Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/jDSXE2l1X1iwkRO9eT8y6cuoGoA.roa
File:                     jDSXE2l1X1iwkRO9eT8y6cuoGoA.roa (raw, json)
Hash identifier:          r2HAOZcRsYU+yavYuk8oxRhI9kS2u3Wql3O/rXouxcE=
Subject key identifier:   8C:34:97:13:69:75:5F:58:B0:91:13:BD:79:3F:32:E9:CB:A8:1A:80
Certificate issuer:       /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Certificate serial:       26
Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/jDSXE2l1X1iwkRO9eT8y6cuoGoA.roa
Signing time:             Sun 01 May 2022 01:31:12 +0000
ROA not before:           Sun 01 May 2022 01:31:12 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        2001:380::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
        Validity
            Not Before: May  1 01:31:12 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=8C34971369755F58B09113BD793F32E9CBA81A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:14:3c:21:02:6f:d0:44:17:4f:c9:8c:3f:
                    62:1d:f1:5f:17:99:eb:48:1f:92:c5:91:b0:dc:71:
                    bd:90:44:49:41:60:ef:b4:f7:fc:9b:12:d8:8e:dd:
                    05:22:2e:fc:8a:d7:b0:41:92:5c:32:92:90:f9:a0:
                    89:ea:52:35:5f:cc:6c:fd:ce:ce:11:bc:97:90:f3:
                    57:71:18:0c:f0:58:14:95:97:55:7a:07:0d:c7:06:
                    a3:c1:95:a6:1f:b6:4d:bc:1a:f0:c4:72:8b:ec:fd:
                    7c:a9:5c:93:c7:2d:cd:8b:6f:f8:f6:88:c6:53:8a:
                    10:bf:f7:6c:62:96:f5:5b:f5:04:c6:6b:59:50:a4:
                    bb:6f:69:14:ce:ff:2b:ec:ed:84:4b:0c:d3:11:2a:
                    ed:27:f9:bc:bc:c0:9e:35:9d:d5:78:a2:bf:ae:54:
                    5c:17:b5:0b:20:18:97:4d:cb:3e:fe:4a:27:ba:ca:
                    d6:98:e5:09:bb:f8:c7:3f:b1:be:c6:9e:46:a3:09:
                    90:c7:4b:22:e8:b8:f7:3a:96:68:db:6b:60:a1:cb:
                    3e:92:55:73:eb:03:8c:1e:25:c2:45:67:5a:d4:cf:
                    8c:4f:01:97:4d:49:5b:55:e6:d9:d9:4e:0f:cf:3f:
                    50:59:a1:cd:a4:69:bc:e7:f2:40:4c:94:15:b4:5b:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:34:97:13:69:75:5F:58:B0:91:13:BD:79:3F:32:E9:CB:A8:1A:80
            X509v3 Authority Key Identifier:
                keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/jDSXE2l1X1iwkRO9eT8y6cuoGoA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:380::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:e5:d0:99:de:c7:e8:6b:4e:5b:22:1a:b1:ad:9f:df:79:b9:
         32:f2:0d:7a:91:a0:72:0e:f6:12:5c:6b:78:ba:0c:12:03:6c:
         ea:6f:9f:19:5d:c9:40:1c:60:88:00:13:db:51:98:f9:3b:af:
         ba:54:d4:79:2d:9f:45:c7:08:b2:66:02:c6:cf:e1:84:53:03:
         78:fe:1b:05:b4:55:78:31:ed:09:27:3b:5a:6b:87:84:5b:8a:
         ac:10:b3:74:33:1c:bc:62:6e:0e:66:2d:93:81:a0:4c:37:06:
         28:9e:5a:32:62:f2:89:3e:8f:24:84:b8:ed:02:4e:7e:4d:e8:
         7b:c4:31:4e:1b:33:bb:92:e5:9c:c7:05:99:33:0e:0c:c1:70:
         3e:ad:07:4a:bd:e2:06:1b:a4:ae:82:ba:bf:12:6c:60:f5:3e:
         e5:26:f7:45:65:91:d1:c4:ba:33:ab:56:3a:36:64:1a:6d:af:
         f6:cf:f8:3f:a7:e9:0b:fd:24:61:49:77:dd:60:47:ba:4c:2e:
         f0:7b:21:54:97:46:46:3f:f7:35:1f:74:91:05:71:12:a7:f7:
         4e:c4:6d:6a:c4:f6:55:ec:ad:52:c1:79:25:3b:df:f7:c0:f9:
         36:f2:ca:96:79:9e:d7:43:e4:9f:49:45:de:53:fe:ce:a5:aa:
         ae:0c:b8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----