Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/BESxCcAAdvrJWFDpgciYzwECnQg.roa
File:                     BESxCcAAdvrJWFDpgciYzwECnQg.roa (raw, json)
Hash identifier:          fEaCOpONkqzKrpDt9Rsl7mKOqpgNF/cxOaE70vn4LYw=
Subject key identifier:   04:44:B1:09:C0:00:76:FA:C9:58:50:E9:81:C8:98:CF:01:02:9D:08
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       67
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/BESxCcAAdvrJWFDpgciYzwECnQg.roa
Signing time:             Wed 01 Dec 2021 05:29:18 +0000
ROA not before:           Wed 01 Dec 2021 05:29:18 +0000
ROA not after:            Tue 15 Nov 2022 01:30:01 +0000
asID:                     10021
IP address blocks:        27.110.60.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 05:29:18 2021 GMT
            Not After : Nov 15 01:30:01 2022 GMT
        Subject: CN=0444B109C00076FAC95850E981C898CF01029D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:64:81:38:a8:03:8a:52:be:66:8e:d2:bd:
                    5f:eb:fd:87:2b:b6:6b:a1:ca:bd:e9:90:a1:3a:5b:
                    56:5d:c6:56:c5:b7:fc:cf:7b:b3:5a:23:b4:a8:c5:
                    51:d9:00:92:ff:7b:bd:a2:48:26:16:14:ca:e6:9c:
                    6f:1b:74:ff:25:6a:64:66:38:de:ad:d4:a7:e5:9c:
                    a9:ca:35:21:8f:47:fa:95:f4:00:2a:a2:d9:04:e0:
                    9a:96:71:3a:13:5e:c2:1b:42:66:86:d1:a3:5e:8d:
                    21:50:26:a8:3c:06:f2:70:a8:68:71:f2:33:82:c9:
                    4b:c7:9b:43:64:bd:ae:c7:2f:6d:12:b3:67:e2:b2:
                    50:32:87:41:3a:60:d7:d6:df:60:2c:bb:76:e3:10:
                    56:16:5b:8d:c6:20:26:51:97:2d:65:06:e2:f4:45:
                    77:ff:15:54:0d:62:57:9f:25:73:6f:d3:af:21:12:
                    3b:a2:ab:6f:23:b9:b6:60:0b:7b:81:25:0a:66:7a:
                    11:8e:f4:0a:e3:bf:0b:9b:8d:6e:c5:a8:72:30:ed:
                    c1:97:4f:9a:89:fe:e4:35:47:77:a0:17:24:f0:ec:
                    b8:3a:a9:80:ee:79:e2:fd:d6:ac:9b:f6:66:b8:07:
                    d3:8d:f0:22:1d:57:28:aa:2d:b6:7a:36:65:0c:63:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:44:B1:09:C0:00:76:FA:C9:58:50:E9:81:C8:98:CF:01:02:9D:08
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/BESxCcAAdvrJWFDpgciYzwECnQg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:9d:c8:69:1c:9d:f4:56:45:39:f6:92:d1:df:76:78:4d:50:
         7f:b1:e1:3a:2c:e4:e3:7e:0e:8d:94:d7:f5:80:ff:42:7c:b5:
         8a:8c:8f:8b:3f:0a:d6:a7:97:ff:b2:05:38:2e:8f:df:1b:e8:
         86:d0:cf:de:55:ea:9e:61:60:39:85:f9:8c:92:13:c5:f2:6b:
         af:be:dc:df:36:3d:b5:c6:26:61:65:7c:c9:2c:2c:6e:9f:65:
         05:3c:ee:27:d4:e1:fa:80:d1:3c:12:ab:95:7a:22:52:33:86:
         41:83:2f:5d:c0:a1:15:ff:21:01:d0:77:ab:95:6a:b7:cc:8d:
         a8:8d:f2:8e:ea:5d:d8:9e:9f:29:76:e1:f8:d4:a5:d1:35:20:
         f0:0c:89:73:5d:03:24:b8:4e:18:45:b5:5a:ad:3d:1a:d5:b0:
         07:33:8a:3a:d5:96:16:3d:f9:5d:b3:aa:0f:ab:fc:f6:84:60:
         63:14:d4:17:a3:aa:89:a4:68:d6:98:e2:b5:c6:59:00:a8:cb:
         a1:58:56:8f:a4:e1:6c:ad:f8:a7:68:fa:d7:fc:29:10:f0:ad:
         0f:23:90:9d:20:43:53:21:b1:fc:bf:5f:a9:ab:75:b2:cd:6f:
         b5:b1:17:2b:f5:ff:b6:f9:fa:35:d2:f1:24:53:51:4e:c2:41:
         f6:86:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----