Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/BssUPljBdUVrRBTalNuVO2Ji3_8.roa
File:                     BssUPljBdUVrRBTalNuVO2Ji3_8.roa (raw, json)
Hash identifier:          qCdV8TlKThjncuONsbZLerc6b4T9uMJ3X5/RV9A+HGU=
Subject key identifier:   06:CB:14:3E:58:C1:75:45:6B:44:14:DA:94:DB:95:3B:62:62:DF:FF
Certificate issuer:       /CN=FB734FF1688B7D1F34A34500C9B39F47116FE104
Certificate serial:       17
Authority key identifier: FB:73:4F:F1:68:8B:7D:1F:34:A3:45:00:C9:B3:9F:47:11:6F:E1:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3NP8WiLfR80o0UAybOfRxFv4QQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/BssUPljBdUVrRBTalNuVO2Ji3_8.roa
Signing time:             Tue 01 Mar 2022 01:28:04 +0000
ROA not before:           Tue 01 Mar 2022 01:28:04 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     10011
IP address blocks:        24.41.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB734FF1688B7D1F34A34500C9B39F47116FE104
        Validity
            Not Before: Mar  1 01:28:04 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=06CB143E58C175456B4414DA94DB953B6262DFFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ba:8a:56:d7:f3:b3:2f:1d:33:02:4f:a7:9d:
                    db:2a:3a:db:f8:19:44:30:3f:08:2c:29:50:0b:3a:
                    ec:8d:58:05:5d:c9:b1:c4:dc:06:6b:f7:a4:4f:56:
                    9d:d3:55:ae:26:32:3f:d9:e0:0b:12:09:a4:91:ce:
                    6f:46:6b:d1:a6:43:16:90:b8:34:f0:f1:f0:73:39:
                    58:c4:04:32:9d:9a:32:b9:dc:fe:d1:1e:83:22:5b:
                    3b:6a:9d:e3:08:15:c0:3f:f7:c6:fd:72:c1:0c:d8:
                    60:49:38:62:23:0e:c6:34:42:11:65:bc:81:85:55:
                    89:fc:21:ed:8f:7f:17:f1:82:f4:49:7f:4f:74:76:
                    54:a7:25:5d:f1:cb:6d:fd:da:b7:18:7d:7d:3b:01:
                    83:63:f1:70:15:8f:61:ed:db:24:bd:6f:73:9a:a8:
                    46:38:a3:01:0e:98:4c:b9:a6:40:42:d6:5a:e6:b1:
                    81:c8:8f:c5:aa:e8:65:41:ab:0e:98:3f:b7:57:0e:
                    83:10:88:67:02:d6:c6:92:87:03:60:71:7d:5b:5d:
                    1b:0f:51:3b:a3:b9:f8:26:ba:5e:03:00:81:8b:df:
                    5b:03:b6:48:32:56:de:74:a5:29:0e:ae:d3:dd:31:
                    9f:94:40:b5:bd:8f:ef:06:db:9b:a0:be:82:61:5b:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:14:3E:58:C1:75:45:6B:44:14:DA:94:DB:95:3B:62:62:DF:FF
            X509v3 Authority Key Identifier:
