Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3818/B3N4EDWVWiaBdLoXTYw9kVqB2kw.roa
File:                     B3N4EDWVWiaBdLoXTYw9kVqB2kw.roa (raw, json)
Hash identifier:          FUsTpcciENzJ7YZinQsYKH4VLA5Y84xZwlPQkj6W7xw=
Subject key identifier:   07:73:78:10:35:95:5A:26:81:74:BA:17:4D:8C:3D:91:5A:81:DA:4C
Certificate issuer:       /CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
Certificate serial:       03
Authority key identifier: 18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/B3N4EDWVWiaBdLoXTYw9kVqB2kw.roa
Signing time:             Thu 03 Jun 2021 02:31:59 +0000
ROA not before:           Thu 03 Jun 2021 02:31:59 +0000
ROA not after:            Sat 21 May 2022 02:33:57 +0000
asID:                     14618
IP address blocks:        202.244.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
        Validity
            Not Before: Jun  3 02:31:59 2021 GMT
            Not After : May 21 02:33:57 2022 GMT
        Subject: CN=0773781035955A268174BA174D8C3D915A81DA4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:ad:e3:5c:80:41:0f:80:64:11:04:57:06:
                    64:82:42:e5:84:3e:88:24:c2:66:04:72:d3:a9:af:
                    8c:33:ed:39:51:6d:aa:e0:fd:00:5f:ce:ca:f4:0b:
                    c8:19:db:d7:c8:35:17:75:9e:aa:2d:d4:ab:19:f1:
                    3f:19:aa:71:af:c0:ba:9f:03:d3:0a:07:98:dd:40:
                    68:d1:15:1e:30:53:99:77:48:91:ff:99:c1:17:dd:
                    dc:3a:fc:e7:12:9f:3c:d2:b0:df:60:ba:c8:1a:31:
                    fa:d2:e3:79:a6:cd:a3:ae:d9:a7:34:6f:c2:90:15:
                    a2:5f:7f:df:6d:e8:59:4e:fe:bb:ab:a5:3c:fb:35:
                    d5:92:92:be:84:a5:b0:50:d8:64:dc:e8:9c:24:a7:
                    de:72:f0:1d:72:0b:b9:50:37:d2:4d:29:a2:29:bd:
                    fd:64:f9:3f:79:01:c7:f3:a2:b8:81:e1:0c:23:4e:
                    8d:43:56:01:ca:98:72:f4:e6:99:b5:bb:df:d2:97:
                    6a:0d:ea:85:91:82:42:1b:fd:c2:88:7e:95:90:f7:
                    6e:75:ba:c1:09:61:f9:92:8c:0f:d4:90:03:6b:90:
                    a8:d6:5b:24:84:08:1d:29:e2:3e:ea:7a:bf:c6:8e:
                    3b:76:d7:f4:6f:e1:98:32:18:e2:47:b0:5d:60:87:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:73:78:10:35:95:5A:26:81:74:BA:17:4D:8C:3D:91:5A:81:DA:4C
            X509v3 Authority Key Identifier:
                keyid:18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/B3N4EDWVWiaBdLoXTYw9kVqB2kw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.244.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:26:13:80:2d:66:9d:1f:e6:59:02:83:24:06:80:b6:36:32:
         a1:df:b0:45:fb:10:0e:5e:eb:44:38:41:1f:26:b8:bd:16:5a:
         50:7a:e3:39:b1:bb:56:f0:2f:da:0f:bb:ea:00:40:e2:51:18:
         8a:2e:91:74:4d:15:c5:e2:37:de:90:7f:a4:36:04:4a:a8:6e:
         d4:c5:58:32:6e:74:62:8b:e3:3e:e3:67:66:0b:02:af:b0:89:
         90:42:7d:49:60:f0:4d:0f:01:af:5a:64:32:53:a8:c4:ae:a1:
         12:6d:fb:7f:51:53:30:5d:cf:87:b2:01:2c:5d:ec:c3:da:7d:
         1b:8d:44:47:a4:3e:b2:c6:00:f6:76:11:3c:9b:65:c0:b1:d4:
         13:f5:c5:65:6f:38:e4:01:d2:4b:b0:09:f7:ca:aa:ad:30:c9:
         90:6a:e2:53:d9:19:1a:20:2f:a2:67:ca:fa:6e:42:f9:d1:4d:
         7f:73:f3:c1:d1:9b:be:08:7e:53:76:eb:62:22:e7:66:7c:bc:
         c6:1c:88:50:36:26:ad:13:b5:55:7e:09:50:b4:8f:a1:2a:5e:
         a7:54:66:2c:2b:69:6c:e4:9f:32:e6:75:e0:f8:88:f8:3c:b7:
         eb:ee:f6:d7:71:24:03:34:d2:5d:3c:97:00:34:38:d2:af:e8:
         fd:1c:61:e9
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxODVC
NTU3RUYzQkU4MTk4NUM1RTZDRDk2MjQ3NjFDQUE0RjkzNkNFMB4XDTIxMDYwMzAy
MzE1OVoXDTIyMDUyMTAyMzM1N1owMzExMC8GA1UEAxMoMDc3Mzc4MTAzNTk1NUEy
NjgxNzRCQTE3NEQ4QzNEOTE1QTgxREE0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMOnreNcgEEPgGQRBFcGZIJC5YQ+iCTCZgRy06mvjDPtOVFtquD9
AF/OyvQLyBnb18g1F3Weqi3UqxnxPxmqca/Aup8D0woHmN1AaNEVHjBTmXdIkf+Z
wRfd3Dr85xKfPNKw32C6yBox+tLjeabNo67ZpzRvwpAVol9/323oWU7+u6ulPPs1
1ZKSvoSlsFDYZNzonCSn3nLwHXILuVA30k0poim9/WT5P3kBx/OiuIHhDCNOjUNW
AcqYcvTmmbW739KXag3qhZGCQhv9woh+lZD3bnW6wQlh+ZKMD9SQA2uQqNZbJIQI
HSniPup6v8aOO3bX9G/hmDIY4kewXWCHB1ECAwEAAaOCAdswggHXMB0GA1UdDgQW
BBQHc3gQNZVaJoF0uhdNjD2RWoHaTDAfBgNVHSMEGDAWgBQYW1V+876BmFxebNli
R2HKpPk2zjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzgxOC9HRnRWZnZPLWdaaGNYbXpaWWtkaHlxVDVOczQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9HRnRWZnZPLWdaaGNYbXpaWWtkaHlx
VDVOczQuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzgxOC9CM040RURXVldpYUJkTG9YVFl3OWtWcUIya3cucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyvSMMA0GCSqGSIb3DQEBCwUAA4IB
AQBiJhOALWadH+ZZAoMkBoC2NjKh37BF+xAOXutEOEEfJri9FlpQeuM5sbtW8C/a
D7vqAEDiURiKLpF0TRXF4jfekH+kNgRKqG7UxVgybnRii+M+42dmCwKvsImQQn1J
YPBNDwGvWmQyU6jErqESbft/UVMwXc+HsgEsXezD2n0bjURHpD6yxgD2dhE8m2XA
sdQT9cVlbzjkAdJLsAn3yqqtMMmQauJT2RkaIC+iZ8r6bkL50U1/c/PB0Zu+CH5T
dutiIudmfLzGHIhQNiatE7VVfglQtI+hKl6nVGYsK2ls5J8y5nXg+Ij4PLfr7vbX
cSQDNNJdPJcANDjSr+j9HGHp
-----END CERTIFICATE-----