Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/4KFekuKrguj0km8eRfLyLFvjFE4.roa
File:                     4KFekuKrguj0km8eRfLyLFvjFE4.roa (raw, json)
Hash identifier:          5dKFs7UQD+ZQZ4SIX47xntOMX0E1SU94JaDml/G+uDs=
Subject key identifier:   E0:A1:5E:92:E2:AB:82:E8:F4:92:6F:1E:45:F2:F2:2C:5B:E3:14:4E
Certificate issuer:       /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial:       02
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/4KFekuKrguj0km8eRfLyLFvjFE4.roa
Signing time:             Tue 29 Mar 2022 03:20:49 +0000
ROA not before:           Tue 29 Mar 2022 03:20:49 +0000
ROA not after:            Wed 29 Mar 2023 03:00:33 +0000
asID:                     17683
IP address blocks:        2001:f98::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
        Validity
            Not Before: Mar 29 03:20:49 2022 GMT
            Not After : Mar 29 03:00:33 2023 GMT
        Subject: CN=E0A15E92E2AB82E8F4926F1E45F2F22C5BE3144E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e6:6b:f9:86:9f:cc:5e:21:c8:cc:41:59:5a:
                    8e:ce:fb:4c:fa:6c:45:6b:c1:6a:3c:c6:ac:e6:38:
                    6e:ed:ee:ad:70:77:26:fc:73:c8:de:ef:ac:a4:8a:
                    e4:4c:a1:7d:40:57:17:33:95:0d:76:e1:ef:da:95:
                    79:d9:f4:8f:fd:de:4b:04:f9:9c:7f:a2:30:fb:2c:
                    0b:25:97:61:90:e1:a2:3a:24:91:e8:19:b4:80:9b:
                    86:d9:f3:09:8f:8c:68:da:b6:b9:01:e5:6f:5e:98:
                    cc:16:0c:60:2d:e9:44:4b:5e:a8:16:3f:10:c2:c7:
                    65:1a:16:09:85:80:c9:18:57:e9:b8:8a:62:71:c4:
                    3e:fc:39:88:64:22:b3:71:85:82:8e:06:b1:c8:a2:
                    fe:eb:68:c6:8f:ba:2b:48:ea:a0:31:9d:fa:34:46:
                    0a:57:64:87:a4:b7:09:1a:69:ac:81:01:09:9f:ff:
                    b3:ac:06:ce:52:8e:39:82:2d:bf:02:6e:cf:53:63:
                    be:29:83:42:a7:c0:06:64:12:8b:d7:35:fd:d5:3d:
                    04:e0:93:11:37:1c:f5:a1:5b:04:77:9c:08:32:46:
                    a0:ed:d0:ac:20:9b:f8:a9:8e:54:64:43:91:9e:e3:
                    c3:1a:d3:92:62:c9:79:c2:1f:45:12:b4:c5:92:00:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A1:5E:92:E2:AB:82:E8:F4:92:6F:1E:45:F2:F2:2C:5B:E3:14:4E
            X509v3 Authority Key Identifier:
                keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/4KFekuKrguj0km8eRfLyLFvjFE4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f98::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:8d:ec:f1:bc:ca:7d:df:08:72:1e:e5:98:c0:f8:e6:22:e2:
         46:43:ac:30:ea:f5:5f:dd:cb:de:17:e7:05:8d:3a:61:df:ba:
         14:4e:7c:31:63:ab:eb:fd:e1:f5:89:ed:01:bb:21:d6:a3:ce:
         41:f8:ac:b0:24:44:7e:b1:ca:bb:54:a5:25:8a:bb:0f:9a:d1:
         d3:80:08:b6:5c:d1:cd:12:d5:c0:77:4b:c6:a4:8e:23:07:cd:
         a4:de:0b:49:40:a3:fe:74:5b:51:a7:69:1f:16:0c:28:da:9f:
         8e:4f:a8:a7:1e:e0:cb:5f:72:25:41:9a:56:f1:12:78:54:89:
         58:54:7d:2c:9a:55:39:2d:ec:8a:19:96:6d:ff:2b:b6:a4:68:
         1b:fa:10:19:cc:14:ea:a8:f9:94:12:7d:e0:e7:c9:a4:f1:0a:
         2e:62:84:66:dc:25:04:2a:9a:f8:ed:44:f1:10:21:90:32:9f:
         06:f6:b5:44:50:4d:8a:e9:ff:85:33:70:c5:23:68:e8:9d:39:
         9f:64:2a:a7:49:15:ec:32:6d:e9:c5:b9:50:af:e5:9e:0d:4e:
         82:11:12:f2:44:2c:8d:dd:29:c0:87:d0:24:22:73:1c:98:b2:
         27:b2:3b:79:51:0f:16:25:94:4f:ea:00:67:18:40:05:86:ae:
         a8:10:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----