Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39061/C_28IQ_8DFMsvn614LqCX-vXglo.roa
File:                     C_28IQ_8DFMsvn614LqCX-vXglo.roa (raw, json)
Hash identifier:          hRE41R/iU0pL3U0sM1E6wWAFdkF5bg/qV/rq9jA2gfs=
Subject key identifier:   0B:FD:BC:21:0F:FC:0C:53:2C:BE:7E:B5:E0:BA:82:5F:EB:D7:82:5A
Certificate issuer:       /CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
Certificate serial:       02
Authority key identifier: F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/C_28IQ_8DFMsvn614LqCX-vXglo.roa
Signing time:             Mon 20 Jun 2022 03:08:52 +0000
ROA not before:           Mon 20 Jun 2022 03:08:52 +0000
ROA not after:            Tue 20 Jun 2023 03:05:43 +0000
asID:                     131948
IP address blocks:        2001:df0:2440::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
        Validity
            Not Before: Jun 20 03:08:52 2022 GMT
            Not After : Jun 20 03:05:43 2023 GMT
        Subject: CN=0BFDBC210FFC0C532CBE7EB5E0BA825FEBD7825A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:f3:f8:e4:2e:1e:dd:52:c1:63:92:71:b9:
                    28:a5:26:b8:d6:7f:76:4f:f6:97:2e:c4:df:45:c8:
                    bc:76:d4:3c:c4:5a:40:e8:fc:ed:52:11:52:54:3b:
                    7f:38:c8:0f:fd:36:23:8f:7b:cd:4c:51:67:04:2c:
                    9e:72:0e:5f:c5:5d:77:a3:38:0f:f8:39:bc:5b:c6:
                    be:86:db:2c:11:fa:f5:80:d3:29:d2:03:00:39:e9:
                    7c:34:1e:fd:10:a7:41:e0:86:2f:c2:4e:c4:fe:88:
                    54:e0:94:55:ea:af:1b:54:5f:9f:d5:f7:ab:18:f9:
                    91:a5:99:cd:99:01:c0:75:41:54:18:73:33:0f:a4:
                    75:fc:7f:47:6b:0e:74:d4:12:4d:42:5d:2e:85:ee:
                    35:3c:55:9b:ab:a7:4f:1e:d8:0a:41:b7:d7:cc:e6:
                    74:3b:8f:ce:c5:ff:ef:7e:ac:10:62:f7:5c:d9:84:
                    e2:bb:e6:51:e2:38:e5:29:e5:b1:ec:35:86:af:6f:
                    87:40:b0:4c:bd:f8:b3:0d:e8:9a:ce:b8:de:02:a9:
                    d4:cf:d8:0a:55:24:21:1c:c1:93:33:87:ec:56:6e:
                    e8:70:ea:ee:b4:34:a7:4d:3a:a2:0c:73:f7:69:a5:
                    e6:d0:f9:3b:47:e8:c4:f6:05:55:02:7e:fd:7b:fe:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FD:BC:21:0F:FC:0C:53:2C:BE:7E:B5:E0:BA:82:5F:EB:D7:82:5A
            X509v3 Authority Key Identifier:
                keyid:F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/C_28IQ_8DFMsvn614LqCX-vXglo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:2440::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:fc:c5:d7:6c:f8:0b:4a:09:25:5f:81:bd:4d:1e:db:1c:22:
         05:9a:9e:56:b5:68:b7:6f:95:a2:22:35:cf:b3:86:76:00:69:
         b0:27:a4:29:ad:b6:d9:06:04:eb:0a:8f:69:f3:d8:2e:77:05:
         bd:ac:46:7e:c1:51:1e:3c:f5:d7:cc:0f:09:e7:4e:77:99:d9:
         97:5e:93:1e:51:26:d9:5f:34:8e:bf:63:a2:75:36:4c:77:8a:
         4c:36:e1:c5:a8:f8:99:d2:0e:c2:6f:72:b3:2a:f5:91:f4:e3:
         6d:02:ab:4a:cb:60:a6:d7:e5:6c:9c:7d:06:11:60:e7:5c:86:
         d3:0e:a2:1a:28:f3:3e:5f:80:ff:be:2b:57:b9:34:c7:48:f2:
         92:10:4e:85:89:9c:14:13:5b:34:bf:43:00:ff:37:96:87:f6:
         1a:1d:61:be:c2:5a:35:06:f0:f5:95:5a:e1:ac:5a:a6:58:36:
         66:05:2b:ad:f4:90:fa:13:42:cc:d6:7a:98:36:b0:0a:7e:39:
         24:2b:ca:66:11:bb:6c:8a:8d:88:84:60:54:fc:66:69:e4:45:
         68:1a:49:cb:87:4b:c8:16:c4:0f:0c:b4:dd:73:a8:b2:d9:c0:
         d5:ba:01:d7:ad:ec:f3:04:8b:32:53:5a:5b:d2:c6:b2:ab:6d:
         0e:e0:43:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMTYy
N0MzQzIzM0U3OTYzN0FDOURDMDM1Q0RGNTBCNzg5RkM2N0FGMB4XDTIyMDYyMDAz
MDg1MloXDTIzMDYyMDAzMDU0M1owMzExMC8GA1UEAxMoMEJGREJDMjEwRkZDMEM1
MzJDQkU3RUI1RTBCQTgyNUZFQkQ3ODI1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKMX8/jkLh7dUsFjknG5KKUmuNZ/dk/2ly7E30XIvHbUPMRaQOj8
7VIRUlQ7fzjID/02I497zUxRZwQsnnIOX8Vdd6M4D/g5vFvGvobbLBH69YDTKdID
ADnpfDQe/RCnQeCGL8JOxP6IVOCUVeqvG1Rfn9X3qxj5kaWZzZkBwHVBVBhzMw+k
dfx/R2sOdNQSTUJdLoXuNTxVm6unTx7YCkG318zmdDuPzsX/736sEGL3XNmE4rvm
UeI45Snlsew1hq9vh0CwTL34sw3oms643gKp1M/YClUkIRzBkzOH7FZu6HDq7rQ0
p006ogxz92ml5tD5O0foxPYFVQJ+/Xv+vd0CAwEAAaOCAiswggInMB0GA1UdDgQW
BBQL/bwhD/wMUyy+frXguoJf69eCWjAfBgNVHSMEGDAWgBTxYnw8Iz55Y3rJ3ANc
31C3ifxnrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkwNjEvOFdKOFBDTS1lV042eWR3RFhOOVF0NG44WjY4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOFdKOFBDTS1lV042eWR3RFhOOVF0
NG44WjY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzM5MDYxL0NfMjhJUV84REZNc3ZuNjE0THFDWC12WGdsby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ3wJEAwDQYJKoZIhvcNAQELBQADggEBAAf8xdds+AtKCSVfgb1N
HtscIgWanla1aLdvlaIiNc+zhnYAabAnpCmtttkGBOsKj2nz2C53Bb2sRn7BUR48
9dfMDwnnTneZ2Zdekx5RJtlfNI6/Y6J1Nkx3ikw24cWo+JnSDsJvcrMq9ZH0420C
q0rLYKbX5WycfQYRYOdchtMOohoo8z5fgP++K1e5NMdI8pIQToWJnBQTWzS/QwD/
N5aH9hodYb7CWjUG8PWVWuGsWqZYNmYFK630kPoTQszWepg2sAp+OSQrymYRu2yK
jYiEYFT8ZmnkRWgaScuHS8gWxA8MtN1zqLLZwNW6Adet7PMEizJTWlvSxrKrbQ7g
Qw4=
-----END CERTIFICATE-----