Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/HQdeUR3DPCUuQJL4HWD-orjhwMI.roa
File:                     HQdeUR3DPCUuQJL4HWD-orjhwMI.roa (raw, json)
Hash identifier:          5JQhq8AXDEkWpRsbVppodaATr8EDEDaPZ7pF/rhQA9o=
Subject key identifier:   1D:07:5E:51:1D:C3:3C:25:2E:40:92:F8:1D:60:FE:A2:B8:E1:C0:C2
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       0D
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/HQdeUR3DPCUuQJL4HWD-orjhwMI.roa
Signing time:             Wed 20 Apr 2022 08:47:25 +0000
ROA not before:           Wed 20 Apr 2022 08:47:25 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        39.2.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 08:47:25 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=1D075E511DC33C252E4092F81D60FEA2B8E1C0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:ae:9c:9f:0b:ed:7c:34:29:96:5d:50:ec:
                    ce:14:c6:f8:a1:02:43:30:89:24:00:3c:a3:45:aa:
                    88:6d:02:04:87:b6:35:3e:bd:34:f8:cf:26:3a:06:
                    33:63:66:4c:39:5f:19:42:47:6c:e3:1d:d9:04:ed:
                    a2:9d:ac:08:41:64:a4:1e:63:94:21:ed:87:3b:dc:
                    be:cb:56:dd:07:39:83:a4:c7:1b:00:00:55:5a:18:
                    f6:52:30:62:8c:9f:95:04:b7:c2:08:f2:0e:5c:b8:
                    6a:aa:b8:ee:4a:e6:a0:6b:5d:9d:d5:08:4f:c0:ae:
                    a1:09:01:ed:c0:ee:78:c6:67:8b:e8:5d:5a:7e:ff:
                    bf:48:3b:46:80:e7:ac:bd:ca:0f:e0:f7:9d:a0:eb:
                    c5:ff:30:ee:77:d8:e7:0f:24:e2:f0:29:17:33:98:
                    a7:35:31:ff:24:a7:b6:86:ed:76:33:9c:07:3c:5a:
                    86:d6:85:25:63:e3:13:75:8e:ef:1f:8a:d8:2c:a6:
                    42:cd:0a:5d:ff:75:c3:2d:5b:45:7d:05:5b:9e:e9:
                    bf:99:77:d7:eb:d4:44:b2:d7:69:0f:c8:4a:a4:90:
                    81:f5:db:da:22:11:ad:9e:5b:b5:56:52:40:47:6f:
                    a4:c4:9a:31:9c:b1:bb:ef:0e:ef:ac:54:7d:7e:fb:
                    48:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:07:5E:51:1D:C3:3C:25:2E:40:92:F8:1D:60:FE:A2:B8:E1:C0:C2
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/HQdeUR3DPCUuQJL4HWD-orjhwMI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.2.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:15:66:c8:b6:85:de:c5:9a:05:25:57:75:a3:3a:67:9c:
         5d:77:bb:7f:6e:c7:fb:84:94:49:3f:8a:39:7e:41:49:29:d7:
         87:37:66:53:4e:f2:d1:bd:0a:74:b8:35:6a:57:06:d9:27:ed:
         4e:f9:85:80:de:97:54:5d:9e:8e:6e:ea:33:90:26:32:c0:39:
         e0:83:1c:66:b3:47:67:e8:57:f2:92:d5:d2:17:8b:9d:76:6f:
         56:fc:8a:96:58:cf:f6:f5:bd:08:85:fa:54:80:22:a0:ba:58:
         9b:32:89:04:bc:79:8b:45:4a:d6:50:70:00:df:5c:9d:33:43:
         21:18:ec:fd:2e:08:18:12:82:e7:13:9d:0c:5f:5e:ee:5c:22:
         fa:f3:33:bc:c7:8a:97:e0:24:16:62:4a:42:bc:5f:38:b9:d2:
         39:dd:ab:81:25:bf:07:dd:be:58:40:8c:86:c9:20:81:07:ef:
         18:d2:4a:3f:f2:43:44:00:6a:c2:87:56:3e:06:04:f6:c1:81:
         31:fa:bc:32:9f:b0:60:aa:f1:55:83:53:19:3e:ce:19:b5:5c:
         44:85:79:15:d8:ff:ba:67:2b:8e:f5:05:a4:f8:f6:37:2a:b3:
         3b:c9:a0:33:14:bc:d0:31:d0:66:1e:ed:dc:8f:43:36:14:86:
         77:0e:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----