Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/RM3TW-1KwzCS38--UhfeopVSYhE.roa
File:                     RM3TW-1KwzCS38--UhfeopVSYhE.roa (raw, json)
Hash identifier:          drNVBoGf4Cgi6r7vUyni5fhSnB90NEWGsB6ZXvMZ1ik=
Subject key identifier:   44:CD:D3:5B:ED:4A:C3:30:92:DF:CF:BE:52:17:DE:A2:95:52:62:11
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       0B
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RM3TW-1KwzCS38--UhfeopVSYhE.roa
Signing time:             Wed 20 Apr 2022 08:47:24 +0000
ROA not before:           Wed 20 Apr 2022 08:47:24 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        61.123.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 08:47:24 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=44CDD35BED4AC33092DFCFBE5217DEA295526211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:73:10:11:28:4b:cb:23:19:4d:d7:0a:91:
                    86:c3:2a:53:eb:e4:25:70:0b:27:9c:e5:7a:67:9e:
                    b5:71:d8:7e:60:53:22:91:df:ed:3e:3b:9b:4e:a8:
                    4a:5f:da:6d:67:92:72:06:a2:c8:7a:ac:99:01:8f:
                    18:a5:66:b8:c4:19:96:5c:85:25:a3:14:ff:1f:eb:
                    28:10:41:ea:a6:0c:2c:ca:16:c5:25:fc:93:8d:96:
                    87:6d:80:5f:eb:87:fb:f4:77:39:af:ba:a9:9b:af:
                    3a:df:9a:fb:92:b6:92:70:34:be:c8:4d:a8:94:1a:
                    c5:97:2a:09:2a:dc:73:75:41:fb:06:97:96:da:25:
                    c0:66:ce:95:1c:a3:a0:80:6e:b8:6b:98:1e:4d:d5:
                    53:d8:af:29:11:d0:13:08:77:81:3b:8e:7a:93:00:
                    ac:e2:f1:8d:6f:be:62:4a:c1:ef:2d:58:59:24:68:
                    d1:0e:e4:40:36:eb:6b:e4:e1:92:e2:6f:bc:c0:9f:
                    c9:56:6a:60:c2:3a:7e:f4:83:48:57:0f:c6:c6:d6:
                    09:aa:97:e0:f7:49:51:13:06:bc:14:4e:2b:c1:cc:
                    95:6a:4d:c8:d0:8a:88:0b:fc:8b:b6:2a:54:c1:83:
                    d1:61:2e:c8:05:07:a4:4e:6a:76:1d:a6:21:3a:27:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CD:D3:5B:ED:4A:C3:30:92:DF:CF:BE:52:17:DE:A2:95:52:62:11
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/RM3TW-1KwzCS38--UhfeopVSYhE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.123.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:66:84:b1:64:87:ea:09:d6:c5:a4:3a:8d:07:89:49:72:08:
         8f:d1:fc:ce:a3:10:c7:b2:5f:97:ea:b2:b4:12:26:af:a4:98:
         5c:bf:af:ca:82:5e:3c:4b:75:de:c2:b7:e2:8e:f5:db:44:7f:
         76:2d:d0:01:28:aa:80:ad:7e:f7:3b:06:87:c8:05:1a:eb:a7:
         11:71:40:3a:ae:2e:55:04:31:e8:05:33:68:8d:08:8e:c7:52:
         21:e0:00:bc:a2:dd:dc:a9:b9:a6:af:f7:85:4a:db:2c:22:59:
         13:ac:6e:34:94:25:5f:65:73:6f:12:e0:ff:5a:ce:ba:40:54:
         75:84:25:88:68:1a:a1:9d:0e:f2:0a:f0:29:1c:32:33:bf:1e:
         2f:e8:ff:e1:fd:d0:74:78:5d:f2:12:ae:a0:d9:fa:86:b1:c5:
         ed:38:ed:8e:f0:a1:e8:89:ae:40:c3:f0:ca:e8:49:00:f4:46:
         04:87:1b:b3:b1:b4:f8:73:2a:ce:96:39:66:58:f0:95:8a:f9:
         3e:34:42:f2:ed:e0:bc:ee:7c:2d:f7:52:0e:45:c7:3d:66:8c:
         54:58:c5:e1:73:63:1b:c5:53:fa:c8:00:e1:44:f1:8f:6d:27:
         4f:3d:95:05:0c:0f:07:7d:43:2d:94:e3:a3:7f:9c:7d:8c:fd:
         70:db:f0:dc
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA4
NDcyNFoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNDRDREQzNUJFRDRBQzMz
MDkyREZDRkJFNTIxN0RFQTI5NTUyNjIxMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMXUcxARKEvLIxlN1wqRhsMqU+vkJXALJ5zlemeetXHYfmBTIpHf
7T47m06oSl/abWeScgaiyHqsmQGPGKVmuMQZllyFJaMU/x/rKBBB6qYMLMoWxSX8
k42Wh22AX+uH+/R3Oa+6qZuvOt+a+5K2knA0vshNqJQaxZcqCSrcc3VB+waXltol
wGbOlRyjoIBuuGuYHk3VU9ivKRHQEwh3gTuOepMArOLxjW++YkrB7y1YWSRo0Q7k
QDbra+ThkuJvvMCfyVZqYMI6fvSDSFcPxsbWCaqX4PdJURMGvBROK8HMlWpNyNCK
iAv8i7YqVMGD0WEuyAUHpE5qdh2mITonxY8CAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBREzdNb7UrDMJLfz75SF96ilVJiETAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvUk0zVFctMUt3ekNTMzgtLVVoZmVvcFZTWWhFLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAD17MA0GCSqGSIb3DQEBCwUAA4IBAQAZ
ZoSxZIfqCdbFpDqNB4lJcgiP0fzOoxDHsl+X6rK0EiavpJhcv6/Kgl48S3Xewrfi
jvXbRH92LdABKKqArX73OwaHyAUa66cRcUA6ri5VBDHoBTNojQiOx1Ih4AC8ot3c
qbmmr/eFStssIlkTrG40lCVfZXNvEuD/Ws66QFR1hCWIaBqhnQ7yCvApHDIzvx4v
6P/h/dB0eF3yEq6g2fqGscXtOO2O8KHoia5Aw/DK6EkA9EYEhxuzsbT4cyrOljlm
WPCVivk+NELy7eC87nwt91IORcc9ZoxUWMXhc2MbxVP6yADhRPGPbSdPPZUFDA8H
fUMtlOOjf5x9jP1w2/Dc
-----END CERTIFICATE-----