Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/ZEcLcMZhNPQhF-kvgz5av4Vhhzw.roa
File:                     ZEcLcMZhNPQhF-kvgz5av4Vhhzw.roa (raw, json)
Hash identifier:          3fZ8VbBnIUbZKqRYb7zhKIwyenvGrAG7LXllzY4lA0I=
Subject key identifier:   64:47:0B:70:C6:61:34:F4:21:17:E9:2F:83:3E:5A:BF:85:61:87:3C
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       1D
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/ZEcLcMZhNPQhF-kvgz5av4Vhhzw.roa
Signing time:             Tue 24 May 2022 04:52:24 +0000
ROA not before:           Tue 24 May 2022 04:52:24 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     131934
IP address blocks:        61.245.208.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May 24 04:52:24 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=64470B70C66134F42117E92F833E5ABF8561873C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:de:05:05:6c:ac:57:00:e1:93:8e:be:5a:
                    53:9f:c4:b0:3b:c2:6e:71:e0:2b:36:f4:b1:50:49:
                    65:e7:42:31:06:cd:fd:34:ad:8e:bc:73:1f:57:11:
                    50:84:66:0c:c2:83:e8:32:56:08:c7:03:ed:6b:bd:
                    4f:38:0f:0b:5d:9c:a8:e9:6f:34:f5:48:62:cf:0f:
                    ed:ee:4e:96:e3:34:8f:10:ce:2b:c2:b5:1e:53:21:
                    2c:70:bd:af:29:66:a6:5a:88:9f:e3:5a:24:5c:f5:
                    fe:67:00:59:ba:46:0e:fc:bf:e2:57:f9:71:55:0c:
                    d5:a8:41:de:e1:fd:49:c2:9f:ee:0a:aa:cb:50:09:
                    e7:46:17:97:6f:78:98:20:55:05:10:13:4d:de:3a:
                    b1:1e:1e:72:57:34:6e:0e:a6:4b:53:f8:cd:17:98:
                    bb:79:a1:27:55:e9:10:c3:63:6a:7a:c9:f1:e3:a2:
                    50:27:9e:45:3a:3b:45:7c:cf:86:7f:23:3c:ac:3a:
                    8a:10:d5:a6:5e:d2:04:2b:76:80:a1:e8:0d:19:71:
                    48:66:c6:e2:ef:f7:ae:bc:75:e3:3c:4c:52:f1:9a:
                    cf:e3:4a:94:41:a1:01:be:9a:56:4d:23:8d:1e:aa:
                    8b:ad:f7:b5:67:30:c4:f0:17:d9:ff:d6:fe:6a:f0:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:47:0B:70:C6:61:34:F4:21:17:E9:2F:83:3E:5A:BF:85:61:87:3C
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/ZEcLcMZhNPQhF-kvgz5av4Vhhzw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:86:38:36:f2:0a:1d:0b:84:59:5e:d0:e3:47:70:23:c1:80:
         ac:68:25:ae:a6:d8:d7:f2:aa:66:f6:25:f2:9e:b2:ee:48:49:
         c9:6f:0f:a9:1e:ac:4f:79:36:0c:52:95:04:b2:bf:06:d9:c5:
         29:dc:b1:db:c4:6e:7e:0e:75:73:1e:9a:40:1d:82:a8:10:b6:
         87:5e:1a:05:24:17:5d:0b:5f:54:43:28:40:0b:19:a8:05:60:
         3b:c2:03:4a:da:00:d4:16:02:35:a9:96:1d:9e:80:de:2f:25:
         cf:c4:9e:50:e5:b7:c6:ac:2a:f8:9a:4e:c7:ab:67:9e:7c:3b:
         e5:57:2c:e7:b6:d6:f8:e5:de:a1:fb:0c:83:f6:cd:7e:b0:06:
         3b:fb:e9:1a:2e:6e:cf:eb:77:52:1a:b7:1c:94:10:16:4c:0f:
         f3:b6:a4:3f:46:9d:c0:09:ac:f6:33:a4:6e:2a:b8:51:12:6d:
         cd:9d:8c:66:fd:ac:97:58:a4:5b:35:77:fa:28:ac:f9:59:68:
         37:c4:6f:03:29:b4:d9:17:d9:fa:dc:f8:a4:76:68:ce:c0:1a:
         a9:7f:0b:46:55:9b:83:2a:d4:12:66:36:66:85:f8:f1:e5:4a:
         26:3b:40:3a:c2:8d:21:a4:8a:6b:15:0e:08:d3:c5:e5:cb:64:
         e4:4e:ce:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----