Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/Zu4sikLDjfQxt3UQSyDg904ikCg.roa
File:                     Zu4sikLDjfQxt3UQSyDg904ikCg.roa (raw, json)
Hash identifier:          aHISTrOL7d9j0uW7nQTKmlw8ftPqUCNQpljJKmzm84A=
Subject key identifier:   66:EE:2C:8A:42:C3:8D:F4:31:B7:75:10:4B:20:E0:F7:4E:22:90:28
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       12
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/Zu4sikLDjfQxt3UQSyDg904ikCg.roa
Signing time:             Thu 25 Nov 2021 08:38:18 +0000
ROA not before:           Thu 25 Nov 2021 08:38:18 +0000
ROA not after:            Tue 15 Nov 2022 01:30:01 +0000
asID:                     23805
IP address blocks:        219.100.80.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Nov 25 08:38:18 2021 GMT
            Not After : Nov 15 01:30:01 2022 GMT
        Subject: CN=66EE2C8A42C38DF431B775104B20E0F74E229028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:c1:eb:2c:bd:43:06:8e:f1:8c:3b:0b:46:
                    08:7a:11:ab:01:b1:86:b1:b6:59:f4:21:6f:a8:54:
                    4e:d8:7f:3d:3d:2c:9a:b3:0f:b1:97:ac:63:fa:e0:
                    ef:ea:59:45:a3:1f:7f:35:6c:f4:84:f6:df:a6:b9:
                    ad:3d:87:d6:ea:d0:55:00:70:16:9d:c9:5e:15:66:
                    dc:f8:71:28:b8:84:47:82:e6:c3:7e:bb:c8:aa:c1:
                    07:01:bf:93:41:b6:9f:d6:d8:ad:0d:ed:97:a2:d7:
                    d9:42:7c:d0:c3:25:ad:f2:da:d0:bc:9a:bb:8c:48:
                    43:3f:9b:52:5e:70:86:80:cc:93:9e:af:7a:6d:45:
                    76:96:a4:60:2a:ad:74:39:bf:59:88:d3:2a:63:c4:
                    4e:d0:a8:a4:2e:20:d9:01:0a:d4:e4:d1:e8:76:1d:
                    28:7a:61:09:36:47:0b:85:b2:c7:25:de:79:b2:60:
                    9c:a5:6a:51:6d:90:e3:d1:ad:7a:c2:93:c2:3f:11:
                    0f:11:a4:04:cc:16:16:98:f2:7c:31:8f:a3:88:f6:
                    93:70:05:ea:97:54:cd:ef:b7:26:34:4a:89:a6:dd:
                    de:2f:58:67:3c:51:39:01:dd:97:37:48:8a:f7:2a:
                    b1:15:22:75:46:f6:2e:d2:3b:cd:1c:f4:53:39:19:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EE:2C:8A:42:C3:8D:F4:31:B7:75:10:4B:20:E0:F7:4E:22:90:28
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/Zu4sikLDjfQxt3UQSyDg904ikCg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:59:02:ed:3c:89:bc:af:5a:d2:95:d6:36:dc:89:41:6f:48:
         9a:f5:c5:ec:30:46:1e:cd:b1:68:2a:be:dc:98:75:7d:a1:f5:
         a5:d7:8a:87:f6:4f:f7:84:96:3b:b6:32:f2:45:45:84:f7:c4:
         f5:33:28:d9:bc:42:c2:c6:61:e5:d7:0f:a3:4a:77:85:b6:94:
         fe:99:03:e4:4c:78:4a:e3:e7:9f:ac:dd:2c:fe:c3:e6:92:3d:
         df:7e:bf:c0:43:8b:17:d9:a5:c4:a8:2b:83:0b:1e:aa:f6:66:
         4b:9a:09:81:99:0d:47:0a:2c:82:a2:b2:ab:af:36:f6:b4:5b:
         60:3d:19:8e:25:aa:27:58:9c:e0:95:3b:9f:da:a4:47:6b:64:
         88:12:0f:1f:10:a7:75:7e:66:22:65:af:91:bb:b3:3d:7e:e9:
         55:ed:c6:b1:f5:3f:3d:09:e5:3e:5e:74:24:1c:99:93:26:8b:
         5f:40:d3:18:0d:67:1d:c1:bc:b3:03:dd:bf:26:20:f7:e9:79:
         02:44:fa:f1:9e:e1:0c:08:5b:58:07:fb:88:13:f5:ab:7a:f3:
         37:b4:47:d6:f4:22:aa:8f:d5:dc:e1:75:81:d9:f1:d3:72:03:
         2a:14:c1:2e:51:29:eb:b8:c9:af:dc:b6:06:a5:30:0b:ce:05:
         80:23:71:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----