Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5515/eaiwuBeEgx8yKRjYZZz6cc1IPrQ.roa
File:                     eaiwuBeEgx8yKRjYZZz6cc1IPrQ.roa (raw, json)
Hash identifier:          A9PuZPgVYbANCCN7dUpexKIOtqQQOJEPUx09uVeZPQM=
Subject key identifier:   79:A8:B0:B8:17:84:83:1F:32:29:18:D8:65:9C:FA:71:CD:48:3E:B4
Certificate issuer:       /CN=522EDDC4FC26DE2699771BB10731C8B0BC9C1790
Certificate serial:       02
Authority key identifier: 52:2E:DD:C4:FC:26:DE:26:99:77:1B:B1:07:31:C8:B0:BC:9C:17:90
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/eaiwuBeEgx8yKRjYZZz6cc1IPrQ.roa
Signing time:             Mon 20 Jun 2022 00:48:18 +0000
ROA not before:           Mon 20 Jun 2022 00:48:18 +0000
ROA not after:            Tue 20 Jun 2023 00:44:14 +0000
asID:                     131948
IP address blocks:        103.177.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522EDDC4FC26DE2699771BB10731C8B0BC9C1790
        Validity
            Not Before: Jun 20 00:48:18 2022 GMT
            Not After : Jun 20 00:44:14 2023 GMT
        Subject: CN=79A8B0B81784831F322918D8659CFA71CD483EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:2a:1c:50:94:73:71:1d:ad:e3:f9:e7:50:
                    96:72:f5:44:22:57:ea:f9:62:13:88:57:9c:02:f7:
                    5d:1e:7f:b1:05:41:a5:71:cb:ca:47:13:05:d5:27:
                    43:6d:3a:31:7c:bb:16:25:c0:44:bd:43:58:ac:24:
                    a3:d7:46:4b:5e:c2:77:5b:aa:9c:1e:d2:cf:b0:66:
                    c2:e8:46:b1:80:c1:5d:3d:d7:21:19:bc:91:5b:36:
                    bb:fa:b5:a3:3e:7c:fb:73:89:99:71:b3:bc:bf:92:
                    e3:ef:11:1d:e7:9e:67:8c:ef:e6:1a:8e:71:8a:3e:
                    b3:c5:de:9e:4c:1d:6a:e0:ed:7c:90:fd:37:c0:73:
                    07:a3:19:0f:98:04:3b:f1:08:9d:eb:66:a2:97:ba:
                    3c:62:27:09:31:92:14:7b:55:4f:8c:e4:55:98:40:
                    7f:a2:b8:e4:be:63:95:37:bd:44:76:03:41:34:97:
                    56:fc:cb:9a:6e:0f:e2:16:ea:99:28:30:97:95:bd:
                    ab:1f:d7:59:fb:a1:3d:4b:39:40:f2:96:1f:4c:ba:
                    a9:8c:d3:83:60:cd:42:e8:5f:44:1c:b5:de:f0:cf:
                    e9:96:f0:79:7f:55:8a:17:f5:94:06:ea:b5:93:c9:
                    1d:b0:3c:2d:c9:50:38:f2:14:ed:ef:48:51:80:eb:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A8:B0:B8:17:84:83:1F:32:29:18:D8:65:9C:FA:71:CD:48:3E:B4
            X509v3 Authority Key Identifier:
                keyid:52:2E:DD:C4:FC:26:DE:26:99:77:1B:B1:07:31:C8:B0:BC:9C:17:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/eaiwuBeEgx8yKRjYZZz6cc1IPrQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:0e:49:ea:e2:1f:60:b4:9a:4e:01:49:01:b2:b2:89:43:96:
         63:06:4f:f0:36:d8:0f:84:ff:e9:ca:e5:72:44:a6:59:1c:77:
         b3:e1:6a:7e:13:31:6c:34:ad:c2:de:fd:39:2c:4d:4f:42:f0:
         dd:a8:40:f6:d0:db:30:19:a1:35:e0:c9:b0:0b:83:71:5f:fd:
         d5:5d:1c:a7:ec:28:54:fe:86:31:54:b1:74:47:6c:08:7d:f8:
         cf:08:59:bd:f8:bd:17:1f:2e:7d:72:51:d0:f0:c1:ae:ea:a7:
         3a:22:b4:dd:f5:ec:49:90:e8:9d:65:56:7b:32:4e:96:35:49:
         a2:f1:9b:10:26:09:6e:4f:7e:d3:35:f9:29:4c:73:25:66:43:
         94:d3:79:51:1f:8b:75:01:6a:ce:f0:25:f9:8f:9c:30:08:c5:
         7f:3d:b1:4e:4c:61:3f:57:1b:8d:5c:fc:87:cf:c9:96:d7:58:
         46:45:3f:5b:38:e8:c6:e5:64:9c:ba:7e:4e:04:ea:e8:46:ea:
         3e:e0:f1:18:26:9e:74:25:66:f1:9b:6d:8b:44:c7:5a:83:6f:
         9b:6d:d2:42:e8:9d:85:1e:c5:42:db:d2:51:b6:0e:f1:b4:4b:
         a1:ec:5b:6e:f8:cb:50:7c:c6:92:cc:a6:d5:93:39:bc:66:43:
         0d:be:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----