Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/xtYa7p_9N2hoV2d4TrF6XO6fITI.roa
File:                     xtYa7p_9N2hoV2d4TrF6XO6fITI.roa (raw, json)
Hash identifier:          mYT+MoHqDHwNz/QBtIjLnl+RGWJvvnYsLGk8IIr8KEA=
Subject key identifier:   C6:D6:1A:EE:9F:FD:37:68:68:57:67:78:4E:B1:7A:5C:EE:9F:21:32
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       11
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/xtYa7p_9N2hoV2d4TrF6XO6fITI.roa
Signing time:             Fri 25 Feb 2022 07:17:40 +0000
ROA not before:           Fri 25 Feb 2022 07:17:40 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     17676
IP address blocks:        126.249.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb 25 07:17:40 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=C6D61AEE9FFD3768685767784EB17A5CEE9F2132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:53:7c:57:2b:35:1a:43:3a:d3:4d:77:44:
                    7f:5c:a1:27:c6:e4:e6:b3:4e:24:df:ff:ed:c6:b6:
                    6d:20:6d:ac:cb:f7:65:d8:9e:d0:d9:62:a2:70:c9:
                    66:47:0e:22:b6:8c:8e:90:44:44:4d:9c:15:43:aa:
                    74:42:06:23:94:ba:41:86:d2:ec:9d:9e:99:f0:fb:
                    75:d7:35:47:f3:24:ec:ca:32:a5:c4:63:be:71:f3:
                    d3:de:c8:ac:e6:3e:36:75:ab:6f:18:39:03:6a:c6:
                    51:16:97:11:3a:a5:b6:83:5f:67:0e:a9:be:7d:42:
                    6c:dc:03:b0:f0:6d:64:91:cb:33:f1:86:f6:42:1b:
                    13:8f:6a:2b:f7:32:28:f8:56:0e:42:21:09:8c:51:
                    7c:c1:9b:64:58:64:08:99:c9:03:a8:04:b9:7b:b7:
                    13:f6:6e:f7:8c:4e:53:65:aa:53:0e:21:b5:dc:31:
                    53:e1:0c:fe:eb:9d:c9:85:9a:61:a1:17:77:b7:ad:
                    63:c3:07:d3:f5:3f:70:59:9c:5b:88:cc:58:29:26:
                    47:b5:31:df:8c:d1:3e:43:a2:46:0c:b9:5d:4c:3a:
                    ea:f4:11:bf:69:17:e4:42:87:c8:08:3f:d3:97:5a:
                    7d:24:22:1a:ad:b1:ba:36:1e:11:83:96:24:52:2b:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:1A:EE:9F:FD:37:68:68:57:67:78:4E:B1:7A:5C:EE:9F:21:32
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/xtYa7p_9N2hoV2d4TrF6XO6fITI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:f1:19:3e:e3:4e:24:2f:62:37:09:35:76:ad:1a:6e:8b:4d:
         2d:ca:0b:57:ef:67:32:10:b1:52:2a:5f:8d:b9:0b:4d:4e:12:
         5a:4f:b3:3c:9a:8a:99:1e:8f:32:4e:aa:0f:9b:fc:f2:21:dd:
         8f:f1:73:45:ea:6a:21:78:98:0e:c0:3a:d0:fc:30:04:c5:9c:
         39:22:a0:cf:98:1b:21:ca:ec:01:0c:c8:01:2b:05:e9:20:6f:
         78:57:5f:f5:44:b7:ea:fe:96:79:9d:92:97:f1:25:16:f9:8f:
         18:31:b3:0c:3f:ca:e2:55:5a:c8:d7:3b:92:28:5e:bd:59:91:
         11:3f:9f:b8:c0:0c:c2:14:c8:77:b4:ea:74:96:e5:3c:96:ce:
         42:e9:55:01:a1:4d:55:0d:03:80:78:f0:84:5d:cb:b8:61:3a:
         4c:0b:1c:25:89:6a:e2:88:9b:02:53:d7:ae:dd:e2:28:d8:f4:
         2e:ab:7f:fc:8f:40:6f:ae:2d:23:ae:9b:89:64:68:80:83:0e:
         78:db:d7:94:5b:7d:8e:18:b3:fc:86:bb:f4:f0:cf:e7:62:8a:
         ec:aa:f5:4f:13:27:e0:b9:03:09:1b:4c:25:96:0a:2b:fe:12:
         43:f4:f5:e8:3c:12:8e:89:46:17:7a:e0:fa:31:42:22:3d:97:
         95:6b:9b:c4
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz
MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTIyMDIyNTA3
MTc0MFoXDTIzMDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQzZENjFBRUU5RkZEMzc2
ODY4NTc2Nzc4NEVCMTdBNUNFRTlGMjEzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK/OU3xXKzUaQzrTTXdEf1yhJ8bk5rNOJN//7ca2bSBtrMv3Zdie
0NlionDJZkcOIraMjpBERE2cFUOqdEIGI5S6QYbS7J2emfD7ddc1R/Mk7MoypcRj
vnHz097IrOY+NnWrbxg5A2rGURaXETqltoNfZw6pvn1CbNwDsPBtZJHLM/GG9kIb
E49qK/cyKPhWDkIhCYxRfMGbZFhkCJnJA6gEuXu3E/Zu94xOU2WqUw4htdwxU+EM
/uudyYWaYaEXd7etY8MH0/U/cFmcW4jMWCkmR7Ux34zRPkOiRgy5XUw66vQRv2kX
5EKHyAg/05dafSQiGq2xujYeEYOWJFIrMwMCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBTG1hrun/03aGhXZ3hOsXpc7p8hMjAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d
w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3
LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NDAveHRZYTdwXzlOMmhvVjJkNFRyRjZYTzZmSVRJLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAH75MA0GCSqGSIb3DQEBCwUAA4IBAQAu
8Rk+404kL2I3CTV2rRpui00tygtX72cyELFSKl+NuQtNThJaT7M8moqZHo8yTqoP
m/zyId2P8XNF6moheJgOwDrQ/DAExZw5IqDPmBshyuwBDMgBKwXpIG94V1/1RLfq
/pZ5nZKX8SUW+Y8YMbMMP8riVVrI1zuSKF69WZERP5+4wAzCFMh3tOp0luU8ls5C
6VUBoU1VDQOAePCEXcu4YTpMCxwliWriiJsCU9eu3eIo2PQuq3/8j0Bvri0jrpuJ
ZGiAgw5429eUW32OGLP8hrv08M/nYorsqvVPEyfguQMJG0wllgor/hJD9PXoPBKO
iUYXeuD6MUIiPZeVa5vE
-----END CERTIFICATE-----