Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/BWZ2EkYh0SN94l3B0q8dEOTb8vM.roa
File:                     BWZ2EkYh0SN94l3B0q8dEOTb8vM.roa (raw, json)
Hash identifier:          xZMgK+3xW7C1FNkP917x03IQKHe1iipK3J7Qu2YBGew=
Subject key identifier:   05:66:76:12:46:21:D1:23:7D:E2:5D:C1:D2:AF:1D:10:E4:DB:F2:F3
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       23
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/BWZ2EkYh0SN94l3B0q8dEOTb8vM.roa
Signing time:             Tue 01 Mar 2022 01:28:04 +0000
ROA not before:           Tue 01 Mar 2022 01:28:04 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     10011
IP address blocks:        219.106.176.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Mar  1 01:28:04 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=056676124621D1237DE25DC1D2AF1D10E4DBF2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:bb:44:ac:26:ab:08:5f:f8:08:1f:0d:1c:
                    3e:30:cd:ee:a0:c1:04:2d:e8:d4:e1:a8:6a:1b:9c:
                    e6:db:bc:62:8b:8f:f9:c2:c0:ed:25:48:19:70:8c:
                    70:e5:48:31:a4:1c:ed:a8:36:7a:65:ab:40:26:9b:
                    a1:c6:4f:5e:51:e0:df:6c:52:dc:2c:f7:85:a0:1d:
                    7f:bc:dd:bd:26:25:57:40:da:39:45:1f:69:cb:1a:
                    2c:40:1d:36:74:7b:db:fd:98:2f:40:35:dd:d4:77:
                    f3:ce:2c:1b:f0:32:ec:9a:09:0c:11:e6:75:c4:8c:
                    2b:16:79:ea:f2:ec:46:22:a5:41:cc:32:d3:c3:5f:
                    e9:99:0e:76:5e:1c:c1:f0:fc:2b:8b:93:14:8d:62:
                    f9:7a:a5:5c:bb:6e:a3:68:00:82:62:e1:ab:7a:a3:
                    ed:13:55:c7:31:10:ae:ff:73:1f:73:f3:a7:97:63:
                    c7:b4:5f:62:00:74:12:fc:80:ac:11:fd:f8:af:03:
                    2b:7c:43:c2:d9:6b:56:e6:31:af:c4:fb:01:17:53:
                    4f:ee:5f:f1:e3:a8:7a:a1:1f:6e:e1:d5:2d:61:aa:
                    6c:03:9a:c7:28:f2:79:df:8d:96:8b:7a:e3:bf:13:
                    ad:2b:50:2a:25:de:2c:75:46:96:dc:90:f0:1b:89:
                    b3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:66:76:12:46:21:D1:23:7D:E2:5D:C1:D2:AF:1D:10:E4:DB:F2:F3
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/BWZ2EkYh0SN94l3B0q8dEOTb8vM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.106.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:f7:16:8c:68:b9:5d:7d:c9:98:94:01:28:a9:11:97:a4:38:
         3e:81:50:2d:29:c8:66:a0:d0:c6:21:17:b1:06:e6:05:40:c1:
         4d:59:8d:83:45:bf:ca:90:62:c8:f9:b2:a8:e8:7c:06:3f:72:
         33:96:e7:ad:dc:a6:08:94:4c:a0:2c:8b:bd:f2:93:ca:c3:8a:
         b3:06:a0:66:93:fd:b8:87:9b:80:8c:7c:5a:45:df:71:ee:55:
         16:b3:11:aa:c7:e5:11:15:b2:d7:65:fe:72:0f:cc:61:e3:52:
         3d:8d:e5:1e:45:02:9d:ca:eb:ee:f2:0b:6b:de:00:a1:25:cd:
         31:f6:ba:39:a8:76:ef:51:1a:df:a4:07:49:31:1d:aa:26:3f:
         bb:0c:0b:83:5c:98:49:09:3f:4d:2f:fa:3c:64:0c:2f:79:ba:
         66:30:10:98:4f:97:d4:e8:5f:ad:e5:32:6c:7b:ac:ce:2d:36:
         56:57:5d:a6:72:8d:82:ae:2f:b4:4b:05:30:b3:f2:df:f1:95:
         5c:5e:c8:36:b6:92:08:54:d2:92:8b:36:4d:e8:77:7a:42:11:
         ec:fb:bc:a1:78:3f:65:37:f5:a0:15:ed:5f:32:59:88:f2:99:
         4b:2d:04:62:d7:6f:d3:96:0b:9b:4c:c9:54:bf:e4:50:2c:77:
         89:bc:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----