                keyid:FB:73:4F:F1:68:8B:7D:1F:34:A3:45:00:C9:B3:9F:47:11:6F:E1:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/-3NP8WiLfR80o0UAybOfRxFv4QQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3NP8WiLfR80o0UAybOfRxFv4QQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/BssUPljBdUVrRBTalNuVO2Ji3_8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.41.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:53:c0:e0:9c:bd:0b:e6:3e:20:f8:b7:90:74:42:a5:32:
         0c:c6:ac:59:c3:9c:5d:7b:2b:f7:64:1e:13:ab:fd:a1:d8:7f:
         1b:e0:42:bc:a0:11:a9:29:ff:da:ac:79:6c:3f:c0:24:17:ec:
         e4:45:5c:4d:42:b3:7c:ca:bb:8e:7e:1c:8f:b5:61:bc:54:46:
         74:af:85:62:9a:dd:d7:77:72:7e:07:dc:6f:99:98:2e:ba:d3:
         06:70:b8:96:39:cf:e7:dd:bb:98:e9:87:17:a5:47:e1:84:dd:
         ee:41:ca:d4:08:df:6c:bc:a1:20:5e:a5:c8:b7:1b:d6:02:82:
         bc:3f:0b:f2:50:d1:bb:f7:62:5e:ed:61:e9:cd:36:a8:c4:03:
         4a:5c:8d:a4:48:5f:da:7d:e9:75:aa:4f:a7:87:42:ea:da:2b:
         91:1e:b2:e5:2d:ca:0f:ee:92:e6:41:d1:49:9c:92:81:b7:42:
         93:43:d4:81:47:35:6b:bb:19:ce:3e:05:ec:d6:23:a0:fa:ba:
         a9:58:37:f1:9b:63:1c:95:4d:2e:92:c2:91:20:6b:eb:b2:d3:
         71:69:b7:cb:64:5e:f7:7f:f0:46:eb:5b:30:af:7d:e4:c9:48:
         f1:72:70:35:d6:84:25:b0:b2:5c:b1:01:d8:7c:e2:5e:10:ba:
         a1:a0:94:06
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjcz
NEZGMTY4OEI3RDFGMzRBMzQ1MDBDOUIzOUY0NzExNkZFMTA0MB4XDTIyMDMwMTAx
MjgwNFoXDTIzMDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMDZDQjE0M0U1OEMxNzU0
NTZCNDQxNERBOTREQjk1M0I2MjYyREZGRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOG6ilbX87MvHTMCT6ed2yo62/gZRDA/CCwpUAs67I1YBV3JscTc
Bmv3pE9WndNVriYyP9ngCxIJpJHOb0Zr0aZDFpC4NPDx8HM5WMQEMp2aMrnc/tEe
gyJbO2qd4wgVwD/3xv1ywQzYYEk4YiMOxjRCEWW8gYVVifwh7Y9/F/GC9El/T3R2
VKclXfHLbf3atxh9fTsBg2PxcBWPYe3bJL1vc5qoRjijAQ6YTLmmQELWWuaxgciP
xaroZUGrDpg/t1cOgxCIZwLWxpKHA2BxfVtdGw9RO6O5+Ca6XgMAgYvfWwO2SDJW
3nSlKQ6u090xn5RAtb2P7wbbm6C+gmFbRW8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQGyxQ+WMF1RWtEFNqU25U7YmLf/zAfBgNVHSMEGDAWgBT7c0/xaIt9HzSjRQDJ
s59HEW/hBDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDY1Ly0zTlA4V2lMZlI4MG8wVUF5Yk9mUnhGdjRRUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy0zTlA4V2lMZlI4MG8wVUF5Yk9mUnhG
djRRUS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NjUvQnNzVVBsakJkVVZyUkJUYWxOdVZPMkppM184LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBBgpcDANBgkqhkiG9w0BAQsFAAOCAQEA
pZZTwOCcvQvmPiD4t5B0QqUyDMasWcOcXXsr92QeE6v9odh/G+BCvKARqSn/2qx5
bD/AJBfs5EVcTUKzfMq7jn4cj7VhvFRGdK+FYprd13dyfgfcb5mYLrrTBnC4ljnP
5927mOmHF6VH4YTd7kHK1AjfbLyhIF6lyLcb1gKCvD8L8lDRu/diXu1h6c02qMQD
SlyNpEhf2n3pdapPp4dC6torkR6y5S3KD+6S5kHRSZySgbdCk0PUgUc1a7sZzj4F
7NYjoPq6qVg38ZtjHJVNLpLCkSBr67LTcWm3y2Re93/wRutbMK995MlI8XJwNdaE
JbCyXLEB2HziXhC6oaCUBg==
-----END CERTIFICATE-----