Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/4s3u66J1IwBU6OTGRHXqHgoszsQ.roa
File:                     4s3u66J1IwBU6OTGRHXqHgoszsQ.roa (raw, json)
Hash identifier:          ZUYy27rR/v7cnxyQ7g5UtrmT6u6JxwowKKxRLFD18fI=
Subject key identifier:   E2:CD:EE:EB:A2:75:23:00:54:E8:E4:C6:44:75:EA:1E:0A:2C:CE:C4
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       18
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/4s3u66J1IwBU6OTGRHXqHgoszsQ.roa
Signing time:             Mon 13 Jun 2022 06:20:47 +0000
ROA not before:           Mon 13 Jun 2022 06:20:47 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     23778
IP address blocks:        210.235.36.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Jun 13 06:20:47 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=E2CDEEEBA275230054E8E4C64475EA1E0A2CCEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:9e:ab:0e:4d:12:f7:ac:35:24:16:89:2c:
                    63:74:70:62:2f:93:8a:2b:b5:90:04:ec:e9:86:28:
                    e1:36:60:7a:f8:2d:25:2f:1c:89:fc:15:4d:bc:95:
                    75:77:84:ed:5d:cc:c8:41:02:ee:b1:78:de:c4:5b:
                    c3:f5:4e:c3:99:5e:9f:da:0c:fa:7f:9b:cd:30:a6:
                    36:b4:8d:14:ca:43:e8:c6:8b:0f:02:69:6d:ed:85:
                    bf:74:b4:3c:62:8c:c1:8e:d6:98:66:ae:8b:6c:60:
                    7a:c1:0c:47:8d:92:c1:f4:ab:de:c0:fb:6e:87:d9:
                    07:1d:60:e8:b3:61:8e:a2:83:7f:b5:d1:4c:8c:48:
                    89:da:84:09:93:39:13:a7:de:98:f5:e6:91:68:2c:
                    a6:f8:1f:6a:2c:f0:e3:c9:75:78:ae:e5:db:af:79:
                    19:76:4d:85:29:25:e6:98:22:f0:c1:c3:aa:43:b6:
                    30:75:f7:f7:3d:66:01:bc:e2:d1:15:a6:0e:45:33:
                    2c:7a:9d:a7:d5:dd:9a:ba:3a:3d:30:fe:51:9f:30:
                    57:94:3c:07:c3:07:f7:0a:bc:8d:54:48:70:60:fc:
                    03:04:15:b6:f6:3d:56:7d:9e:28:d8:8d:14:13:34:
                    ad:e1:47:f7:9d:15:84:0a:5b:0c:5d:56:e9:8e:7f:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CD:EE:EB:A2:75:23:00:54:E8:E4:C6:44:75:EA:1E:0A:2C:CE:C4
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/4s3u66J1IwBU6OTGRHXqHgoszsQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:2c:e8:a1:6c:0f:61:27:30:9c:f5:25:b3:6e:3d:74:01:22:
         a8:37:79:34:bd:70:5a:c6:37:af:42:a2:77:e1:62:a1:64:f2:
         f8:b2:4e:71:ab:b2:99:59:1b:0e:ec:b2:72:15:59:17:90:f0:
         6f:48:fd:1e:5a:ca:93:63:01:a0:67:78:07:a4:99:2f:59:22:
         37:e0:db:79:d9:12:3a:53:2d:4c:4b:82:a4:c3:d2:69:a8:0c:
         67:10:f5:c2:2f:6a:d7:ef:39:8a:f2:d0:24:b9:55:ac:84:ff:
         fa:71:0a:0e:13:8b:dd:f2:ca:66:97:c8:f1:86:e9:e4:6d:83:
         d1:99:74:09:8d:58:e5:28:2c:82:30:31:18:a5:7f:18:6b:ec:
         0e:25:34:8c:4d:fd:e5:f4:10:f6:70:ee:80:9d:5b:8f:ac:39:
         56:d6:a9:61:33:17:b5:0f:45:f8:ae:2d:8a:48:42:b5:b2:7b:
         e9:98:c3:84:1a:34:99:b0:04:39:86:b0:7f:f9:f5:4f:ba:8f:
         41:97:93:9d:86:91:91:2c:7a:de:50:9a:fd:ec:f8:7a:89:41:
         8f:7f:68:30:c5:f4:8e:e9:09:0c:b4:33:b6:76:0d:4e:e5:82:
         f8:03:a1:a2:a8:15:39:67:19:9b:22:0c:25:51:23:bd:02:39:
         3e:a8:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----