Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/_rtEztZrNWIHVvegWoGuSkwUUUU.roa
File:                     _rtEztZrNWIHVvegWoGuSkwUUUU.roa (raw, json)
Hash identifier:          PVMZ+iiNjH0iDrK3iIC+8vApTlWPss83lXOKXaJP+Ws=
Subject key identifier:   FE:BB:44:CE:D6:6B:35:62:07:56:F7:A0:5A:81:AE:4A:4C:14:51:45
Certificate issuer:       /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Certificate serial:       03
Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/_rtEztZrNWIHVvegWoGuSkwUUUU.roa
Signing time:             Fri 25 Feb 2022 07:42:42 +0000
ROA not before:           Fri 25 Feb 2022 07:42:42 +0000
ROA not after:            Sat 25 Feb 2023 07:35:18 +0000
asID:                     17676
IP address blocks:        2403:9900::/24 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
        Validity
            Not Before: Feb 25 07:42:42 2022 GMT
            Not After : Feb 25 07:35:18 2023 GMT
        Subject: CN=FEBB44CED66B35620756F7A05A81AE4A4C145145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:0c:47:a7:a2:65:7f:4f:c0:f0:34:57:19:
                    32:c1:e0:8e:59:97:4b:64:42:18:18:58:e9:a3:00:
                    27:b2:ce:80:36:89:9e:3b:4d:a2:a0:6e:63:0f:1f:
                    8c:a6:f4:9e:48:b6:f0:52:9d:46:4a:97:85:89:d1:
                    41:95:b1:cf:34:a9:b8:a9:d6:86:f0:05:56:0b:f8:
                    21:92:8f:0f:62:fe:2a:70:ae:a4:e7:f3:bc:f7:85:
                    34:5e:19:83:c2:80:a3:b5:f3:8b:3c:f4:99:e0:0a:
                    5b:aa:ef:a0:90:3e:54:da:a3:54:d3:1e:e7:0e:5b:
                    58:fc:46:5b:fa:03:60:09:f5:5f:60:69:78:f2:ba:
                    2d:bb:8f:8e:12:6e:42:10:0a:c5:84:1e:2d:e2:2b:
                    0d:0c:76:00:9d:3a:a0:92:f0:b4:c8:ef:bf:f4:36:
                    29:f2:4f:e8:1b:ae:e1:27:98:b3:3e:0a:98:d5:e4:
                    50:e2:10:5e:4b:a3:c2:1a:4b:ac:8b:db:7b:9d:55:
                    05:03:59:db:a5:f3:e2:0b:75:1a:3c:ca:21:4b:58:
                    3a:91:54:29:36:3c:5d:27:1d:5c:19:97:cb:d6:76:
                    61:2b:a8:c1:f1:4c:8b:cd:07:9e:6f:7f:59:bf:fb:
                    9d:54:8a:cf:7c:e0:a0:55:1e:cc:52:74:1e:fa:58:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BB:44:CE:D6:6B:35:62:07:56:F7:A0:5A:81:AE:4A:4C:14:51:45
            X509v3 Authority Key Identifier:
                keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/_rtEztZrNWIHVvegWoGuSkwUUUU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:9900::/24

