Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/_Y9cmlOwBA1jSqgD6RS939dGDPA.roa
File:                     _Y9cmlOwBA1jSqgD6RS939dGDPA.roa (raw, json)
Hash identifier:          LfyO5g6mxTx7lRO0McYZi4Vc3Wbo+ImTW6PGxnzAqRE=
Subject key identifier:   FD:8F:5C:9A:53:B0:04:0D:63:4A:A8:03:E9:14:BD:DF:D7:46:0C:F0
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       0F
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/_Y9cmlOwBA1jSqgD6RS939dGDPA.roa
Signing time:             Wed 20 Apr 2022 08:47:25 +0000
ROA not before:           Wed 20 Apr 2022 08:47:25 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        219.66.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 08:47:25 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=FD8F5C9A53B0040D634AA803E914BDDFD7460CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:7f:a9:90:74:e5:fa:20:70:c5:16:6d:fa:
                    b6:42:d0:41:96:f0:57:57:0b:f7:e3:93:b5:62:14:
                    05:3e:69:7c:cd:b1:47:0a:3a:d6:e2:62:f9:fe:7a:
                    b8:1e:bb:4b:ec:71:62:e9:58:2a:57:1b:f2:57:6d:
                    07:a2:d3:2a:55:97:d1:b6:e0:d3:03:a7:78:5f:9b:
                    56:ed:2c:01:b7:b7:07:e2:0e:26:e0:1d:58:17:00:
                    96:a0:f1:75:85:85:dc:96:b6:2a:5b:b6:40:68:cb:
                    39:56:8c:d9:19:12:3a:90:01:f7:09:22:d6:09:83:
                    83:8b:8f:4c:98:29:be:36:5d:10:7e:46:8f:c9:c7:
                    77:6c:8f:92:73:4d:79:a8:19:49:73:dc:c7:58:03:
                    4c:5c:38:6f:48:1c:c2:a6:fd:25:07:30:81:32:8a:
                    14:d8:0a:d6:35:af:89:18:ea:ac:89:a5:f5:c7:3d:
                    48:88:9a:2e:6f:b8:b5:bc:3a:5f:40:11:54:a6:d4:
                    ee:1f:53:82:2d:e0:ce:df:5a:4d:6f:48:a8:f9:cb:
                    22:e2:1d:45:e3:3c:41:2b:b8:f0:a9:b2:a7:f0:b4:
                    79:66:8d:a2:34:12:a3:ae:11:c1:dc:cb:08:d3:e5:
                    8f:f7:bd:6a:2a:a1:6f:7a:88:68:ac:1e:95:60:d6:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8F:5C:9A:53:B0:04:0D:63:4A:A8:03:E9:14:BD:DF:D7:46:0C:F0
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/_Y9cmlOwBA1jSqgD6RS939dGDPA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.66.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a0:3b:32:b2:60:5c:51:03:a5:ca:2f:4c:bf:c2:32:5e:9f:42:
         f7:92:64:1b:b5:15:c5:10:0a:7c:01:1b:93:2e:8f:1d:e7:b6:
         9f:a2:17:94:7e:75:57:1c:b5:ec:92:b2:56:cd:74:55:06:c1:
         2d:33:4d:49:c4:ac:cb:01:82:ea:bd:66:0a:41:39:38:f4:82:
         cd:2d:0f:b8:d8:05:7a:7f:b2:85:8f:ca:dc:57:5a:68:ca:6a:
         08:74:1f:6d:28:08:e8:3f:db:63:3b:06:26:4a:26:77:15:f2:
         4d:6e:3e:8c:7d:c3:f2:0c:d3:02:98:d7:c3:07:f8:fc:46:2b:
         74:fa:f7:fe:78:ff:58:11:29:a3:19:4c:3c:06:85:88:29:31:
         1b:d7:f6:91:ab:d6:ed:0b:01:6c:c5:d2:3b:58:8b:3e:3c:b5:
         5f:7a:f0:07:b2:fc:eb:44:c8:48:da:0e:f9:5e:69:7c:e6:c0:
         17:6b:3c:67:cd:cd:80:50:6a:ac:33:ea:75:14:ab:40:b0:4f:
         f1:2e:53:67:30:46:eb:2a:cf:1d:28:66:c8:65:ba:43:f8:f9:
         2f:f5:32:99:e0:31:da:a1:2b:28:20:18:4c:a3:e4:b7:f8:66:
         8a:1a:67:0a:d5:30:a2:79:90:6d:9e:a7:38:55:a2:82:e4:5d:
         a4:a3:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----