Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2716/lVihoyapIMcw5sWwOXOuV2exifk.roa
File:                     lVihoyapIMcw5sWwOXOuV2exifk.roa (raw, json)
Hash identifier:          cL4gAfVaHU2JXKcJxHCsYs+VQEaFj+Ngh5n7JtqSWC0=
Subject key identifier:   95:58:A1:A3:26:A9:20:C7:30:E6:C5:B0:39:73:AE:57:67:B1:89:F9
Certificate issuer:       /CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
Certificate serial:       0B
Authority key identifier: A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/lVihoyapIMcw5sWwOXOuV2exifk.roa
Signing time:             Sat 10 Apr 2021 01:38:38 +0000
ROA not before:           Sat 10 Apr 2021 01:38:38 +0000
ROA not after:            Tue 15 Mar 2022 01:30:01 +0000
asID:                     18131
IP address blocks:        192.47.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
        Validity
            Not Before: Apr 10 01:38:38 2021 GMT
            Not After : Mar 15 01:30:01 2022 GMT
        Subject: CN=9558A1A326A920C730E6C5B03973AE5767B189F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6b:44:42:bc:2c:e9:f2:c9:e1:bd:72:a0:11:
                    6f:4d:b4:4e:ff:4c:3c:00:7a:d7:02:bd:bf:53:d9:
                    d6:d3:04:be:e6:05:49:ce:89:d1:82:25:10:ae:cc:
                    24:80:6a:51:6c:78:b9:10:54:41:aa:e4:f7:6a:3d:
                    02:1a:33:8e:cb:cb:06:e2:90:50:55:6f:e3:07:1d:
                    9d:3f:5e:ae:c2:57:cf:a8:a0:fc:8e:47:de:7c:57:
                    91:cd:6d:75:71:a2:a8:7c:9c:2c:64:b9:b7:24:dd:
                    49:3b:82:fd:6a:44:d8:53:21:de:87:18:8a:cb:ab:
                    4c:71:d5:86:8e:33:13:36:5b:88:c7:60:18:57:41:
                    c7:87:7a:02:c0:55:3f:f4:b9:9e:fa:05:d1:24:4d:
                    11:c7:d1:1f:0a:5d:42:3d:f7:eb:94:0c:f2:09:b4:
                    3c:fd:58:30:96:16:fd:09:cf:9e:11:0b:89:74:0e:
                    ce:98:17:fc:c6:cd:11:ed:65:be:75:97:6b:49:0e:
                    63:a6:2a:90:41:a2:e9:24:93:78:50:1a:54:18:82:
                    25:a8:a6:61:3c:33:1f:92:97:6c:c1:0e:cb:82:94:
                    03:1c:13:f1:3d:53:b1:35:b6:40:c7:06:e5:74:d8:
                    3a:b7:21:f7:5c:c5:8d:06:f2:1a:b8:1a:68:e5:e6:
                    0d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:58:A1:A3:26:A9:20:C7:30:E6:C5:B0:39:73:AE:57:67:B1:89:F9
            X509v3 Authority Key Identifier:
                keyid:A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/lVihoyapIMcw5sWwOXOuV2exifk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.47.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:e2:28:05:13:0b:ef:ee:f6:bd:49:98:58:43:f3:88:01:38:
         63:7a:1d:d0:91:b5:c5:8b:be:b0:a5:a4:bc:36:42:77:53:44:
         0f:5d:04:d9:7e:82:f0:57:c5:d2:95:d3:9d:1a:17:5c:d8:97:
         26:28:8d:87:78:a4:d3:d0:43:c6:68:19:37:a5:80:24:9d:13:
         47:15:31:ee:bf:a9:ca:3e:74:c3:13:d2:f5:41:b9:f3:ef:c9:
         77:82:47:23:43:31:a0:e8:37:3e:e9:20:3b:3b:a9:ea:14:c9:
         14:c0:79:7b:3d:c4:6f:97:5d:51:b1:08:58:8b:ae:0f:f3:9c:
         18:45:86:ff:70:c2:68:09:56:d7:59:cd:72:57:7e:48:e0:51:
         41:e7:bd:39:8d:45:d0:60:72:c8:78:72:a9:0a:d4:71:59:d3:
         75:ce:5f:7e:3e:0d:78:86:d0:a6:73:5e:1f:8a:b5:10:ea:9f:
         92:b4:1d:5c:4a:30:6f:f1:a1:fc:b6:b7:05:4a:5e:f2:8e:29:
         20:52:2d:59:bb:3f:4e:cd:72:d3:31:9c:d7:83:9a:d9:03:8b:
         af:06:c6:46:11:24:80:61:7f:e8:ef:c3:51:8b:f8:11:50:28:
         22:fa:9e:4e:d6:b9:fe:a6:2e:2c:78:85:cb:8b:cc:89:2f:5e:
         97:e1:93:21
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjA4
MjE0M0JDRUY1MkU3MTJCNEE1QkQ1RDZFNUMxOTUzNzlEOTFBMB4XDTIxMDQxMDAx
MzgzOFoXDTIyMDMxNTAxMzAwMVowMzExMC8GA1UEAxMoOTU1OEExQTMyNkE5MjBD
NzMwRTZDNUIwMzk3M0FFNTc2N0IxODlGOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOVrREK8LOnyyeG9cqARb020Tv9MPAB61wK9v1PZ1tMEvuYFSc6J
0YIlEK7MJIBqUWx4uRBUQark92o9AhozjsvLBuKQUFVv4wcdnT9ersJXz6ig/I5H
3nxXkc1tdXGiqHycLGS5tyTdSTuC/WpE2FMh3ocYisurTHHVho4zEzZbiMdgGFdB
x4d6AsBVP/S5nvoF0SRNEcfRHwpdQj3365QM8gm0PP1YMJYW/QnPnhELiXQOzpgX
/MbNEe1lvnWXa0kOY6YqkEGi6SSTeFAaVBiCJaimYTwzH5KXbMEOy4KUAxwT8T1T
sTW2QMcG5XTYOrch91zFjQbyGrgaaOXmDX0CAwEAAaOCAdswggHXMB0GA1UdDgQW
BBSVWKGjJqkgxzDmxbA5c65XZ7GJ+TAfBgNVHSMEGDAWgBSmCCFDvO9S5xK0pb1d
blwZU3nZGjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjcxNi9wZ2doUTd6dlV1Y1N0S1c5WFc1Y0dWTjUyUm8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9wZ2doUTd6dlV1Y1N0S1c5WFc1Y0dW
TjUyUm8uY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjcxNi9sVmlob3lhcElNY3c1c1d3T1hPdVYyZXhpZmsucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC+mMA0GCSqGSIb3DQEBCwUAA4IB
AQCW4igFEwvv7va9SZhYQ/OIAThjeh3QkbXFi76wpaS8NkJ3U0QPXQTZfoLwV8XS
ldOdGhdc2JcmKI2HeKTT0EPGaBk3pYAknRNHFTHuv6nKPnTDE9L1Qbnz78l3gkcj
QzGg6Dc+6SA7O6nqFMkUwHl7PcRvl11RsQhYi64P85wYRYb/cMJoCVbXWc1yV35I
4FFB5705jUXQYHLIeHKpCtRxWdN1zl9+Pg14htCmc14firUQ6p+StB1cSjBv8aH8
trcFSl7yjikgUi1Zuz9OzXLTMZzXg5rZA4uvBsZGESSAYX/o78NRi/gRUCgi+p5O
1rn+pi4seIXLi8yJL16X4ZMh
-----END CERTIFICATE-----