Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/li5kRkVhIl0pHrmDbWUeG3Wc4tY.roa
File:                     li5kRkVhIl0pHrmDbWUeG3Wc4tY.roa (raw, json)
Hash identifier:          Up+15mmCWCj1MZuAAelFL13+ea5AUyzpntsGgoEzQWE=
Subject key identifier:   96:2E:64:46:45:61:22:5D:29:1E:B9:83:6D:65:1E:1B:75:9C:E2:D6
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       13
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/li5kRkVhIl0pHrmDbWUeG3Wc4tY.roa
Signing time:             Thu 25 Nov 2021 08:38:18 +0000
ROA not before:           Thu 25 Nov 2021 08:38:18 +0000
ROA not after:            Tue 15 Nov 2022 01:30:01 +0000
asID:                     23805
IP address blocks:        103.42.168.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Nov 25 08:38:18 2021 GMT
            Not After : Nov 15 01:30:01 2022 GMT
        Subject: CN=962E64464561225D291EB9836D651E1B759CE2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3c:47:eb:91:60:aa:94:8b:ea:bf:17:e1:38:
                    39:19:74:2b:b2:53:80:f7:08:be:39:bf:db:21:5d:
                    b2:10:bf:0a:69:90:9d:46:99:60:ac:94:fa:50:94:
                    c8:4d:30:06:c2:2c:63:3c:5f:d9:ff:66:a6:8f:da:
                    ce:59:77:8c:7d:b0:9a:48:cb:70:e4:23:db:42:05:
                    ae:da:e1:20:a9:19:1f:97:86:9a:01:24:e2:93:ad:
                    e4:86:8f:b9:71:8b:b2:8c:92:66:36:d7:f3:25:f4:
                    44:87:e7:eb:74:95:85:79:c3:fe:1e:63:ba:3f:30:
                    1f:df:e0:fa:8c:0c:6d:d2:02:fc:cc:a7:97:ba:4a:
                    47:89:0f:95:ef:e0:42:62:11:f7:e1:0e:ac:0c:c0:
                    17:00:82:57:6f:f7:e5:4f:81:94:e6:fc:55:96:0d:
                    f5:c9:48:d0:45:54:9a:1a:64:a9:21:4e:e8:87:ec:
                    8b:76:cd:50:a3:75:54:c0:f0:09:79:a2:75:88:6f:
                    52:08:8f:fb:e4:a8:6b:f9:72:b8:08:80:d1:0b:5f:
                    13:da:ab:d0:f4:dc:8f:31:62:09:c3:5f:f9:60:c6:
                    f8:c8:5c:6e:8f:fb:24:dc:39:b2:fc:a3:87:f1:19:
                    1d:e6:05:e5:6d:2b:37:11:40:b3:ce:4b:37:0b:8e:
                    82:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2E:64:46:45:61:22:5D:29:1E:B9:83:6D:65:1E:1B:75:9C:E2:D6
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/li5kRkVhIl0pHrmDbWUeG3Wc4tY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:92:f8:e9:ab:d5:34:20:47:3e:1e:57:b2:0f:c3:66:6f:4c:
         98:5d:9b:82:21:50:59:f8:a8:19:cb:d7:91:a7:d2:d6:ee:d5:
         d8:e6:ab:ae:bf:90:73:a3:20:ae:5b:94:6f:9a:83:12:b6:13:
         00:be:68:4e:1a:72:5a:10:1b:f5:eb:0e:43:bb:0d:0c:96:3c:
         5a:39:f8:e0:70:30:c5:10:62:9e:bf:cd:9a:9f:6f:32:aa:ca:
         52:67:f4:a2:3e:ad:9e:f3:9c:85:27:45:51:27:11:05:db:8c:
         dc:0c:a5:35:81:39:0a:d4:2c:5b:ae:7d:da:05:77:3e:c5:ce:
         d6:a4:35:05:fc:7f:b3:81:92:39:c3:ad:a6:78:a1:96:68:fe:
         c3:6c:ba:6f:c1:0c:65:a7:62:6d:e5:5b:a3:5d:11:3d:e5:ba:
         17:cd:93:39:29:6f:92:82:51:00:c6:b3:75:55:53:58:04:d8:
         45:06:16:92:5f:cb:3c:e6:b8:7f:47:ee:91:51:13:19:f5:5c:
         69:9b:f8:ba:f4:0e:9b:8a:4e:48:f5:0b:fd:26:f2:97:f6:6d:
         07:88:85:f1:38:6e:b7:32:79:a2:88:e5:3a:8a:d4:48:ae:79:
         26:ec:5d:b7:e3:3b:8c:12:73:a7:75:42:df:d5:c5:c2:60:30:
         85:c0:4f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----