Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/MM9bo7szhhNRUhIcaQxfM8reKAs.roa
File:                     MM9bo7szhhNRUhIcaQxfM8reKAs.roa (raw, json)
Hash identifier:          jb4tI/odfVS2+xsUhnVzbwzGUnFIm/3jny5vYe+m2o8=
Subject key identifier:   30:CF:5B:A3:BB:33:86:13:51:52:12:1C:69:0C:5F:33:CA:DE:28:0B
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       39
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/MM9bo7szhhNRUhIcaQxfM8reKAs.roa
Signing time:             Wed 20 Apr 2022 09:32:46 +0000
ROA not before:           Wed 20 Apr 2022 09:32:46 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.33.34.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:32:46 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=30CF5BA3BB3386135152121C690C5F33CADE280B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:ad:2a:2b:f4:cd:98:d7:a9:64:e8:36:d5:
                    e6:5a:6a:56:8c:d3:64:68:8e:63:94:99:82:f0:b5:
                    d4:36:36:ab:3c:ec:ad:f3:cd:4d:93:96:76:2b:d2:
                    ea:fe:ba:98:ff:4b:a2:1c:22:fc:17:bb:ec:b5:f5:
                    75:6d:24:f6:56:f3:c2:b5:34:3a:79:61:e0:7b:4f:
                    84:77:2b:0b:c8:51:3c:57:68:98:81:54:fd:a8:82:
                    ba:b6:c3:d8:bf:7a:aa:bd:ba:ea:a0:3d:54:f6:b8:
                    90:67:6e:5f:82:6e:00:65:88:07:6b:27:98:06:ce:
                    86:ba:f0:a8:13:85:da:47:04:da:e2:82:38:01:f5:
                    ff:02:4c:76:f9:5b:f8:16:db:13:cc:80:10:35:33:
                    b2:9a:6b:a4:9c:45:7e:ee:93:75:6d:8f:12:d7:d1:
                    f0:6a:b7:b8:26:5c:a1:38:c3:6f:c5:af:a0:07:de:
                    60:42:b0:bb:c4:88:53:89:e4:22:81:5b:d5:29:41:
                    7c:cd:22:b5:18:b4:74:ea:32:b5:38:46:50:9e:37:
                    e9:d8:e3:72:54:82:6d:8c:0f:69:bf:1c:02:f9:5e:
                    91:fd:4b:3e:c0:d8:44:b1:c1:3b:97:ef:b4:88:be:
                    02:fb:c3:08:da:05:1a:2e:58:d7:52:0d:dc:d1:e4:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CF:5B:A3:BB:33:86:13:51:52:12:1C:69:0C:5F:33:CA:DE:28:0B
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/MM9bo7szhhNRUhIcaQxfM8reKAs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.33.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:ce:48:c1:5f:c4:a0:81:d8:a2:a7:71:1d:c2:52:81:7e:0a:
         ca:be:85:2f:f1:68:c2:7f:d0:e1:5b:1f:1d:82:31:93:b6:92:
         3a:42:17:eb:16:c3:3c:8a:6c:d2:e3:48:c0:04:b4:a5:1f:15:
         f7:f6:d5:48:93:37:dd:3d:4b:1d:8e:8a:7d:53:80:ec:53:71:
         b9:c4:5d:73:68:a9:5c:05:1d:bb:d9:34:50:41:08:a4:44:83:
         a2:b4:a6:9f:11:bc:19:04:45:73:2d:36:f8:f4:5d:c1:5f:77:
         9a:5c:9c:a0:27:76:47:a7:33:ae:fa:04:cc:ca:cb:84:48:6d:
         e8:11:27:fc:fb:78:bc:47:47:24:70:fb:83:92:fc:69:f1:a0:
         d1:a8:e5:6d:75:ee:9b:54:9a:3c:27:e2:8f:a7:01:39:81:96:
         c4:d9:e8:2d:cb:41:a8:a6:d1:e6:9b:ab:75:32:5c:bb:7c:ab:
         cd:bb:a1:17:c1:6c:7d:2c:74:18:be:f8:bc:32:74:58:88:d8:
         fe:58:98:9d:1d:e2:f6:79:ce:d6:86:1a:5d:e2:8b:74:0f:f8:
         9a:f0:31:d9:74:f2:9b:02:c9:47:75:e6:5c:2e:3e:0e:9a:27:
         b4:51:0c:42:45:ca:2a:b2:b4:1c:d9:0a:a1:52:5d:6a:69:4a:
         d8:81:af:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----