Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/YfQhdFNlgCwbckcXsvvfiFyyjew.roa
File:                     YfQhdFNlgCwbckcXsvvfiFyyjew.roa (raw, json)
Hash identifier:          +UaIqzkB26mTJnEMXQWMIcJEgASoVVbBmRB8ufQ/kaQ=
Subject key identifier:   61:F4:21:74:53:65:80:2C:1B:72:47:17:B2:FB:DF:88:5C:B2:8D:EC
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       81
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/YfQhdFNlgCwbckcXsvvfiFyyjew.roa
Signing time:             Tue 01 Feb 2022 01:30:59 +0000
ROA not before:           Tue 01 Feb 2022 01:30:59 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     10021
IP address blocks:        61.120.200.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Feb  1 01:30:59 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=61F421745365802C1B724717B2FBDF885CB28DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:46:85:43:23:66:57:b6:7a:87:f5:fd:7e:
                    c8:e2:cb:56:f8:48:50:8e:5f:b3:ea:8b:5e:f2:fe:
                    78:c1:57:9d:07:d5:28:c0:d7:eb:44:f4:e7:06:42:
                    71:75:ad:36:01:78:9d:36:5e:5d:b0:27:a1:d3:e2:
                    4e:e0:fa:f7:e0:a3:95:a9:15:66:06:a3:89:f1:e8:
                    f1:c3:16:ff:5f:ee:b9:47:a2:63:7e:46:7c:f7:06:
                    1a:a9:92:71:5a:58:02:88:6c:f0:96:05:5b:60:3e:
                    4d:6a:04:6e:45:d5:3b:b8:8a:c8:0f:6d:5b:38:bc:
                    63:c9:13:c8:01:b7:74:46:63:07:e2:a2:91:98:5e:
                    bc:c5:74:0d:02:a6:2a:de:bc:6d:81:6a:b1:82:73:
                    e4:ff:1e:9c:88:28:57:f8:d5:74:87:ae:8b:7e:3e:
                    4f:17:9b:6e:e2:05:0b:a2:15:84:d9:f4:8b:ff:e1:
                    c8:51:86:50:0d:2d:6e:92:19:90:07:50:0c:e7:d6:
                    b8:25:30:3a:62:c7:67:5c:a0:a2:b8:3f:e8:f7:06:
                    89:72:3c:f4:04:d1:7f:b4:95:ae:ce:f7:ab:20:fd:
                    11:22:c8:8a:2c:16:18:25:ee:7a:8a:1d:01:a8:e5:
                    11:47:13:2f:8d:74:b5:7d:9a:a9:b3:f9:e7:92:10:
                    d3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F4:21:74:53:65:80:2C:1B:72:47:17:B2:FB:DF:88:5C:B2:8D:EC
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/YfQhdFNlgCwbckcXsvvfiFyyjew.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:01:97:aa:cc:a0:dd:63:fd:8b:cc:e7:e6:ff:76:15:c3:d2:
         1e:49:ce:fb:c6:6b:fc:16:c2:f1:76:e5:7e:ca:05:27:fc:ca:
         8c:f4:46:07:95:58:bb:9a:01:85:3d:87:82:f4:92:39:cd:64:
         a3:37:f0:ed:d3:0b:fb:b3:ad:fa:05:c9:6e:57:6f:54:1c:0d:
         c5:e4:7c:b8:03:46:e6:b4:4c:b7:6f:f9:62:75:42:0d:da:fe:
         a0:c0:e0:be:5c:00:ee:a2:82:46:c4:82:6f:b3:cf:0f:6c:ae:
         d2:b1:dc:5e:94:d8:ab:c2:15:a5:18:5c:9a:73:17:57:40:20:
         63:47:93:1e:7f:3e:c8:00:7e:71:fb:2c:83:45:7f:b6:b3:48:
         97:94:97:a8:a7:63:66:75:42:69:a3:9d:f9:db:c7:b3:16:b8:
         d2:50:06:e6:58:6b:0a:bf:1c:ce:1d:af:68:c0:b7:2a:83:de:
         1b:08:f3:50:12:42:96:5a:0c:01:52:1b:7d:f1:a2:49:ff:52:
         21:6d:47:58:ce:82:f9:6a:90:74:8f:38:fc:3a:bb:4f:f9:bb:
         0d:90:75:8e:17:b9:fc:49:29:26:b0:cc:23:a8:34:c7:cb:0a:
         37:2e:6c:a9:92:05:70:21:6a:1a:11:4c:35:29:62:49:f5:2b:
         f7:9b:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----