Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/_f99zU9QS6o6bbzfnqJckAiNBls.roa
File:                     _f99zU9QS6o6bbzfnqJckAiNBls.roa (raw, json)
Hash identifier:          glYQ0apgJPut2tVIohdZE/qBgUzg0DqPavRWvFbwWOM=
Subject key identifier:   FD:FF:7D:CD:4F:50:4B:AA:3A:6D:BC:DF:9E:A2:5C:90:08:8D:06:5B
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       7F
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/_f99zU9QS6o6bbzfnqJckAiNBls.roa
Signing time:             Tue 01 Feb 2022 01:30:59 +0000
ROA not before:           Tue 01 Feb 2022 01:30:59 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     10021
IP address blocks:        27.110.32.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Feb  1 01:30:59 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=FDFF7DCD4F504BAA3A6DBCDF9EA25C90088D065B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ac:81:f2:a4:94:3c:e1:2d:8d:84:f9:72:3b:
                    06:2a:18:a8:b1:41:39:a1:09:f6:1b:da:0c:dc:26:
                    0c:1d:bf:e1:79:33:77:23:2a:9c:2d:d5:77:04:cf:
                    c8:e9:ee:91:ca:9d:0e:f9:72:94:e0:ff:a1:17:e1:
                    6f:96:8b:27:68:3e:6d:58:ec:bb:04:de:55:73:87:
                    13:5e:e7:fd:71:25:a1:9a:81:e9:f8:0b:18:eb:c8:
                    f8:28:32:e4:00:29:97:d4:97:e9:3b:d5:3e:06:e6:
                    44:b2:7b:eb:0d:8c:a6:ca:b2:c4:da:33:d1:7e:a2:
                    15:8a:a9:26:42:85:4e:77:8b:f8:8b:a9:33:ce:9c:
                    19:78:6f:c2:56:4e:ed:67:06:b1:e3:83:e5:b4:1d:
                    76:6b:28:0d:40:4d:48:11:e3:2b:8e:78:5e:8b:c3:
                    c3:ee:e9:c7:b4:85:f2:e0:a2:01:39:e0:bc:c0:a7:
                    0f:ec:2a:24:5b:6e:a3:1c:50:eb:34:29:42:dd:9f:
                    92:f1:9a:80:2a:84:2f:de:31:04:24:6a:14:50:c3:
                    a4:c5:f6:41:30:d1:0c:da:3d:ba:f6:c7:27:05:73:
                    73:d9:22:04:09:2d:5e:09:d3:15:ae:77:d2:ac:92:
                    3f:1c:44:15:a9:a9:87:db:45:97:e3:df:6a:f2:c3:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FF:7D:CD:4F:50:4B:AA:3A:6D:BC:DF:9E:A2:5C:90:08:8D:06:5B
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/_f99zU9QS6o6bbzfnqJckAiNBls.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:66:01:66:1f:f8:f8:39:84:65:cf:f4:b5:c1:70:41:60:ef:
         3d:12:1b:96:12:9a:ef:80:ed:12:43:e1:32:47:2f:3e:a1:47:
         0e:c9:1e:4f:7f:1c:71:f3:68:63:44:06:a2:b6:ac:7c:90:ba:
         3a:0b:22:69:e9:f4:d8:55:7b:e6:da:96:c6:7b:f9:f1:e2:77:
         67:16:d2:09:5c:73:d2:a6:a7:b4:d1:10:79:ee:e4:3b:04:40:
         f2:37:d9:e0:0f:5b:e1:b7:c3:35:e0:0d:81:10:b0:b5:e9:96:
         8c:6b:c7:c2:6d:eb:2e:65:df:3e:99:0d:92:da:8f:ad:32:98:
         d1:a7:2d:63:c8:2c:79:41:e3:14:f5:cb:7e:37:b3:e4:2b:6e:
         73:0c:ba:de:ef:a0:cd:ec:78:49:6d:30:a4:fa:86:94:1d:79:
         9a:95:d5:88:ce:26:5a:45:9a:4d:54:3e:81:8c:d4:53:66:8a:
         a4:dc:91:f8:a6:48:5d:5f:03:68:c8:b4:d4:b4:88:d2:61:1d:
         0d:bc:2c:55:f0:f3:24:83:9f:4d:a3:ef:89:17:d7:3d:09:56:
         ee:a1:61:80:c7:26:a7:4f:22:c8:ef:fd:28:c0:f8:22:51:b1:
         ef:e7:55:65:c1:27:7f:c0:96:17:a6:ec:76:a0:be:56:64:37:
         23:65:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----