Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/-ae3Bu_92EWaqmBC4170zupniQI.roa
File:                     -ae3Bu_92EWaqmBC4170zupniQI.roa (raw, json)
Hash identifier:          OTp+CM98jXMY7iTTQDobnBZ5c4jEJCLG1QFA5f9JF/Y=
Subject key identifier:   F9:A7:B7:06:EF:FD:D8:45:9A:AA:60:42:E3:5E:F4:CE:EA:67:89:02
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       03
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/-ae3Bu_92EWaqmBC4170zupniQI.roa
Signing time:             Wed 20 Apr 2022 04:16:52 +0000
ROA not before:           Wed 20 Apr 2022 04:16:52 +0000
ROA not after:            Thu 20 Apr 2023 03:04:46 +0000
asID:                     23618
IP address blocks:        210.157.80.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Apr 20 04:16:52 2022 GMT
            Not After : Apr 20 03:04:46 2023 GMT
        Subject: CN=F9A7B706EFFDD8459AAA6042E35EF4CEEA678902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:bc:d5:d3:0a:a3:fe:10:b2:83:e6:08:d5:
                    6a:65:80:95:89:63:bb:79:fa:5f:b7:b1:87:4c:00:
                    3d:dd:4f:d7:33:45:d8:ae:67:a3:b0:c8:b2:3a:4b:
                    9d:ea:57:f4:49:a2:6c:db:c2:97:94:f2:27:9b:55:
                    65:fe:62:d7:b4:c1:e2:e4:99:9b:fd:27:f9:d0:eb:
                    8c:6c:cb:4c:ff:75:ef:de:bc:63:cf:20:d2:6a:74:
                    a6:cf:6c:2e:2e:53:86:1c:5b:42:2d:c3:ad:80:13:
                    99:29:57:3c:3b:5c:e6:d4:9d:30:36:11:c6:3e:62:
                    f6:29:4b:d3:06:20:b6:9b:94:d2:db:b0:b9:89:c8:
                    8b:97:46:ca:2f:77:4a:29:ad:ad:93:f1:2c:49:b1:
                    60:7a:bb:bd:c8:50:6a:00:5e:55:e4:c4:b3:f2:3e:
                    ce:40:24:71:2c:dd:06:c5:cd:85:2a:65:e5:a3:66:
                    24:ca:27:7c:4f:d8:0d:1c:36:55:05:fc:38:aa:24:
                    8a:0e:49:98:f2:5e:4b:f1:ec:58:40:6a:83:d7:28:
                    45:11:cf:22:df:da:48:4e:9c:43:a4:e4:bf:43:17:
                    3e:9a:f0:db:8c:08:cd:ec:26:4c:68:f8:56:05:f8:
                    82:51:56:f3:11:45:26:a7:b9:ce:8a:30:f4:68:69:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A7:B7:06:EF:FD:D8:45:9A:AA:60:42:E3:5E:F4:CE:EA:67:89:02
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/-ae3Bu_92EWaqmBC4170zupniQI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.157.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:0c:d1:3e:54:50:21:ae:6a:4c:12:d3:1d:14:73:55:f9:e6:
         06:b6:75:5a:71:87:dd:db:9a:1a:a7:5a:26:7a:cf:f7:c0:ea:
         e5:2d:83:75:33:3c:3b:72:8c:48:4b:01:68:08:ba:f6:2a:3d:
         5f:05:a2:be:ce:88:fe:c7:0e:6b:5a:f0:1f:4d:a1:63:be:9b:
         36:7b:9a:05:89:66:35:95:b0:03:95:e0:c4:56:57:88:23:f3:
         e8:c0:a4:a7:b9:b2:e0:e9:27:3d:44:81:05:c3:10:29:c2:1b:
         7a:86:b3:ed:d3:47:5d:13:75:ad:06:b9:b8:15:5c:fc:ab:d3:
         99:3c:6a:5e:13:7f:0b:fc:32:62:26:92:da:8c:75:78:04:1d:
         ae:17:c2:2d:4d:4b:41:17:c2:e7:fd:bd:9d:93:dc:44:a2:99:
         7d:30:bc:0f:c9:ed:05:7c:d3:3c:07:58:dd:19:0a:c6:11:31:
         43:4c:e1:fb:94:da:81:d3:30:ff:5a:dd:e0:af:dc:26:30:95:
         b7:2b:3f:51:fd:74:1c:49:c3:7b:13:c6:39:e9:1a:da:45:d7:
         c2:6a:62:88:6b:c4:5c:2a:ed:47:af:aa:e9:c0:57:cb:f4:9c:
         02:34:df:71:3a:48:fa:0c:76:10:6c:81:25:69:f0:1e:6b:36:
         20:98:01:ea
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTcw
OEU4NUIxMEFDNjAzQzA2RDc4NUI0MjE1M0RDRkUxNjYzQUVBMB4XDTIyMDQyMDA0
MTY1MloXDTIzMDQyMDAzMDQ0NlowMzExMC8GA1UEAxMoRjlBN0I3MDZFRkZERDg0
NTlBQUE2MDQyRTM1RUY0Q0VFQTY3ODkwMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM2hvNXTCqP+ELKD5gjVamWAlYlju3n6X7exh0wAPd1P1zNF2K5n
o7DIsjpLnepX9EmibNvCl5TyJ5tVZf5i17TB4uSZm/0n+dDrjGzLTP917968Y88g
0mp0ps9sLi5ThhxbQi3DrYATmSlXPDtc5tSdMDYRxj5i9ilL0wYgtpuU0tuwuYnI
i5dGyi93SimtrZPxLEmxYHq7vchQagBeVeTEs/I+zkAkcSzdBsXNhSpl5aNmJMon
fE/YDRw2VQX8OKokig5JmPJeS/HsWEBqg9coRRHPIt/aSE6cQ6Tkv0MXPprw24wI
zewmTGj4VgX4glFW8xFFJqe5zoow9GhpqvkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBT5p7cG7/3YRZqqYELjXvTO6meJAjAfBgNVHSMEGDAWgBRecI6FsQrGA8BteFtC
FT3P4WY66jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODI2L1huQ09oYkVLeGdQQWJYaGJRaFU5ei1GbU91by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1huQ09oYkVLeGdQQWJYaGJRaFU5ei1G
bU91by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84MjYvLWFlM0J1XzkyRVdhcW1CQzQxNzB6dXBuaVFJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNKdUDANBgkqhkiG9w0BAQsFAAOCAQEA
ggzRPlRQIa5qTBLTHRRzVfnmBrZ1WnGH3duaGqdaJnrP98Dq5S2DdTM8O3KMSEsB
aAi69io9XwWivs6I/scOa1rwH02hY76bNnuaBYlmNZWwA5XgxFZXiCPz6MCkp7my
4OknPUSBBcMQKcIbeoaz7dNHXRN1rQa5uBVc/KvTmTxqXhN/C/wyYiaS2ox1eAQd
rhfCLU1LQRfC5/29nZPcRKKZfTC8D8ntBXzTPAdY3RkKxhExQ0zh+5TagdMw/1rd
4K/cJjCVtys/Uf10HEnDexPGOeka2kXXwmpiiGvEXCrtR6+q6cBXy/ScAjTfcTpI
+gx2EGyBJWnwHms2IJgB6g==
-----END CERTIFICATE-----