Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/YzQUie2JjRxdJJ3OZJX8HnalVSY.roa
File:                     YzQUie2JjRxdJJ3OZJX8HnalVSY.roa (raw, json)
Hash identifier:          YYomU7hJI7onW3GKY1jO2uTqtFId0S/JDT2KPTYac+E=
Subject key identifier:   63:34:14:89:ED:89:8D:1C:5D:24:9D:CE:64:95:FC:1E:76:A5:55:26
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       0E
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/YzQUie2JjRxdJJ3OZJX8HnalVSY.roa
Signing time:             Fri 25 Feb 2022 07:17:39 +0000
ROA not before:           Fri 25 Feb 2022 07:17:39 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     17676
IP address blocks:        61.114.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb 25 07:17:39 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=63341489ED898D1C5D249DCE6495FC1E76A55526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a5:cc:ad:c7:6e:47:36:d8:d0:61:ec:9f:c1:
                    0f:6a:66:8b:b4:2b:5c:b7:d2:62:aa:3e:68:3c:c2:
                    94:d0:9b:74:48:5e:16:bf:e6:2b:2f:b7:31:9d:2f:
                    ff:5e:1e:6e:70:9e:ea:c5:10:e5:3d:18:78:12:10:
                    63:ca:0e:17:b3:54:35:a3:b9:2d:f2:5f:f2:6b:9b:
                    7c:78:ba:6a:5a:ba:c7:ec:13:f0:7d:d8:6e:fe:a4:
                    11:40:a3:16:71:f6:f7:6d:6a:83:e6:b3:5c:18:2d:
                    b5:f6:83:1b:5d:4f:a8:31:f8:3d:ba:b8:c3:f1:e9:
                    a2:21:98:70:fa:0c:6c:3f:f1:56:df:eb:cf:ab:6c:
                    e7:9d:93:ba:d5:b8:d9:85:f8:56:5d:cb:92:20:c2:
                    a5:c7:ef:38:76:32:6e:33:8e:5e:87:88:be:b9:42:
                    17:10:29:0d:f1:f5:50:18:5b:86:a4:2c:da:d6:8c:
                    90:89:19:dc:e8:a4:86:96:0b:53:35:09:2e:86:e3:
                    82:75:6c:e7:e9:a7:63:2c:1a:8b:76:ab:0a:00:fe:
                    b0:c2:73:15:f1:96:e4:d3:31:f6:bf:53:4d:53:67:
                    43:a6:03:60:82:ac:c1:97:0b:39:5f:ec:f5:56:f1:
                    08:f2:53:2a:11:2a:c3:cf:11:6d:01:b3:5e:c4:3f:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:34:14:89:ED:89:8D:1C:5D:24:9D:CE:64:95:FC:1E:76:A5:55:26
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/YzQUie2JjRxdJJ3OZJX8HnalVSY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:40:d7:fe:f8:df:9b:35:a1:94:e9:9e:b4:e7:bc:37:a2:81:
         b0:08:3e:96:88:69:b9:07:8d:99:bc:04:68:c4:db:1a:e1:94:
         dd:70:1e:31:1d:8b:36:0e:22:30:41:81:c2:80:1d:65:d7:e2:
         e3:56:42:56:59:cf:d9:60:f0:50:87:bf:29:cb:5a:25:d9:a4:
         54:63:48:57:a8:db:c7:76:b8:a2:01:5a:7c:7c:64:09:c4:8f:
         f8:6a:45:5f:88:14:07:10:55:1b:6c:f0:10:ce:8a:28:62:71:
         da:ac:f7:f4:c1:1d:c2:3c:da:b2:3d:c5:02:09:f3:79:86:59:
         3a:7b:2c:d6:9c:ef:94:a3:7d:0f:01:52:9a:fc:b0:a1:74:7d:
         58:37:92:e4:db:a6:90:8e:4f:d5:59:d5:18:60:65:f9:be:65:
         f8:3b:7d:ee:46:3d:d7:e4:77:55:a4:c9:40:2b:5b:2f:f4:ab:
         97:b2:82:f5:5c:96:d9:84:11:63:55:c2:2f:10:d0:94:a6:76:
         a2:f5:20:7d:13:5e:b0:d9:18:2a:db:1f:14:8d:34:73:50:d5:
         f1:00:60:c2:d6:80:a0:14:6e:c8:63:8b:96:3b:38:1a:20:4d:
         71:9f:4e:72:a5:3e:9f:58:b8:14:f1:40:d8:8c:f8:7a:fa:ee:
         3c:8f:0d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----