6zt-PVJTN1MIw.roa
File:                     -PvlepggTb5OWL6zt-PVJTN1MIw.roa (raw, json)
Hash identifier:          +UYxgZhYjkDrrQl+Kz4/TlLrJAMmmfGY6F/lukMbbnE=
Subject key identifier:   F8:FB:E5:7A:98:20:4D:BE:4E:58:BE:B3:B7:E3:D5:25:33:75:30:8C
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       32
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/-PvlepggTb5OWL6zt-PVJTN1MIw.roa
Signing time:             Tue 01 Mar 2022 08:33:59 +0000
ROA not before:           Tue 01 Mar 2022 08:33:59 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     9351
IP address blocks:        210.236.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar  1 08:33:59 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=F8FBE57A98204DBE4E58BEB3B7E3D5253375308C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:97:30:2f:48:56:8c:c7:d4:fd:29:d4:df:
                    77:74:4a:5e:38:6e:da:fd:79:ae:a1:18:81:dc:64:
                    03:9d:02:53:96:cd:1f:2c:b0:4b:b0:73:a6:2f:4d:
                    ed:10:77:e4:e2:4f:85:c7:5b:58:03:eb:1f:a6:8e:
                    0b:cd:04:2c:5f:64:a9:a6:79:a0:6d:da:94:f7:09:
                    3c:da:a4:f7:0f:e8:6d:b8:0d:00:85:0c:9f:eb:d8:
                    3c:df:f9:c5:5d:72:4c:e8:87:b8:5a:b1:2a:ea:e0:
                    98:6b:09:db:e2:06:3f:b1:16:ff:ae:e8:ef:a3:59:
                    48:fe:54:f2:fc:4f:fe:01:84:f6:19:6e:75:43:b4:
                    27:50:97:f3:4c:fc:11:dc:d2:f6:53:71:08:7e:18:
                    3a:bc:13:03:ed:79:6b:ee:06:14:cd:5a:24:2a:3c:
                    3f:29:25:51:71:2f:af:23:ab:ab:89:f0:4d:4c:83:
                    61:1d:be:f5:8e:54:46:19:1d:8f:eb:be:19:4a:b7:
                    24:6e:a9:95:bd:a8:21:bd:2c:a1:79:97:11:5c:0f:
                    cf:66:5a:2d:cf:b7:6a:db:3f:81:35:43:99:f7:2d:
                    39:a9:7c:5c:af:68:a3:b2:90:db:f5:de:ac:dd:d1:
                    fc:37:9a:cc:2a:3b:a6:f8:88:27:2a:97:2c:9a:61:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FB:E5:7A:98:20:4D:BE:4E:58:BE:B3:B7:E3:D5:25:33:75:30:8C
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/-PvlepggTb5OWL6zt-PVJTN1MIw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:88:03:da:6d:64:ca:9f:20:21:a5:d8:f0:68:5b:92:70:84:
         42:8a:52:27:e3:6c:ff:c3:28:2c:cc:74:8d:49:d9:9a:f4:45:
         4b:68:d4:98:3c:c0:75:2c:e1:4e:50:3a:0c:18:50:91:56:e1:
         a5:52:17:31:52:78:35:9a:6b:a7:5a:4e:29:58:e8:9c:70:66:
         21:8c:cc:9e:35:c2:a7:2a:45:bc:b9:27:b9:4b:f2:54:81:d1:
         92:6e:9e:40:03:3c:75:c0:25:fb:79:67:40:1d:ce:d2:29:af:
         3c:aa:51:02:cc:eb:ec:f8:ae:94:b4:91:31:da:6a:5e:0a:a0:
         2c:af:95:e4:7e:43:23:c6:3d:7c:55:de:db:8b:bf:6f:f4:e3:
         df:e9:cd:5b:c8:e0:8f:c1:1b:50:3b:99:a1:c4:16:bc:4e:d3:
         04:3a:7a:67:00:2f:a0:e5:1d:f2:05:d3:eb:8b:be:24:75:07:
         11:49:af:4e:7a:8d:79:61:66:23:8a:00:b7:f5:07:21:2a:28:
         9c:41:36:d8:bd:c5:b5:40:bf:9c:b2:03:9a:d4:52:4e:dc:a3:
         93:8d:3a:5b:03:f6:5c:32:0e:41:de:01:6f:a1:76:4e:20:6b:
         24:ed:44:6e:df:92:84:37:11:55:5c:f1:bf:5b:fe:e5:d0:94:
         29:d0:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----