Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/KBCMsr-E2a5gGqjw5bOy7ar3NY0.roa
File:                     KBCMsr-E2a5gGqjw5bOy7ar3NY0.roa (raw, json)
Hash identifier:          Vl2bFiVq3+OCtysGVefgT9pSBkJHlD4Wzg3OLsVlBAU=
Subject key identifier:   28:10:8C:B2:BF:84:D9:AE:60:1A:A8:F0:E5:B3:B2:ED:AA:F7:35:8D
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       51
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/KBCMsr-E2a5gGqjw5bOy7ar3NY0.roa
Signing time:             Wed 20 Apr 2022 09:42:28 +0000
ROA not before:           Wed 20 Apr 2022 09:42:28 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.174.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:42:28 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=28108CB2BF84D9AE601AA8F0E5B3B2EDAAF7358D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:df:31:9a:10:24:14:60:0d:1b:a6:74:c5:
                    cd:20:fb:d4:cb:50:b4:d0:08:1e:70:c8:c7:8b:40:
                    c7:20:6f:71:fe:f4:bf:d0:8b:47:f1:b6:5a:a3:0a:
                    8c:af:96:b3:67:b1:cb:0e:12:c0:3a:22:b1:4c:58:
                    6a:5a:17:c6:cc:c3:49:2f:43:c6:ba:18:0b:4e:02:
                    fd:42:b4:4f:49:2b:ac:37:23:6b:d9:35:bf:9e:30:
                    47:61:84:8d:44:98:4c:73:8f:92:27:65:75:53:2d:
                    25:37:ec:47:97:0f:ee:a8:65:fb:12:93:7d:3c:cf:
                    f6:f1:6f:bc:69:fc:51:4e:b6:68:d3:3d:46:1d:7f:
                    dc:3d:6f:9b:4c:a9:01:55:67:4e:45:97:39:94:c0:
                    40:d5:7b:88:13:0f:1d:e9:3f:55:03:46:35:f5:ed:
                    9a:63:f3:05:4f:7e:b7:d1:75:16:1c:68:31:5a:1a:
                    31:91:7d:81:72:da:7a:cf:e6:d7:3f:4b:11:36:be:
                    b6:28:9f:a1:43:d6:6b:e8:16:63:ed:a9:b8:05:6a:
                    a6:f0:63:ab:5a:a6:09:0e:58:78:ab:2a:f8:49:2f:
                    9f:fe:55:c6:a4:66:56:4d:23:ea:3c:be:3d:9b:ca:
                    17:a7:59:f7:48:fa:a6:3a:f3:40:12:3b:90:d6:84:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:10:8C:B2:BF:84:D9:AE:60:1A:A8:F0:E5:B3:B2:ED:AA:F7:35:8D
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/KBCMsr-E2a5gGqjw5bOy7ar3NY0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7d:2b:6b:4a:8e:1e:e1:f9:5e:a3:c9:fa:2b:31:5d:99:72:14:
         10:db:64:42:8b:2e:2c:8b:7a:72:3b:ef:d2:c8:06:9b:2c:48:
         dc:ff:f0:23:c2:31:2d:a6:93:a3:1a:ad:93:85:3c:7d:b4:d6:
         7c:3b:45:b2:45:56:23:0f:dc:00:b7:3f:b3:99:a1:a5:db:fd:
         ba:ab:00:57:38:83:eb:22:0a:5d:1a:c9:ad:25:6c:6f:1b:83:
         e7:a1:67:dd:44:35:33:30:43:65:62:25:da:c1:22:21:af:11:
         ee:70:8b:a2:8e:47:44:81:10:e3:85:4c:5f:3f:a2:6d:0f:ff:
         2e:6a:1d:f0:6c:50:90:42:a3:52:f9:a6:48:35:fd:52:08:d3:
         8d:04:70:3c:2b:6a:52:88:bb:26:01:51:50:38:c8:7c:d9:6a:
         43:94:81:61:f1:22:be:cc:3e:64:09:1b:27:f1:01:5e:60:63:
         c3:d4:b1:b1:1c:5b:93:4b:87:37:95:97:21:87:fe:62:7b:62:
         e2:65:43:8e:71:55:3a:f3:c8:75:53:2f:e8:48:79:54:d3:a5:
         01:a4:2a:cb:17:82:6d:10:02:94:45:68:b1:d2:e4:f9:b9:81:
         3c:d9:54:0b:04:36:82:61:0e:cd:71:0d:6d:3e:3a:be:f0:85:
         8a:1a:07:21
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
NDIyOFoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMjgxMDhDQjJCRjg0RDlB
RTYwMUFBOEYwRTVCM0IyRURBQUY3MzU4RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALRk3zGaECQUYA0bpnTFzSD71MtQtNAIHnDIx4tAxyBvcf70v9CL
R/G2WqMKjK+Ws2exyw4SwDoisUxYaloXxszDSS9DxroYC04C/UK0T0krrDcja9k1
v54wR2GEjUSYTHOPkidldVMtJTfsR5cP7qhl+xKTfTzP9vFvvGn8UU62aNM9Rh1/
3D1vm0ypAVVnTkWXOZTAQNV7iBMPHek/VQNGNfXtmmPzBU9+t9F1FhxoMVoaMZF9
gXLaes/m1z9LETa+tiifoUPWa+gWY+2puAVqpvBjq1qmCQ5YeKsq+Ekvn/5VxqRm
Vk0j6jy+PZvKF6dZ90j6pjrzQBI7kNaERGUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQoEIyyv4TZrmAaqPDls7Ltqvc1jTAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvS0JDTXNyLUUyYTVnR3FqdzViT3k3YXIzTlkwLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcquwDANBgkqhkiG9w0BAQsFAAOCAQEA
fStrSo4e4fleo8n6KzFdmXIUENtkQosuLIt6cjvv0sgGmyxI3P/wI8IxLaaToxqt
k4U8fbTWfDtFskVWIw/cALc/s5mhpdv9uqsAVziD6yIKXRrJrSVsbxuD56Fn3UQ1
MzBDZWIl2sEiIa8R7nCLoo5HRIEQ44VMXz+ibQ//Lmod8GxQkEKjUvmmSDX9UgjT
jQRwPCtqUoi7JgFRUDjIfNlqQ5SBYfEivsw+ZAkbJ/EBXmBjw9SxsRxbk0uHN5WX
IYf+Ynti4mVDjnFVOvPIdVMv6Eh5VNOlAaQqyxeCbRAClEVosdLk+bmBPNlUCwQ2
gmEOzXENbT46vvCFihoHIQ==
-----END CERTIFICATE-----