Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/b2Qp8ksKFSKA4WNf4Fz9J3Jvk-g.roa
File:                     b2Qp8ksKFSKA4WNf4Fz9J3Jvk-g.roa (raw, json)
Hash identifier:          6M00Eev0CoYhKgtuVBhTfDxTxAgBKmYS+62xQnhLJjY=
Subject key identifier:   6F:64:29:F2:4B:0A:15:22:80:E1:63:5F:E0:5C:FD:27:72:6F:93:E8
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       84
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/b2Qp8ksKFSKA4WNf4Fz9J3Jvk-g.roa
Signing time:             Tue 01 Feb 2022 01:31:01 +0000
ROA not before:           Tue 01 Feb 2022 01:31:01 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     10021
IP address blocks:        114.31.80.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Feb  1 01:31:01 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=6F6429F24B0A152280E1635FE05CFD27726F93E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:20:3e:0a:d7:6c:d0:46:b2:82:ee:ae:94:
                    09:da:8a:d0:94:fc:c7:4c:5e:dd:9c:db:9a:3f:2f:
                    aa:95:32:15:59:74:e9:8f:bc:b5:a3:58:0c:42:24:
                    66:c0:45:ee:54:a8:39:32:cc:24:98:18:36:89:1f:
                    d0:2c:3e:42:81:2a:7d:c1:c9:4a:4f:73:6e:4e:dc:
                    ad:34:32:f3:3c:b1:18:67:95:a3:10:20:cb:77:a9:
                    06:b6:77:10:4b:ee:a3:90:b3:70:ad:b0:14:26:6b:
                    5f:9f:02:0c:84:d1:b0:c4:f0:e3:bb:16:02:e8:3e:
                    0e:da:01:33:9d:6f:23:d3:b7:76:e0:b8:09:f8:7c:
                    ab:e1:d3:e8:d1:75:d1:41:18:77:8c:5b:99:c4:00:
                    b4:ae:8f:61:78:02:12:8c:64:06:80:94:4c:98:b7:
                    ab:04:a6:d2:92:5c:e2:e3:69:0f:ed:71:bb:ec:92:
                    71:f0:07:4d:62:b3:57:25:d1:36:9d:3f:bd:b6:57:
                    8b:52:be:7e:21:4f:fe:75:a8:0e:ba:e2:8e:85:9d:
                    11:e2:38:a4:14:b5:3a:c5:0e:5f:cf:fe:7f:c8:f9:
                    75:17:cc:d2:64:bf:72:79:b4:fb:f2:b5:bf:f7:a3:
                    c9:43:0f:2e:16:05:a6:25:21:5a:c1:73:a5:c6:e0:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:64:29:F2:4B:0A:15:22:80:E1:63:5F:E0:5C:FD:27:72:6F:93:E8
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/b2Qp8ksKFSKA4WNf4Fz9J3Jvk-g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:ed:a6:c9:e7:c0:c2:7b:d3:9a:24:65:99:e6:36:73:9d:65:
         e8:2b:08:bd:7c:3d:0d:5f:8b:ab:ff:61:3a:e5:13:de:3b:c7:
         3d:c2:eb:54:73:a3:36:42:e1:91:ed:36:5b:6c:4d:1d:80:96:
         54:43:ce:24:9c:12:4c:ea:0c:02:75:a3:db:93:2e:59:7b:05:
         9b:f5:47:f1:8a:33:d5:8d:74:44:95:18:f9:26:8f:36:a4:09:
         57:b1:b5:0d:3c:38:0a:fd:4c:30:ed:6a:db:dd:bb:a1:34:bd:
         a7:86:fd:ca:a8:d9:4a:a0:96:12:ae:88:96:4c:e7:21:3f:46:
         59:b4:a6:80:56:57:7a:fb:31:13:b9:9f:9a:e2:d6:e8:ff:5e:
         87:cd:67:de:52:c9:c8:17:41:d5:03:aa:c3:7f:54:e4:97:e6:
         2f:1b:8a:64:50:24:a2:64:94:9f:db:e9:8f:2b:ce:7f:e3:43:
         aa:32:09:44:9c:cd:00:dd:a1:78:e6:8a:f4:36:7e:27:51:3d:
         63:f5:38:9e:62:57:19:b9:92:dc:79:b1:d0:ee:fe:5d:67:80:
         2d:ba:5a:aa:8d:59:a0:33:72:01:b0:be:9a:84:a8:38:cf:9a:
         c0:ad:de:9d:2e:fd:67:75:c2:d7:b1:18:5a:c6:86:f8:69:73:
         3d:8c:fb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----