Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/A_G_ZRB-mKiOcvrTG2bJc1i-NYo.roa
File:                     A_G_ZRB-mKiOcvrTG2bJc1i-NYo.roa (raw, json)
Hash identifier:          ZBPHm5nmP2J3GNRi+/qcXySNXuNQb9kUO/GXiEigaCQ=
Subject key identifier:   03:F1:BF:65:10:7E:98:A8:8E:72:FA:D3:1B:66:C9:73:58:BE:35:8A
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       0F
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/A_G_ZRB-mKiOcvrTG2bJc1i-NYo.roa
Signing time:             Fri 25 Feb 2022 07:17:39 +0000
ROA not before:           Fri 25 Feb 2022 07:17:39 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     17676
IP address blocks:        218.45.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb 25 07:17:39 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=03F1BF65107E98A88E72FAD31B66C97358BE358A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:49:41:d3:9a:02:03:ce:e0:cc:a6:51:bc:
                    5e:45:1b:a5:87:f1:33:b9:fe:55:19:15:f8:50:19:
                    52:da:47:47:a7:75:9e:be:54:e6:e0:90:42:14:b9:
                    d9:b3:9b:8b:4a:17:e1:e0:f5:80:6b:d0:5b:6d:15:
                    e7:c5:59:02:5a:06:4b:31:af:b3:82:a4:0d:61:7b:
                    92:7b:ea:91:ba:78:8f:67:a4:67:c9:28:f2:e6:7a:
                    8b:36:e1:74:69:4e:4e:1d:94:45:c7:38:ee:95:df:
                    72:31:9b:7e:73:04:0d:b8:7e:4e:49:bd:41:df:73:
                    85:41:a7:1f:4b:78:be:e6:73:2b:01:3e:91:2f:ae:
                    88:00:da:98:1e:9b:87:b6:3b:17:2a:11:fe:f0:bd:
                    c9:a9:a3:31:36:7d:6b:35:99:36:ff:6e:63:97:48:
                    6d:25:0b:18:0a:a2:88:02:d0:99:d8:e2:94:6a:bd:
                    17:2a:77:36:6c:bb:7a:36:83:b9:90:38:e6:92:99:
                    be:70:af:df:d2:c9:41:15:2e:ed:5a:30:15:1a:44:
                    c0:95:6c:7b:a2:98:74:f8:23:ef:86:74:ab:0d:e3:
                    02:a9:a6:da:4d:41:b6:98:42:69:3c:49:6c:a3:9b:
                    75:20:0e:83:bb:6c:9f:36:b5:36:ce:bb:e8:e9:00:
                    e8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F1:BF:65:10:7E:98:A8:8E:72:FA:D3:1B:66:C9:73:58:BE:35:8A
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/A_G_ZRB-mKiOcvrTG2bJc1i-NYo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c3:c1:30:ce:30:79:53:16:7c:15:b3:f8:d7:a8:ad:a9:e8:06:
         5d:dd:2a:fd:7f:2a:85:88:40:b1:a5:7e:e8:e5:7a:38:cb:5e:
         53:f7:32:29:d4:30:9d:31:1f:4f:7b:4e:97:ff:04:e5:c2:dd:
         70:dc:cc:da:4e:9b:f3:f8:68:95:d1:f5:d3:19:ee:1a:4d:f0:
         e3:52:fd:f4:8b:a9:06:58:ce:58:32:9e:92:fb:28:01:d7:ee:
         ff:1d:ee:cf:6e:18:b8:70:b0:3e:30:02:20:20:e4:1d:74:52:
         8d:6d:1d:f3:4f:81:37:8f:81:dc:7b:67:76:28:76:b4:c4:a7:
         e9:b6:bd:3b:45:ef:c8:bc:50:02:dd:94:8e:15:35:b9:12:b3:
         a6:58:63:93:ee:d5:66:c1:fb:35:5b:ec:7e:d2:6f:9e:f1:72:
         18:5c:79:81:ac:a4:ca:d3:c8:63:e9:09:ff:d9:26:51:1c:43:
         fa:68:8a:d9:a0:4a:7a:6e:18:50:c2:b8:1d:83:22:5b:eb:ec:
         8b:8e:b4:47:e4:bb:2c:25:61:c8:51:1d:5a:9c:59:c9:c8:d4:
         e3:ce:75:b6:5a:f2:b0:47:29:1c:94:24:97:92:2b:6a:7a:d1:
         ea:e8:28:28:ab:52:4e:42:d3:3c:10:9c:91:4f:0d:ad:c6:f6:
         91:45:b0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----