Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/YHAsIYrg340w_HB2IjJdJ97JmlE.roa
File:                     YHAsIYrg340w_HB2IjJdJ97JmlE.roa (raw, json)
Hash identifier:          ltFLfDz2/BYUMK0TedfGBMuhIIhLZHNM81UeeDYOu98=
Subject key identifier:   60:70:2C:21:8A:E0:DF:8D:30:FC:70:76:22:32:5D:27:DE:C9:9A:51
Certificate issuer:       /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
Certificate serial:       10
Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/YHAsIYrg340w_HB2IjJdJ97JmlE.roa
Signing time:             Wed 23 Feb 2022 04:56:41 +0000
ROA not before:           Wed 23 Feb 2022 04:56:41 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     55396
IP address blocks:        192.50.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
        Validity
            Not Before: Feb 23 04:56:41 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=60702C218AE0DF8D30FC707622325D27DEC99A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:7c:8c:7d:e6:ef:8b:f6:0f:5f:a5:fd:2f:
                    5b:d3:5c:4c:75:e2:a7:04:15:2f:cd:65:a3:34:bc:
                    44:9e:a4:46:67:23:bc:78:58:bd:5e:4c:e8:ca:b3:
                    42:ff:a9:49:6a:13:8b:51:7e:2b:8a:3d:32:31:f4:
                    6a:fe:9c:3a:e5:18:7e:96:99:30:e5:1c:30:80:3d:
                    45:b3:67:24:4d:cb:f4:03:ee:81:e7:10:58:3b:dd:
                    d5:c0:62:69:1e:91:99:d4:d4:b5:31:62:d6:b6:36:
                    38:c5:cb:40:7c:16:10:9f:55:e0:9e:3f:75:b7:6a:
                    ac:e9:cf:b5:d0:c8:59:74:6a:42:f2:12:89:77:c4:
                    7c:19:4a:0f:6b:57:25:df:a0:64:36:df:83:fb:65:
                    6c:2a:21:42:a8:14:8a:42:42:b6:eb:a5:a9:38:3c:
                    51:38:84:a4:2e:85:f8:6d:f6:59:e3:d4:84:b8:c2:
                    3d:4c:2e:6b:0f:91:94:10:d5:dc:77:58:7b:26:55:
                    3f:3a:fa:b4:67:ba:40:35:46:0b:60:e8:9c:0a:5e:
                    32:88:55:bb:75:00:4d:2b:13:71:4a:a6:16:12:72:
                    99:d6:c8:a1:fa:f3:14:81:10:15:cb:29:8e:fc:db:
                    07:d6:25:d5:e1:e8:fc:c4:13:4c:7e:04:79:25:20:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:70:2C:21:8A:E0:DF:8D:30:FC:70:76:22:32:5D:27:DE:C9:9A:51
            X509v3 Authority Key Identifier:
                keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/YHAsIYrg340w_HB2IjJdJ97JmlE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:b2:a8:5d:0d:f1:5c:82:53:10:85:68:5e:09:90:2e:0f:
         b6:a3:1f:8f:55:4f:8e:03:2a:4f:a5:59:a6:b8:2b:f6:ae:6b:
         f6:2c:a0:f8:26:6d:21:ce:8c:8f:5c:e4:6f:54:d0:ac:71:d6:
         e1:38:25:c4:60:f8:ca:a5:9d:99:e7:b0:5b:da:f2:58:b5:8d:
         99:4e:68:07:da:9c:23:41:b0:06:9a:7d:23:8f:3c:6b:82:a0:
         02:ab:83:81:9f:e5:23:1e:89:fd:fd:a3:89:47:3c:a8:d3:3e:
         71:07:cd:33:09:96:18:f1:a0:f3:4a:42:7e:01:95:47:48:42:
         7d:d9:d8:63:25:c1:8e:e4:54:50:26:80:58:17:6d:55:68:6c:
         75:b6:ae:f7:21:00:af:a0:c6:60:d1:e2:1a:a9:8f:22:4f:a2:
         8f:e9:74:14:53:6a:87:2b:88:bd:72:cb:56:0b:91:19:0a:1b:
         6b:41:e4:88:ee:66:77:61:95:00:ad:c4:1d:19:8c:45:5c:dc:
         52:fc:47:3c:28:e7:b8:39:78:5e:2f:79:c8:bb:68:31:db:6d:
         36:52:ba:84:e0:31:af:d7:3e:96:08:bd:bc:c4:c4:7c:22:cb:
         6a:d6:43:ce:ba:47:13:d3:0b:93:02:31:16:4e:86:e5:22:5e:
         c9:3c:2a:4a
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMDcx
MUYyREQ3NjY3Q0ZCMDg4MDRCRThGQTI4NEE0OUU2MTNFREM0MB4XDTIyMDIyMzA0
NTY0MVoXDTIzMDIxNTAxMzAwM1owMzExMC8GA1UEAxMoNjA3MDJDMjE4QUUwREY4
RDMwRkM3MDc2MjIzMjVEMjdERUM5OUE1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJgLfIx95u+L9g9fpf0vW9NcTHXipwQVL81lozS8RJ6kRmcjvHhY
vV5M6MqzQv+pSWoTi1F+K4o9MjH0av6cOuUYfpaZMOUcMIA9RbNnJE3L9APugecQ
WDvd1cBiaR6RmdTUtTFi1rY2OMXLQHwWEJ9V4J4/dbdqrOnPtdDIWXRqQvISiXfE
fBlKD2tXJd+gZDbfg/tlbCohQqgUikJCtuulqTg8UTiEpC6F+G32WePUhLjCPUwu
aw+RlBDV3HdYeyZVPzr6tGe6QDVGC2DonApeMohVu3UATSsTcUqmFhJymdbIofrz
FIEQFcspjvzbB9Yl1eHo/MQTTH4EeSUg3xUCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBRgcCwhiuDfjTD8cHYiMl0n3smaUTAfBgNVHSMEGDAWgBQAcR8t12Z8+wiAS+j6
KEpJ5hPtxDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM3MC9BSEVmTGRkbWZQc0lnRXZvLWloS1NlWVQ3Y1EuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9BSEVmTGRkbWZQc0lnRXZvLWloS1Nl
WVQ3Y1EuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjM3MC9ZSEFzSVlyZzM0MHdfSEIySWpKZEo5N0ptbEUucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDKXMA0GCSqGSIb3DQEBCwUAA4IB
AQCLGrKoXQ3xXIJTEIVoXgmQLg+2ox+PVU+OAypPpVmmuCv2rmv2LKD4Jm0hzoyP
XORvVNCscdbhOCXEYPjKpZ2Z57Bb2vJYtY2ZTmgH2pwjQbAGmn0jjzxrgqACq4OB
n+UjHon9/aOJRzyo0z5xB80zCZYY8aDzSkJ+AZVHSEJ92dhjJcGO5FRQJoBYF21V
aGx1tq73IQCvoMZg0eIaqY8iT6KP6XQUU2qHK4i9cstWC5EZChtrQeSI7mZ3YZUA
rcQdGYxFXNxS/Ec8KOe4OXheL3nIu2gx2202UrqE4DGv1z6WCL28xMR8Istq1kPO
ukcT0wuTAjEWToblIl7JPCpK
-----END CERTIFICATE-----