Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/UjZ7XI1RY0V1NgUvg4pkQGy3RH0.roa
File:                     UjZ7XI1RY0V1NgUvg4pkQGy3RH0.roa (raw, json)
Hash identifier:          Go3kUP289KrZ4XfUzXQoxrDJO5412/OxyXgVGnzxq4Q=
Subject key identifier:   52:36:7B:5C:8D:51:63:45:75:36:05:2F:83:8A:64:40:6C:B7:44:7D
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       21
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/UjZ7XI1RY0V1NgUvg4pkQGy3RH0.roa
Signing time:             Tue 24 May 2022 04:54:23 +0000
ROA not before:           Tue 24 May 2022 04:54:23 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     10019
IP address blocks:        194.193.96.0/19 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May 24 04:54:23 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=52367B5C8D5163457536052F838A64406CB7447D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d7:f7:a6:a5:c9:71:3a:b7:0d:d5:3a:34:7c:
                    e7:86:29:b9:49:49:17:76:b4:ce:40:3f:67:6a:75:
                    1f:3e:90:62:e0:13:f1:c9:81:12:b4:09:db:bc:df:
                    1a:37:c2:95:46:19:24:a3:55:1e:74:a1:ff:31:35:
                    61:2d:4a:a5:3e:0a:40:98:07:59:ae:b3:fa:e1:66:
                    9e:2a:dc:9c:07:75:54:af:c6:e1:a1:ed:49:74:50:
                    ab:e2:c2:27:1b:8d:2d:7f:62:e9:61:fa:83:2b:90:
                    82:46:37:35:a0:64:a9:8b:6c:02:dd:42:af:61:fb:
                    1a:cb:28:8e:04:82:b0:2e:31:4e:d1:1c:b1:23:34:
                    b8:c9:b1:af:47:3d:88:5e:b7:4f:05:4a:d6:2b:dd:
                    5b:5a:08:5e:3a:d2:64:79:96:cb:d5:17:e0:2b:2b:
                    3f:c1:2b:99:44:f7:aa:6b:89:f9:70:b8:88:12:ac:
                    a2:61:07:64:d3:0f:70:93:7f:40:ab:2d:d2:c7:2d:
                    a3:c3:86:e1:7e:67:7c:ce:f8:1e:84:de:d2:f1:1e:
                    fe:7e:77:22:b5:fe:cd:7c:69:db:d6:67:10:74:37:
                    d1:f2:20:27:70:8c:fa:4c:47:d1:54:5a:00:3d:c3:
                    07:86:e3:fa:70:69:e0:7b:a0:2c:86:83:b9:46:17:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:36:7B:5C:8D:51:63:45:75:36:05:2F:83:8A:64:40:6C:B7:44:7D
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/UjZ7XI1RY0V1NgUvg4pkQGy3RH0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.193.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:89:21:61:3f:59:cd:0e:f3:b8:c9:1f:0e:1c:7f:68:37:ed:
         70:a5:53:43:95:44:4f:31:ff:04:4b:c3:cc:48:e9:99:0a:07:
         23:aa:cc:2e:93:ee:31:29:0a:27:ed:99:ea:ca:8d:1e:98:c1:
         20:d8:a8:9b:f4:ec:54:7b:8f:22:fb:37:6c:64:4a:0a:b0:9c:
         65:20:69:66:0b:01:1a:f6:35:b4:bc:4c:43:91:5f:7d:89:62:
         af:e0:3e:ab:6d:af:a0:28:33:d7:25:57:de:00:6e:bd:25:75:
         07:1d:73:15:85:b7:f7:2f:f0:ab:6a:32:32:e7:f5:39:21:3f:
         76:2a:5f:3d:de:66:90:10:f4:6d:3f:c6:2f:6c:58:cd:e2:90:
         69:08:83:18:2e:0e:b0:7b:40:7d:fc:ff:af:3d:26:e6:9d:e9:
         33:8b:87:4d:6c:4f:80:40:d6:ea:1c:96:a4:50:45:49:6f:2e:
         b8:2e:22:8a:35:be:b9:78:5c:f4:33:d2:62:78:a3:0e:88:e4:
         ce:4f:14:8a:5e:1c:f2:ae:c8:af:eb:2d:08:85:ed:9c:fe:c4:
         1b:36:f7:26:2a:30:37:08:74:d4:f0:d2:ca:ec:c2:d0:3d:ad:
         6d:5c:e1:88:1b:8b:9b:85:21:1c:95:74:9c:2c:b7:dd:85:c6:
         7a:3f:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----