Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/5kD5dAJC3rAVUu51sva5-4tHTUw.roa
File:                     5kD5dAJC3rAVUu51sva5-4tHTUw.roa (raw, json)
Hash identifier:          WjPIUt8yHXEzxAZCOIXOjthA27kbnpHrE6uN1kCJ1+Y=
Subject key identifier:   E6:40:F9:74:02:42:DE:B0:15:52:EE:75:B2:F6:B9:FB:8B:47:4D:4C
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       13
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/5kD5dAJC3rAVUu51sva5-4tHTUw.roa
Signing time:             Wed 20 Apr 2022 09:07:30 +0000
ROA not before:           Wed 20 Apr 2022 09:07:30 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        218.40.192.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:07:30 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=E640F9740242DEB01552EE75B2F6B9FB8B474D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:da:5a:92:cd:c7:5f:10:65:c2:5e:05:0a:
                    59:82:46:44:ea:76:b6:88:cd:86:70:b3:14:a1:63:
                    7d:9c:64:71:96:e1:39:50:a5:0b:a7:ed:af:01:00:
                    31:70:d4:b9:8a:77:45:b6:eb:b7:7d:34:e3:d4:98:
                    ee:07:0c:ad:89:d1:6e:5f:86:f2:99:97:0a:16:b2:
                    48:b5:a1:18:1e:27:76:8e:b7:11:81:39:a7:ce:1a:
                    35:87:a3:bf:9b:3a:65:f2:90:9c:a7:4e:d0:68:7e:
                    b7:b4:1e:e4:ed:5d:3a:d6:67:4b:e8:ae:1f:97:7c:
                    74:46:a2:9d:f1:c7:f1:a3:a6:fa:10:68:3a:04:00:
                    0e:75:fc:7f:5f:6d:23:2b:e3:03:7c:3a:c3:22:07:
                    f4:cf:17:07:eb:ba:fb:dd:f4:a2:b4:d3:9a:74:0c:
                    d8:b5:d5:85:d3:d4:16:00:f1:6a:dd:7c:1f:e3:dc:
                    5a:87:7e:81:e2:50:e0:a6:52:1f:39:39:b4:ee:d9:
                    c6:63:48:74:db:07:32:98:2e:54:d8:9a:a4:48:44:
                    0c:74:31:51:e9:9c:f6:0c:fe:94:9e:9c:3a:9f:da:
                    a5:0b:64:3d:02:00:ea:a9:a2:8e:c7:05:36:03:44:
                    ab:bf:6b:ce:f9:18:8e:88:b4:57:bf:2e:6a:e3:cd:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:40:F9:74:02:42:DE:B0:15:52:EE:75:B2:F6:B9:FB:8B:47:4D:4C
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/5kD5dAJC3rAVUu51sva5-4tHTUw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:fd:5b:47:fe:8e:c2:df:27:14:32:2c:2f:2d:dd:44:df:7e:
         9c:8b:b0:55:77:44:0e:10:2d:79:3e:9d:2e:9e:b6:8e:26:ad:
         61:db:19:30:7c:4e:87:01:67:2b:d1:54:9b:37:5e:e8:dd:5c:
         72:b4:a5:f0:e2:76:7b:84:6c:fc:b6:1a:92:6c:33:77:c0:7e:
         95:36:5c:f4:c6:5f:a7:62:85:d2:a3:54:0b:3e:29:36:7f:f3:
         9b:ee:ec:f1:9d:6b:b0:80:82:ff:d8:30:c9:c8:0c:52:18:61:
         f7:49:b3:33:71:20:14:17:50:fd:9c:28:9c:6f:c2:d1:03:95:
         93:fa:58:b5:96:90:87:bb:e6:26:f0:0c:ae:ac:b8:b6:b9:be:
         21:18:e4:18:4b:03:8e:c7:0d:e0:c1:49:2b:05:d0:5c:7f:38:
         d5:c4:d4:5d:59:ca:d7:c0:c2:8d:67:b8:1f:5c:7e:5c:5f:dd:
         09:52:9d:27:8d:ab:f4:8c:d6:ed:ad:64:06:4b:50:ca:bf:51:
         07:25:31:1f:4c:bd:fe:d5:d5:07:55:af:94:ea:63:e9:58:87:
         86:7f:60:16:d2:04:cb:62:dd:43:49:a3:00:55:a8:5a:0a:53:
         63:63:62:67:54:72:27:da:bd:0a:5b:9b:74:9c:fb:95:ff:5f:
         55:31:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----