Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/RKzcbdoFY7tX1HTkbxbEIFY-2Bo.roa
File:                     RKzcbdoFY7tX1HTkbxbEIFY-2Bo.roa (raw, json)
Hash identifier:          C063zBR7tmqFXThQ4rm3obYwi2jPM5PKje1CrAmPG38=
Subject key identifier:   44:AC:DC:6D:DA:05:63:BB:57:D4:74:E4:6F:16:C4:20:56:3E:D8:1A
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       14
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RKzcbdoFY7tX1HTkbxbEIFY-2Bo.roa
Signing time:             Wed 20 Apr 2022 09:07:30 +0000
ROA not before:           Wed 20 Apr 2022 09:07:30 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        218.218.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:07:30 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=44ACDC6DDA0563BB57D474E46F16C420563ED81A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:0e:e1:c5:37:5a:da:fa:33:d6:de:8f:ea:
                    2d:da:27:c2:40:01:84:a5:67:1a:59:15:a8:43:6b:
                    a8:9f:0b:c3:f0:c6:c6:13:d1:0d:86:74:42:53:7a:
                    2f:18:c3:27:eb:05:26:94:87:e1:70:56:23:d6:dd:
                    56:ad:90:99:49:de:f4:52:15:f2:06:e0:cf:b4:ea:
                    f0:fa:1d:e5:38:14:8e:af:a4:cf:1b:75:06:3e:b0:
                    37:61:5e:ef:94:6d:ca:a0:4a:07:ce:3a:8d:37:a3:
                    58:83:d4:ff:56:4a:cb:ed:97:38:dd:46:bf:11:8c:
                    a6:e1:aa:2f:4a:7f:ce:eb:81:9e:68:88:06:47:8b:
                    11:0d:1d:b1:e7:80:1b:2e:7e:af:c8:fc:75:9e:66:
                    4c:f3:ca:91:6b:ca:36:ac:fe:90:11:2f:1f:14:f4:
                    a2:eb:22:da:14:f5:3f:c6:8e:68:8f:c3:28:39:5b:
                    12:23:5a:95:a0:68:c9:94:07:7c:31:95:42:99:83:
                    ac:09:58:da:3a:1a:1d:68:8c:4f:ab:89:cb:91:4a:
                    39:6f:28:0b:7c:88:56:08:6e:d9:a4:ff:c3:ef:9b:
                    dc:23:2b:42:4c:99:93:7b:3b:5f:99:b6:40:ad:35:
                    94:ae:ec:a9:67:2a:91:fc:40:1c:f7:4e:44:0a:32:
                    55:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AC:DC:6D:DA:05:63:BB:57:D4:74:E4:6F:16:C4:20:56:3E:D8:1A
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RKzcbdoFY7tX1HTkbxbEIFY-2Bo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.218.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:a3:00:3b:a2:e7:dc:2b:b1:74:fd:06:26:d0:5e:34:34:36:
         b4:ed:9f:05:55:16:5a:8f:1e:83:92:a9:8d:a0:c8:fd:69:dc:
         29:4b:40:0c:85:15:b5:99:1e:82:b7:7f:7c:11:94:13:01:b6:
         8a:27:9a:b6:77:03:1f:26:67:be:5b:bc:f6:fe:e1:3a:fb:6b:
         60:2d:ea:47:2c:af:9a:2c:c2:c2:93:93:cb:35:f9:9a:2d:2e:
         a5:28:51:16:cc:80:15:a7:c3:f0:d6:a1:73:c0:41:31:e6:12:
         c0:07:6d:df:59:77:e3:41:df:8a:52:f0:7e:4b:76:ae:dc:97:
         29:d0:2f:6e:5f:7e:96:3f:a5:e4:ec:26:a8:eb:bc:d7:08:9b:
         bf:98:a6:93:e5:86:a8:91:93:4c:2a:ec:71:7f:23:17:ba:f6:
         46:82:4f:2c:0c:99:76:6e:60:9c:63:a9:67:0f:0b:df:19:2e:
         39:a7:7f:93:74:63:8b:d9:a3:43:16:c0:97:02:15:97:dd:ad:
         37:24:af:17:b3:57:d3:97:6a:c4:23:0a:c7:5b:b1:c8:ad:bb:
         87:84:9e:09:e6:49:2b:b9:27:ef:bf:09:ba:08:ab:fb:09:b8:
         86:1f:11:45:c8:9e:e9:fc:87:3a:a0:a0:68:bc:57:a7:2a:2b:
         8a:1d:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----