Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30260/-3LSt9PGnXBaluZtaLxbJ3Z7yfw.roa
File:                     -3LSt9PGnXBaluZtaLxbJ3Z7yfw.roa (raw, json)
Hash identifier:          vye04075JONjn84ojH61QZuPVKa0xvkdBYPjQtQgLp8=
Subject key identifier:   FB:72:D2:B7:D3:C6:9D:70:5A:96:E6:6D:68:BC:5B:27:76:7B:C9:FC
Certificate issuer:       /CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
Certificate serial:       15
Authority key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/-3LSt9PGnXBaluZtaLxbJ3Z7yfw.roa
Signing time:             Sat 01 Jan 2022 01:31:43 +0000
ROA not before:           Sat 01 Jan 2022 01:31:43 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7514
IP address blocks:        2001:2f0::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
        Validity
            Not Before: Jan  1 01:31:43 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=FB72D2B7D3C69D705A96E66D68BC5B27767BC9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:15:e5:68:46:1e:5b:1b:b3:50:e1:f9:90:73:
                    2f:38:5a:de:5e:e6:1c:fc:1b:4e:e0:1d:e9:a7:9c:
                    74:d5:4d:06:cf:0c:c2:8a:a0:53:78:53:1c:2d:16:
                    c9:04:b7:a3:08:37:dd:8d:fe:ca:23:40:2a:1b:01:
                    5c:d7:b2:23:13:4f:3e:df:c3:f5:fd:d3:6e:5d:93:
                    d8:95:42:a4:f9:7a:c2:36:5e:62:4f:3c:ba:47:d5:
                    a8:e7:0d:0d:d5:40:61:16:69:e1:01:1b:db:c4:54:
                    2a:66:78:b0:a5:33:00:f9:3a:e0:68:2b:bf:21:1f:
                    ef:f9:70:96:76:0e:aa:9b:46:4f:1e:83:f8:02:60:
                    bf:67:b6:ae:a0:0a:6a:b3:cb:19:bb:8d:d6:34:40:
                    86:45:c4:32:25:19:6d:90:09:89:9d:66:99:6b:59:
                    c5:22:82:7e:ff:34:1b:3f:b9:b3:1d:aa:67:e4:dc:
                    7c:0d:c6:8e:8b:b8:7a:52:6f:67:5a:cd:ac:86:31:
                    75:44:52:fc:d6:0a:08:ba:91:ce:c5:f2:32:95:ef:
                    3c:45:5e:43:82:ea:51:c4:a1:d8:5b:1b:e9:37:03:
                    25:a1:49:ba:e7:d7:40:a8:44:3e:2d:27:25:69:81:
                    c2:1f:78:7a:50:dc:50:72:f7:b0:5f:72:72:03:91:
                    ac:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:72:D2:B7:D3:C6:9D:70:5A:96:E6:6D:68:BC:5B:27:76:7B:C9:FC
            X509v3 Authority Key Identifier:
                keyid:97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/-3LSt9PGnXBaluZtaLxbJ3Z7yfw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:d6:43:95:d2:e5:e9:76:7a:94:b9:62:9c:10:79:88:67:6c:
         e7:3f:22:ad:6a:cb:52:50:90:a2:2e:af:7d:ed:dc:48:b3:83:
         6f:dc:6f:93:ee:4c:c4:43:5a:3b:ae:1c:49:47:6e:40:58:23:
         b6:5a:ff:64:71:74:8a:56:13:e6:16:8a:7a:a6:5b:ce:9d:69:
         42:49:39:e8:5b:f2:73:09:77:3a:63:74:f2:8c:e3:8e:90:22:
         70:92:51:71:66:ec:fa:79:4e:75:bc:a3:22:c2:38:42:22:a8:
         71:75:f2:2f:80:20:5f:8a:a9:6c:d3:74:c3:31:f9:4b:f7:87:
         cf:a6:e9:9f:78:e2:35:57:85:3e:c3:24:ea:1c:7b:5d:93:cd:
         e5:f8:80:63:6a:20:7e:03:ab:83:d3:03:c2:e0:86:ef:a3:6e:
         42:25:f8:21:a8:4c:ee:9e:d8:3d:7f:e8:c1:e6:d5:a4:87:64:
         a7:04:96:bc:fd:e1:a0:e9:5f:25:94:ce:bf:9b:e1:e8:85:c1:
         cf:14:62:43:c3:a3:50:50:b3:a5:2a:c9:2e:5c:ee:1b:fe:4e:
         74:94:f5:77:d3:c2:0d:11:76:1f:43:ac:dd:00:74:ae:7a:9e:
         45:a6:cb:f4:b2:1d:f4:3d:d4:79:64:79:00:04:8c:9f:f8:60:
         9b:77:b5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----