Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aGX1wt881Kwcb2U4MO1sUD24SYI.roa
File:                     aGX1wt881Kwcb2U4MO1sUD24SYI.roa (raw, json)
Hash identifier:          xTFByOlvlq06Q6UBaL7VJ+C88LAIydz+9r4SkBIZ8m4=
Subject key identifier:   68:65:F5:C2:DF:3C:D4:AC:1C:6F:65:38:30:ED:6C:50:3D:B8:49:82
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01B8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aGX1wt881Kwcb2U4MO1sUD24SYI.roa
Signing time:             Tue 30 May 2023 17:36:31 +0000
ROA not before:           Tue 30 May 2023 17:36:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6865F5C2DF3CD4AC1C6F653830ED6C503DB84982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:95:26:0f:56:91:08:c0:12:3f:e0:96:23:
                    82:72:ce:3f:6d:92:94:67:c9:06:e4:0a:39:23:03:
                    b3:e4:de:3a:27:ed:79:83:2d:bf:eb:c8:7a:d7:b3:
                    4b:7e:31:3f:47:dd:aa:41:ab:d3:6c:ff:ad:54:f5:
                    7f:52:10:5f:56:a0:67:4f:6b:bb:6b:d7:61:1d:c9:
                    55:18:51:66:bf:9f:6e:0a:18:db:b8:0c:ea:d9:62:
                    04:13:d2:17:4f:8f:65:41:ab:db:a9:d3:0f:a7:e7:
                    ae:df:f4:5e:7a:ca:11:d4:e6:7c:74:26:8e:1d:51:
                    a9:b9:ee:87:09:30:8c:7f:ce:44:3d:65:9c:0f:fb:
                    3f:56:7e:1c:36:4f:44:5e:8e:b9:af:6b:e7:43:73:
                    44:35:32:5a:b6:ce:27:b7:a7:c9:a3:63:ae:a5:b6:
                    b5:43:62:3a:1d:cf:c8:2d:9a:db:89:ef:07:23:fb:
                    35:8e:32:b4:19:87:f0:35:a4:c9:36:68:03:1d:d1:
                    65:03:65:56:ee:4d:18:e1:3d:54:f9:cd:03:96:b3:
                    db:a9:e3:a3:91:42:50:23:be:bc:ee:46:f0:cd:63:
                    0b:db:b5:e9:76:15:73:4e:a6:3e:8c:71:aa:58:5d:
                    e3:63:09:41:29:98:e0:6f:92:e3:ac:82:0d:f5:20:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:F5:C2:DF:3C:D4:AC:1C:6F:65:38:30:ED:6C:50:3D:B8:49:82
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aGX1wt881Kwcb2U4MO1sUD24SYI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:9a:4d:5a:c3:d1:96:31:44:4a:c5:20:87:94:16:0a:11:8d:
         15:de:2e:4c:ae:5b:25:f1:77:d8:62:3c:9c:67:4f:e3:f9:63:
         5a:48:7f:49:af:4b:49:d3:c0:4d:29:3d:f2:44:58:5e:00:36:
         01:24:51:48:43:78:8e:54:78:7d:4d:c6:44:39:ac:0e:84:41:
         69:02:b8:33:31:0a:3e:2b:a4:53:90:b1:11:82:97:0c:31:3e:
         89:8e:ae:87:b2:55:f4:75:1b:4f:5a:e2:8c:82:01:4c:96:bd:
         cf:11:55:3a:4f:76:e5:38:81:e6:c4:55:da:16:ff:ba:41:62:
         4f:9d:de:1f:91:e5:1c:cf:cd:82:79:db:75:1f:3b:db:af:bb:
         69:fc:ae:b3:0e:09:87:28:5e:9e:29:9a:60:9c:8f:fc:79:19:
         f1:8b:95:c3:a9:9d:25:68:98:83:31:aa:3b:b1:e5:55:b5:b3:
         74:14:4e:fb:12:6e:2f:fc:6d:99:0e:64:e0:07:ba:ba:0e:2b:
         57:ff:8d:ae:2e:2a:38:1d:0c:2e:a4:c5:00:03:fc:93:88:73:
         74:4d:fc:4d:c6:2d:27:73:fb:28:30:3b:73:1e:83:71:ee:55:
         69:70:8f:36:a0:67:4d:94:87:7a:d6:aa:87:2a:6c:c8:eb:5d:
         5c:96:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----