Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30267/7WfMuSD_Z--nlxlmXzCR2Ik47DI.roa
File:                     7WfMuSD_Z--nlxlmXzCR2Ik47DI.roa (raw, json)
Hash identifier:          8tl5s2l8ACgXxjcs5RaZsBIIL08W1j4fRRy7khqSX/I=
Subject key identifier:   ED:67:CC:B9:20:FF:67:EF:A7:97:19:66:5F:30:91:D8:89:38:EC:32
Certificate issuer:       /CN=AB99FE69A832191F847C33B243442E9D68AD1433
Certificate serial:       26
Authority key identifier: AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/7WfMuSD_Z--nlxlmXzCR2Ik47DI.roa
Signing time:             Wed 01 Jun 2022 01:28:51 +0000
ROA not before:           Wed 01 Jun 2022 01:28:51 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     14618
IP address blocks:        2401:af80:9011::/56 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB99FE69A832191F847C33B243442E9D68AD1433
        Validity
            Not Before: Jun  1 01:28:51 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=ED67CCB920FF67EFA79719665F3091D88938EC32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:8b:08:52:c5:43:b8:59:72:2d:87:36:89:
                    b8:a1:aa:e5:66:29:35:cb:78:92:06:bf:5b:98:cf:
                    1a:18:29:70:9e:1c:19:94:c0:81:6f:fc:84:ac:f2:
                    37:9a:b2:03:21:9c:cf:0a:61:7e:d6:4a:79:93:ed:
                    36:49:07:02:66:4e:45:8c:5a:a1:b0:f2:c9:c1:2a:
                    17:16:11:e6:99:c9:84:b2:94:b1:a7:08:eb:8d:66:
                    56:5e:e5:b4:da:b4:47:5b:2f:df:55:9b:dc:62:2e:
                    dd:ca:fe:f7:a7:af:99:9d:bd:7d:ff:af:c9:22:a0:
                    e9:2e:04:c4:12:6f:a2:9a:20:76:21:26:3e:72:3e:
                    c1:39:50:4e:72:42:3f:d7:d3:53:7f:1f:1e:82:60:
                    8b:62:d1:75:68:47:05:b7:bc:a2:6c:e9:ab:01:30:
                    aa:f2:9a:9b:b5:7c:fa:fd:54:20:de:8e:58:54:33:
                    83:02:13:05:d6:84:47:0b:be:05:1c:58:b5:77:b9:
                    3c:c6:fb:66:7f:ca:83:88:a2:62:52:90:b8:5b:20:
                    d3:c3:38:2b:c3:ea:de:42:39:f1:2f:ac:59:85:87:
                    6a:34:4c:66:8a:1c:0f:f0:18:a6:12:88:6d:10:7b:
                    1a:6c:37:89:62:9b:3f:03:b3:c8:42:c1:53:c7:b7:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:67:CC:B9:20:FF:67:EF:A7:97:19:66:5F:30:91:D8:89:38:EC:32
            X509v3 Authority Key Identifier:
                keyid:AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/7WfMuSD_Z--nlxlmXzCR2Ik47DI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af80:9011::/56

    Signature Algorithm: sha256WithRSAEncryption
         20:a0:7d:a1:58:ea:11:ab:a3:f4:bb:95:b5:38:a0:b6:d6:89:
         00:46:25:97:f0:e3:ea:bc:ff:ef:ac:02:e4:af:4e:eb:dc:6a:
         48:db:64:f3:9b:6c:f2:71:21:ea:ee:c5:04:01:d6:5f:02:19:
         1a:5e:f5:50:85:18:33:c0:b7:dc:46:d0:05:18:e0:a9:ab:4e:
         ed:36:eb:5e:9a:6b:4d:4b:d5:74:52:53:4b:0b:c1:f4:8b:dd:
         28:02:28:86:09:55:6a:36:73:5f:93:c0:95:d3:72:bc:5f:e4:
         87:5d:27:5d:49:63:18:44:9f:b8:47:87:b5:ff:c9:9d:e8:71:
         bd:3a:8b:a8:73:8c:0f:89:92:fe:37:70:1b:6d:44:d1:0c:50:
         a5:ee:48:0c:ae:f1:de:51:b6:94:28:13:ef:10:e0:c6:04:e7:
         50:0f:0c:c5:90:9d:99:fc:97:c1:ad:f0:40:3b:83:d9:b9:d6:
         3f:d9:4c:8f:6b:a5:71:5e:4f:13:76:65:f1:ca:a8:13:0b:fb:
         12:2e:1f:e8:23:80:33:84:52:75:59:1f:5d:dd:0e:fd:0c:7b:
         c6:64:1a:7c:28:38:5a:1a:d4:20:30:bc:e2:96:86:0e:41:ca:
         14:99:d3:ae:80:50:5d:b6:fb:8a:02:07:6a:0b:dc:0d:5f:2c:
         95:d1:ab:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----