Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/s8n_5lTCNdBlzCTlhkS_kSl7qME.roa
File:                     s8n_5lTCNdBlzCTlhkS_kSl7qME.roa (raw, json)
Hash identifier:          uX3E7omhiInIx9HAc8dv1r692HPB6q3GnLW8o6/3xq0=
Subject key identifier:   B3:C9:FF:E6:54:C2:35:D0:65:CC:24:E5:86:44:BF:91:29:7B:A8:C1
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       35
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/s8n_5lTCNdBlzCTlhkS_kSl7qME.roa
Signing time:             Tue 01 Mar 2022 08:34:00 +0000
ROA not before:           Tue 01 Mar 2022 08:34:00 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     9351
IP address blocks:        202.137.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar  1 08:34:00 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=B3C9FFE654C235D065CC24E58644BF91297BA8C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:2d:75:49:8d:55:b6:32:a1:2e:f9:a0:a1:
                    67:b4:db:19:1a:70:90:58:81:07:ec:18:51:d2:92:
                    2b:a9:fe:49:d4:e7:bf:76:91:d3:e3:2d:e6:3c:49:
                    cc:f4:5e:65:fa:1a:54:87:97:65:f8:18:1f:77:47:
                    1a:e4:a3:9f:23:52:cf:78:e6:be:ac:cb:30:2d:86:
                    02:ce:78:86:dd:e3:d2:dc:ed:77:dc:1d:92:db:b8:
                    97:ff:6b:9b:57:03:aa:83:af:91:6f:48:9a:30:31:
                    e4:89:e1:20:bb:16:af:14:40:22:25:63:ba:a3:6b:
                    0f:bb:31:2f:24:93:a6:bf:09:65:98:69:ef:12:9d:
                    bf:ea:e3:3e:f3:03:ee:cb:06:97:d0:17:f3:d9:98:
                    64:b4:89:4e:ac:ca:04:ca:65:8a:c4:c8:a0:a0:c4:
                    7c:cc:5c:23:a3:bd:71:eb:0b:b5:f6:dc:f7:6e:7b:
                    fd:76:e7:b9:6e:09:e4:42:e6:aa:be:0a:6c:59:d3:
                    f7:62:c5:8d:51:d9:63:d2:7c:b2:af:1d:1e:0c:8b:
                    00:d1:0c:43:a1:ba:84:32:de:12:10:5f:54:fd:12:
                    2d:45:1d:db:a3:77:b5:a6:ef:83:f3:2f:88:9f:1b:
                    0a:95:8a:6d:14:5b:2a:d2:41:15:a1:c4:9d:ce:89:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C9:FF:E6:54:C2:35:D0:65:CC:24:E5:86:44:BF:91:29:7B:A8:C1
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/s8n_5lTCNdBlzCTlhkS_kSl7qME.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.137.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:d8:ce:85:fd:a3:2e:73:e1:8d:25:b0:6e:2c:1d:2f:fa:
         bd:1d:a8:44:88:57:4c:d4:d5:09:f3:01:36:a6:80:e1:da:4d:
         50:bc:3a:1c:1a:be:94:05:3a:25:fc:06:61:d7:f0:e6:7a:84:
         60:94:1a:93:df:91:e3:7b:96:8b:a7:aa:60:ba:b3:5a:c3:27:
         ec:21:1d:d3:86:c9:c8:ba:79:1a:99:bf:ab:33:1e:c2:3b:db:
         bf:81:2e:1e:b7:de:a4:67:13:40:30:1e:a0:ae:34:33:c6:b5:
         f7:26:50:f9:62:bd:67:33:16:0a:66:a3:4c:40:9a:48:0d:45:
         ff:03:64:aa:c4:06:c3:86:ff:d3:f6:48:6e:00:8f:1d:6c:0d:
         cd:11:b3:6b:27:8b:34:d4:f8:ea:d3:30:a6:7c:ae:fb:e8:b9:
         e5:99:04:22:24:2d:e0:42:6b:de:4b:48:20:ec:ca:69:c3:29:
         96:10:d0:28:ec:d0:fc:c6:a8:57:dd:d3:2d:65:cb:42:89:2f:
         19:29:7a:f7:de:17:ad:c2:35:37:57:a3:6d:7d:7a:65:de:88:
         de:b4:64:fc:02:13:24:16:5b:1b:f9:c6:7d:83:b5:5c:67:c4:
         0e:0a:9f:06:94:78:c1:8d:33:ff:1e:ff:94:fb:71:6e:d1:2b:
         24:8e:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----