Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/7WdJ0tnfZVf--4fOtVpAYbaWQw8.roa
File:                     7WdJ0tnfZVf--4fOtVpAYbaWQw8.roa (raw, json)
Hash identifier:          w9LNrACJs/bCK5977EmdvoOyNOWbOMt58d97Iqf/6BQ=
Subject key identifier:   ED:67:49:D2:D9:DF:65:57:FE:FB:87:CE:B5:5A:40:61:B6:96:43:0F
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       34
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/7WdJ0tnfZVf--4fOtVpAYbaWQw8.roa
Signing time:             Sun 01 May 2022 01:31:21 +0000
ROA not before:           Sun 01 May 2022 01:31:21 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9370
IP address blocks:        2001:e44::/31 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: May  1 01:31:21 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=ED6749D2D9DF6557FEFB87CEB55A4061B696430F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bd:42:15:4d:ad:06:13:01:ce:db:7e:88:60:
                    33:b4:26:0f:7a:85:fa:cf:6e:4d:55:6b:00:e9:af:
                    cd:78:8a:00:28:91:17:26:1e:1a:58:33:f7:e7:d1:
                    30:6e:16:b9:c5:9d:61:c3:32:5c:1f:0f:35:40:a5:
                    f9:20:50:02:d3:8c:d2:2d:db:bf:89:05:6c:c4:a4:
                    44:84:85:7e:70:fa:74:05:51:57:d4:d0:c2:7a:79:
                    b6:29:a1:5b:3d:e6:85:62:56:aa:ea:7b:06:b4:09:
                    f3:f2:5c:ed:7a:d1:4a:d3:89:08:51:5f:9e:c5:dd:
                    8f:1d:22:73:ff:7f:14:bc:04:78:7c:f9:7e:0a:d8:
                    50:12:2f:54:0d:d9:ba:c9:d8:01:00:11:40:31:2b:
                    f7:8e:1b:82:d8:6e:a7:09:5e:50:be:fe:bc:d9:70:
                    75:15:52:ef:0f:58:8f:8f:60:61:95:4c:db:3e:4c:
                    03:7a:4f:b0:9c:7b:ab:a7:f3:e8:60:90:3d:81:cc:
                    9d:7f:27:7a:19:12:33:bc:bf:4d:ab:39:2e:e7:d3:
                    1e:ca:2c:7c:da:99:6b:6b:2b:f1:2a:c7:26:81:47:
                    3a:7e:65:4b:d2:df:40:1b:95:b0:c0:5d:6d:f3:ca:
                    1d:50:ea:60:cd:e3:4e:f5:3c:37:fe:44:58:6a:31:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:67:49:D2:D9:DF:65:57:FE:FB:87:CE:B5:5A:40:61:B6:96:43:0F
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/7WdJ0tnfZVf--4fOtVpAYbaWQw8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e44::/31

    Signature Algorithm: sha256WithRSAEncryption
         57:ec:01:87:34:55:ab:43:8a:bf:86:8e:75:09:65:6b:8a:c7:
         2d:65:81:50:cc:d6:9a:ac:08:a2:3b:3d:00:d8:25:05:50:2a:
         d3:37:bd:8b:b9:86:ff:e5:4f:2b:03:4e:50:84:81:6a:93:f0:
         c7:9d:88:0a:26:ec:87:7c:bb:1a:7f:01:90:4f:f9:4a:cb:df:
         52:b6:44:56:ee:00:88:0d:4e:b6:f8:73:6a:ee:7b:23:19:70:
         89:7c:83:04:f3:44:6e:ee:a0:68:e3:3f:9d:12:e4:06:32:35:
         05:31:7f:14:81:70:4d:72:6f:f0:7d:fb:e3:ae:05:31:4f:f4:
         f4:cf:55:84:6a:70:42:65:60:c8:7c:e3:ad:6b:51:aa:ad:2b:
         4c:6f:66:f0:71:8c:4b:34:7b:2f:5f:8d:5b:fa:00:d8:ab:d6:
         e1:ba:97:9d:54:eb:8c:13:1c:ec:ba:70:65:d0:9b:e6:43:c6:
         3d:0c:c6:3d:ef:de:b8:fe:5f:0a:74:b8:85:5c:c4:f3:60:d5:
         cd:1a:5d:5d:f8:33:b8:c3:db:e4:8a:f0:bb:9c:46:d1:07:15:
         95:e4:61:53:c8:3a:5c:18:eb:b5:fc:fd:ec:18:e4:a5:b0:02:
         dd:84:c7:b3:03:0d:e3:b9:19:bb:3d:6a:1c:7b:a2:b6:94:9d:
         db:41:c6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----