Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/MJW5JesXThA2MPGje1vzcX80azI.roa
File:                     MJW5JesXThA2MPGje1vzcX80azI.roa (raw, json)
Hash identifier:          JRTluKqAHUO+FRJRSmyvAhGbVuzKR4sRE/0X6XugSSM=
Subject key identifier:   30:95:B9:25:EB:17:4E:10:36:30:F1:A3:7B:5B:F3:71:7F:34:6B:32
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       46
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/MJW5JesXThA2MPGje1vzcX80azI.roa
Signing time:             Wed 20 Apr 2022 09:37:40 +0000
ROA not before:           Wed 20 Apr 2022 09:37:40 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.33.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:37:40 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=3095B925EB174E103630F1A37B5BF3717F346B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:11:0b:9e:a2:6a:81:ed:94:3e:f1:71:a6:
                    45:9e:59:dd:81:9a:91:48:b9:ec:63:5d:7f:bf:a5:
                    61:95:1c:e0:d2:6d:f3:cc:34:89:9a:19:c5:3f:f7:
                    79:3f:0d:f3:db:ce:4a:b8:11:d0:ac:db:31:db:04:
                    f3:45:75:40:49:29:03:79:35:9f:82:a0:8b:b8:c1:
                    b4:73:eb:ea:d0:af:c6:52:8d:a6:5d:88:2a:54:c0:
                    bd:fe:ce:87:4e:e1:31:29:69:73:23:00:b8:c4:c0:
                    73:38:77:f6:48:22:91:91:68:22:94:57:e7:b5:a1:
                    8b:b0:f6:e7:de:9b:8f:4b:36:77:0e:7f:f8:16:04:
                    88:0a:7a:61:51:35:40:74:7b:9f:6e:b3:4b:37:2e:
                    8d:48:b2:da:f1:73:2d:8b:20:e3:d8:2f:ca:d1:ad:
                    11:68:e8:50:12:57:bb:28:ed:99:b8:57:a2:61:27:
                    b1:1d:66:77:52:42:f2:0e:13:5d:d7:79:f3:04:b1:
                    68:2a:12:64:19:f8:01:a0:63:11:78:3e:9f:d8:3a:
                    c2:ee:ae:0b:62:ad:8f:71:1a:b7:1c:70:8b:e4:62:
                    76:53:a4:6e:6d:3d:99:f8:75:33:75:8c:2e:8a:02:
                    e0:1d:0e:87:0e:b3:4f:a8:b7:a0:49:37:ef:0e:e4:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:95:B9:25:EB:17:4E:10:36:30:F1:A3:7B:5B:F3:71:7F:34:6B:32
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/MJW5JesXThA2MPGje1vzcX80azI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.33.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:05:2e:d6:7c:92:01:2d:eb:4f:37:74:93:1d:c2:da:d1:7a:
         39:91:6e:ab:e0:13:51:b7:1c:d1:41:31:54:de:9c:01:e8:a5:
         b1:93:1e:36:38:0c:09:f4:cb:54:c4:14:ff:94:f4:8e:3e:33:
         3a:d0:60:3e:c6:85:f1:c6:00:1b:09:f4:32:43:d4:d6:a4:72:
         d0:c4:94:7f:dd:20:27:d7:31:61:d7:17:de:37:25:6c:c5:33:
         60:0b:d9:2c:94:a9:00:a9:2d:6f:a9:4c:bf:28:75:0e:a3:7f:
         8c:fe:3b:7a:af:c4:de:da:98:ec:93:83:f3:8e:df:09:a1:7e:
         c8:f4:15:5a:e0:db:13:57:10:99:67:9f:76:84:61:3f:d4:57:
         34:93:00:b4:9d:bd:55:7f:7d:b1:96:ee:fc:90:60:98:a3:2e:
         96:1d:64:91:e8:1d:d9:ed:d4:52:0b:06:57:1e:70:05:1d:23:
         f4:df:7c:54:13:85:7d:97:6a:f1:da:7f:18:1b:f2:94:9a:53:
         d7:b1:e4:b5:9f:0d:d3:c4:0d:09:75:48:62:21:5d:5a:89:aa:
         2e:24:30:b3:85:68:04:93:aa:07:2b:5e:cf:0f:fc:b4:61:34:
         5a:7b:2b:0c:98:e4:88:c4:01:52:15:8f:9a:ef:12:15:e2:61:
         e4:8b:74:bb
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
Mzc0MFoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMzA5NUI5MjVFQjE3NEUx
MDM2MzBGMUEzN0I1QkYzNzE3RjM0NkIzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKYmEQueomqB7ZQ+8XGmRZ5Z3YGakUi57GNdf7+lYZUc4NJt88w0
iZoZxT/3eT8N89vOSrgR0KzbMdsE80V1QEkpA3k1n4Kgi7jBtHPr6tCvxlKNpl2I
KlTAvf7Oh07hMSlpcyMAuMTAczh39kgikZFoIpRX57Whi7D2596bj0s2dw5/+BYE
iAp6YVE1QHR7n26zSzcujUiy2vFzLYsg49gvytGtEWjoUBJXuyjtmbhXomEnsR1m
d1JC8g4TXdd58wSxaCoSZBn4AaBjEXg+n9g6wu6uC2Ktj3Eatxxwi+RidlOkbm09
mfh1M3WMLooC4B0Ohw6zT6i3oEk37w7kDp0CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQwlbkl6xdOEDYw8aN7W/NxfzRrMjAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvTUpXNUplc1hUaEEyTVBHamUxdnpjWDgwYXpJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMohojANBgkqhkiG9w0BAQsFAAOCAQEA
bgUu1nySAS3rTzd0kx3C2tF6OZFuq+ATUbcc0UExVN6cAeilsZMeNjgMCfTLVMQU
/5T0jj4zOtBgPsaF8cYAGwn0MkPU1qRy0MSUf90gJ9cxYdcX3jclbMUzYAvZLJSp
AKktb6lMvyh1DqN/jP47eq/E3tqY7JOD847fCaF+yPQVWuDbE1cQmWefdoRhP9RX
NJMAtJ29VX99sZbu/JBgmKMulh1kkegd2e3UUgsGVx5wBR0j9N98VBOFfZdq8dp/
GBvylJpT17HktZ8N08QNCXVIYiFdWomqLiQws4VoBJOqBytezw/8tGE0WnsrDJjk
iMQBUhWPmu8SFeJh5It0uw==
-----END CERTIFICATE-----