Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/e0LAsnqdB7lqWt1lXyA9gouNluQ.roa
File:                     e0LAsnqdB7lqWt1lXyA9gouNluQ.roa (raw, json)
Hash identifier:          +rZ0yxAufTK3TQh2GBSAoV43B1aCMjDJBFToAyIFk5E=
Subject key identifier:   7B:42:C0:B2:7A:9D:07:B9:6A:5A:DD:65:5F:20:3D:82:8B:8D:96:E4
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       24
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/e0LAsnqdB7lqWt1lXyA9gouNluQ.roa
Signing time:             Tue 24 May 2022 04:54:24 +0000
ROA not before:           Tue 24 May 2022 04:54:24 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     10019
IP address blocks:        218.45.32.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May 24 04:54:24 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=7B42C0B27A9D07B96A5ADD655F203D828B8D96E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:c1:e1:28:6d:4d:5c:64:48:9c:f9:ec:94:
                    0a:75:f7:31:d2:52:20:3f:cd:10:54:a8:f4:a5:84:
                    07:f9:cc:47:77:27:e1:9c:f6:81:cb:e7:f0:3d:01:
                    ff:40:97:5d:86:3f:af:5c:47:03:85:49:a3:a3:d4:
                    ec:51:94:9e:89:1e:e4:74:24:c7:f3:15:2a:87:7a:
                    e8:99:70:55:bf:e6:e0:3e:57:c6:ee:b4:8f:1f:5d:
                    5e:4f:1b:78:b9:d2:40:ac:fc:9f:e4:ca:73:45:2d:
                    62:05:0f:52:3b:e2:bf:79:76:aa:b3:a9:d4:ee:4c:
                    5e:4c:20:bf:23:6c:d5:78:5d:63:b6:ec:1a:c5:f6:
                    9e:0e:ce:bd:d7:f9:dc:4a:9f:dc:9d:3a:e4:34:ce:
                    37:7a:26:3c:70:b3:28:03:d9:ba:fe:99:4c:76:d2:
                    30:03:36:1a:49:47:8e:8f:54:c4:ae:89:0a:e5:7c:
                    4e:06:e1:16:82:e7:fb:0f:30:ef:08:f0:34:14:0d:
                    9b:f8:c9:87:14:d4:fb:d9:8f:06:70:0e:fd:9b:98:
                    7d:10:e8:2c:32:99:5e:a4:a6:73:91:51:21:e6:9a:
                    36:94:90:7e:90:d1:cf:c8:0d:cd:3a:13:32:11:c5:
                    5f:49:cb:c7:67:45:d1:1b:9f:4a:4d:ec:15:3e:0b:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:42:C0:B2:7A:9D:07:B9:6A:5A:DD:65:5F:20:3D:82:8B:8D:96:E4
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/e0LAsnqdB7lqWt1lXyA9gouNluQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:88:0f:4d:64:73:5a:b9:92:0c:b1:61:15:94:8f:23:9d:a5:
         f6:59:44:37:05:b5:72:a8:40:2b:a7:56:ff:a1:82:2f:5b:16:
         78:12:62:9d:5c:bf:cb:11:60:7e:70:21:f6:15:63:72:fa:62:
         ce:d6:8d:1a:50:4b:ed:c8:cc:14:90:15:95:94:5b:5b:eb:41:
         e8:af:d3:f6:c4:d0:f6:af:45:00:60:f6:91:c2:1a:21:3e:f1:
         fb:f9:25:6a:fd:31:58:f2:79:03:51:d8:90:8a:99:01:7b:4d:
         c8:fa:bb:1e:dd:da:76:59:73:44:32:66:22:f8:94:d4:e5:70:
         8b:23:88:bc:54:2d:57:e6:89:ff:96:ad:19:d2:3a:b1:f6:0f:
         f5:65:73:e1:e3:10:55:28:ee:da:51:1c:15:6a:39:40:7f:d3:
         97:d1:38:81:95:bf:4f:15:ef:9d:c9:94:0c:5f:7d:33:2c:bc:
         3d:57:78:b4:76:86:fa:56:5c:72:11:26:98:33:30:0c:31:67:
         7a:17:18:3a:30:e6:bf:3f:ea:92:1c:92:68:0c:4f:21:eb:de:
         09:46:41:fc:51:51:0f:35:55:82:42:a1:e5:5b:ae:ec:e9:39:
         77:d0:cb:ea:58:bb:03:39:a8:65:88:30:6a:ba:ef:4d:b3:b5:
         a3:f3:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----