Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30211/tiYpq_8yCALfzaCyFJQ_EzYB9i4.roa
File:                     tiYpq_8yCALfzaCyFJQ_EzYB9i4.roa (raw, json)
Hash identifier:          ee2hEci40is1qYGaK/oa8YS39KgXfbFm4Z2SDC0UBlM=
Subject key identifier:   B6:26:29:AB:FF:32:08:02:DF:CD:A0:B2:14:94:3F:13:36:01:F6:2E
Certificate issuer:       /CN=1467AF2FF272208CF75453CDC0122C4713D2CAB5
Certificate serial:       05
Authority key identifier: 14:67:AF:2F:F2:72:20:8C:F7:54:53:CD:C0:12:2C:47:13:D2:CA:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FGevL_JyIIz3VFPNwBIsRxPSyrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/tiYpq_8yCALfzaCyFJQ_EzYB9i4.roa
Signing time:             Tue 15 Mar 2022 00:46:49 +0000
ROA not before:           Tue 15 Mar 2022 00:46:49 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     38648
IP address blocks:        2402:3b00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1467AF2FF272208CF75453CDC0122C4713D2CAB5
        Validity
            Not Before: Mar 15 00:46:49 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=B62629ABFF320802DFCDA0B214943F133601F62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:4e:55:66:9c:69:19:1e:e5:4f:fe:0c:29:
                    f6:cf:1b:cd:50:6e:3d:f2:6f:23:5e:68:c8:56:3b:
                    fb:de:02:94:5d:0b:96:6a:6e:2b:a7:ee:ea:d0:9d:
                    73:eb:f8:d5:5f:6c:fd:61:9a:37:84:00:cd:af:f3:
                    aa:66:fb:1a:65:7a:bd:05:cc:82:44:b5:04:e3:10:
                    b9:b2:64:c3:b1:7a:8a:ab:bb:35:06:4e:4c:05:5a:
                    6c:1b:a4:0b:93:8b:7a:78:5f:27:b5:7e:f9:90:80:
                    6e:5a:62:64:b0:79:03:2e:36:72:a9:e6:dc:95:97:
                    cc:98:d9:b6:97:4a:2d:f5:78:de:04:83:a7:87:66:
                    5e:bd:74:ab:9f:ff:42:43:fc:5d:80:9c:95:ba:dd:
                    49:d3:e4:d2:46:5c:50:c9:f8:05:01:e3:1f:72:fe:
                    dd:17:4d:68:93:5f:da:d1:d8:11:cd:8b:1d:f3:25:
                    51:ab:ac:32:55:a8:9f:8a:3d:f8:77:8d:37:51:88:
                    0e:88:b3:1e:7f:57:21:e2:90:d7:e1:c3:89:4f:0d:
                    85:b9:30:1d:2c:ae:23:f1:b8:9d:65:9b:d5:4e:95:
                    8a:bb:89:33:00:34:33:c9:32:3a:cb:8e:ef:cd:c3:
                    27:93:00:8b:9d:b7:e6:f3:45:e7:66:62:aa:82:ea:
                    6d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:26:29:AB:FF:32:08:02:DF:CD:A0:B2:14:94:3F:13:36:01:F6:2E
            X509v3 Authority Key Identifier:
                keyid:14:67:AF:2F:F2:72:20:8C:F7:54:53:CD:C0:12:2C:47:13:D2:CA:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/FGevL_JyIIz3VFPNwBIsRxPSyrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FGevL_JyIIz3VFPNwBIsRxPSyrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/tiYpq_8yCALfzaCyFJQ_EzYB9i4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:b2:aa:fc:f7:59:08:06:e9:03:39:88:48:d6:69:3b:0d:bb:
         54:52:87:52:2b:0e:e2:e6:99:8b:00:d2:46:65:b6:b3:dc:d8:
         25:81:ec:8e:e8:30:68:a1:5d:cf:bb:21:b0:23:73:02:20:b8:
         f1:e5:a8:4e:c0:16:a2:8a:31:2a:35:77:22:47:78:54:eb:a9:
         21:f5:46:7d:28:ab:6e:c2:c1:69:e1:9f:c1:59:59:8d:52:9f:
         bb:09:3d:52:ef:3a:43:14:e3:eb:34:f9:31:1b:66:3e:ce:90:
         58:15:43:22:bc:3c:ac:01:db:ce:71:0a:43:94:31:35:f6:70:
         d4:43:33:6e:6e:15:a8:b8:f9:38:42:9a:c0:8a:75:6f:0c:06:
         a7:4a:72:a7:3b:a8:da:c7:85:a6:33:18:3e:0f:4d:f7:7c:a9:
         30:16:2c:c1:11:ae:e1:df:60:d9:89:0b:f2:6e:05:db:87:4b:
         ac:a2:e5:ae:24:61:4d:bf:b3:45:39:c2:58:67:be:fc:4d:4c:
         dc:e8:c6:7e:89:01:59:45:0b:c1:ba:89:ff:60:56:7c:cb:ca:
         d7:05:99:66:12:20:7b:58:8d:e0:8a:85:d3:2e:15:b9:22:6d:
         7f:8b:c4:53:49:d0:80:0c:a1:7b:85:80:02:c2:08:04:00:ae:
         40:92:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----