Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/eHODHe0nL052pAgLsK91M_EKzIk.roa
File:                     eHODHe0nL052pAgLsK91M_EKzIk.roa (raw, json)
Hash identifier:          K2AskqIEQLk2CAfjnsJ+iTsyN33Yx4rM35JWnyRkEEU=
Subject key identifier:   78:73:83:1D:ED:27:2F:4E:76:A4:08:0B:B0:AF:75:33:F1:0A:CC:89
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       05
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/eHODHe0nL052pAgLsK91M_EKzIk.roa
Signing time:             Mon 13 Jun 2022 06:28:58 +0000
ROA not before:           Mon 13 Jun 2022 06:28:58 +0000
ROA not after:            Tue 13 Jun 2023 06:06:17 +0000
asID:                     17958
IP address blocks:        219.103.48.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Jun 13 06:28:58 2022 GMT
            Not After : Jun 13 06:06:17 2023 GMT
        Subject: CN=7873831DED272F4E76A4080BB0AF7533F10ACC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:3e:8e:00:3f:d0:a0:76:58:33:69:4a:cc:
                    c5:74:99:f6:2f:23:00:52:57:57:94:d3:7c:66:6a:
                    09:a4:fa:2c:e6:a5:28:3d:f5:14:ee:0e:58:e1:4e:
                    85:cd:2e:5a:9b:90:f4:df:fa:8f:d2:cd:5d:0c:a7:
                    c8:2b:01:70:60:d2:b9:53:ce:14:ac:57:90:ec:77:
                    22:e0:d4:a6:ca:86:40:6a:c1:3d:4a:d2:93:b6:d7:
                    18:13:62:0b:70:39:15:d4:3c:67:7e:0f:11:07:d5:
                    1f:cd:b7:3f:43:e0:1b:2c:bc:64:a5:c3:a3:c5:a1:
                    86:89:62:8a:ea:b9:c2:73:99:84:b9:61:06:2c:3f:
                    01:20:4e:ab:82:6e:52:59:c5:de:02:ed:09:9f:9d:
                    20:80:13:d5:c9:e6:c2:37:89:02:bc:77:2a:bd:bf:
                    de:0e:af:00:d5:0f:0e:b2:d2:d6:fd:ba:fb:5e:81:
                    c4:de:6e:70:ef:8e:b6:1b:ce:ce:19:e1:fc:0f:23:
                    7a:20:c6:51:9e:28:47:51:1e:4c:ad:20:6e:28:dd:
                    2b:dd:bd:5f:86:52:2b:28:66:a8:7c:62:c1:eb:9b:
                    91:93:0b:c5:fe:6f:9d:39:ae:c0:b8:5f:c8:8b:f4:
                    22:32:9e:c2:18:8a:bf:c1:60:37:b6:98:74:3b:1f:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:73:83:1D:ED:27:2F:4E:76:A4:08:0B:B0:AF:75:33:F1:0A:CC:89
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/eHODHe0nL052pAgLsK91M_EKzIk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.103.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:2d:ab:ec:8d:4e:12:37:a0:ea:ed:a7:02:fe:4c:21:1a:82:
         0a:7c:0a:ed:27:0f:1e:29:f7:d0:c2:51:22:0f:a5:68:64:3b:
         be:ee:ad:08:fe:6b:cf:80:29:bc:5c:f8:f7:50:2b:89:b4:f4:
         1b:11:53:52:45:65:9a:53:ba:91:26:c1:c5:22:69:73:89:32:
         34:73:e3:ba:7d:9f:d7:46:f8:f4:f3:ce:3d:40:d4:d3:58:59:
         43:6e:8b:e6:ec:b6:1d:9d:82:34:d6:3d:67:ad:f9:0c:5c:89:
         81:2a:0f:22:30:fe:d8:87:0d:8b:fe:b7:83:5e:74:dc:a2:64:
         7b:b2:0d:e2:dc:90:fb:e4:29:83:03:58:b2:15:6f:fd:5a:3b:
         df:16:1e:54:36:11:e3:6f:1e:d4:ee:db:49:db:91:6f:95:96:
         77:3d:7c:1e:b6:5b:ff:81:ed:57:af:5f:a6:7f:7c:94:49:b6:
         40:c4:e6:6c:dc:58:a7:b6:7d:85:da:c9:f1:7e:25:16:8e:ba:
         50:65:33:44:23:13:2d:5e:6c:cc:6b:d9:d9:d1:f7:6a:b5:2b:
         c9:e2:8b:d4:6f:df:11:0b:26:97:87:ae:81:6d:f0:30:b4:48:
         b9:5e:04:1f:89:57:a3:4f:e6:13:a4:82:2a:60:a5:a7:a3:06:
         81:9b:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----