    Signature Algorithm: sha256WithRSAEncryption
         53:78:69:90:6c:65:a1:f9:10:86:cb:b9:d5:13:44:dd:c1:7f:
         96:8d:8b:08:65:76:66:45:50:91:b2:e6:4b:aa:a7:3a:2c:73:
         d8:b7:e2:e5:2e:e4:79:06:19:e0:b9:d5:95:da:d5:66:d3:2d:
         f3:a3:55:b9:c8:92:1e:58:5f:ea:a5:22:39:f6:3a:49:a3:1f:
         a2:cd:04:14:6f:af:ab:58:de:fc:0d:ec:07:f7:20:ac:36:4a:
         4f:38:ca:b2:ce:f4:6f:d8:04:02:b6:d7:f0:70:cf:7b:d4:51:
         3c:dd:b5:f3:79:bf:58:6d:13:ff:b1:e2:44:58:97:cd:8f:bc:
         9f:ed:9c:8e:21:4f:d6:ff:db:47:1b:9b:97:c0:fc:e3:73:8f:
         f3:f0:c3:dd:0f:6b:e8:1f:f4:a3:24:1b:b6:f9:92:4e:e9:90:
         08:2b:42:3b:a0:39:80:f1:1e:70:e6:69:b4:72:2a:fb:a8:b3:
         78:e8:23:d7:51:41:b0:42:c8:1e:68:8e:c9:c0:87:77:6b:df:
         97:b4:c3:50:2e:a5:43:56:9e:84:90:2e:96:4d:9a:01:32:f7:
         05:a8:b7:48:93:3f:05:04:fc:99:f3:99:cd:0f:3a:bd:fe:7d:
         33:3b:f0:2f:f8:d0:5c:ab:1f:66:46:aa:95:97:69:6c:e3:5c:
         2d:19:92:77
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0RB
RUMyMEVERjRBMjAxMDQyM0REN0IwMDRFMTU3NEYxMTNBNzM1MB4XDTIyMDIyNTA3
NDI0MloXDTIzMDIyNTA3MzUxOFowMzExMC8GA1UEAxMoRkVCQjQ0Q0VENjZCMzU2
MjA3NTZGN0EwNUE4MUFFNEE0QzE0NTE0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKwGDEenomV/T8DwNFcZMsHgjlmXS2RCGBhY6aMAJ7LOgDaJnjtN
oqBuYw8fjKb0nki28FKdRkqXhYnRQZWxzzSpuKnWhvAFVgv4IZKPD2L+KnCupOfz
vPeFNF4Zg8KAo7Xzizz0meAKW6rvoJA+VNqjVNMe5w5bWPxGW/oDYAn1X2BpePK6
LbuPjhJuQhAKxYQeLeIrDQx2AJ06oJLwtMjvv/Q2KfJP6Buu4SeYsz4KmNXkUOIQ
XkujwhpLrIvbe51VBQNZ26Xz4gt1GjzKIUtYOpFUKTY8XScdXBmXy9Z2YSuowfFM
i80Hnm9/Wb/7nVSKz3zgoFUezFJ0HvpYHi0CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBT+u0TO1ms1YgdW96Baga5KTBRRRTAfBgNVHSMEGDAWgBSH2uwg7fSiAQQj3XsA
ThV08ROnNTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNDQvaDlyc0lPMzBvZ0VFSTkxN0FFNFZkUEVUcHpVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaDlyc0lPMzBvZ0VFSTkxN0FFNFZk
UEVUcHpVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTQ0L19ydEV6dFpyTldJSFZ2ZWdXb0d1U2t3VVVVVS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgACMAYDBAAkA5kwDQYJKoZIhvcNAQELBQAD
ggEBAFN4aZBsZaH5EIbLudUTRN3Bf5aNiwhldmZFUJGy5kuqpzosc9i34uUu5HkG
GeC51ZXa1WbTLfOjVbnIkh5YX+qlIjn2OkmjH6LNBBRvr6tY3vwN7Af3IKw2Sk84
yrLO9G/YBAK21/Bwz3vUUTzdtfN5v1htE/+x4kRYl82PvJ/tnI4hT9b/20cbm5fA
/ONzj/Pww90Pa+gf9KMkG7b5kk7pkAgrQjugOYDxHnDmabRyKvuos3joI9dRQbBC
yB5ojsnAh3dr35e0w1AupUNWnoSQLpZNmgEy9wWot0iTPwUE/Jnzmc0POr3+fTM7
8C/40FyrH2ZGqpWXaWzjXC0Zknc=
-----END CERTIFICATE-----