Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/lS4ZNALgI3uuZ8AGrWWvqxBo8EY.roa
File:                     lS4ZNALgI3uuZ8AGrWWvqxBo8EY.roa (raw, json)
Hash identifier:          4zWPF+R0hL3Kt8CMzArN7BD7iUnto4APXPw2y7MndWk=
Subject key identifier:   95:2E:19:34:02:E0:23:7B:AE:67:C0:06:AD:65:AF:AB:10:68:F0:46
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       1B
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/lS4ZNALgI3uuZ8AGrWWvqxBo8EY.roa
Signing time:             Wed 20 Apr 2022 09:12:21 +0000
ROA not before:           Wed 20 Apr 2022 09:12:21 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        211.127.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:12:21 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=952E193402E0237BAE67C006AD65AFAB1068F046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:7f:ee:da:9e:f0:13:8b:37:b7:aa:d9:d9:
                    56:9d:36:c0:19:e2:ea:4d:18:6f:18:77:5e:03:56:
                    59:3c:d6:09:ea:1c:f8:f0:41:4f:5d:11:77:4a:1b:
                    d5:aa:00:1f:89:f5:e8:76:2b:fb:d2:b7:89:97:85:
                    d7:c9:fe:e3:f3:2b:df:a1:e9:20:35:2a:b4:fb:9c:
                    54:a7:bf:a9:57:e7:b9:6e:21:6e:b5:a7:fd:bf:64:
                    6d:04:8a:c9:4a:99:29:b4:43:a0:89:c3:18:4e:bd:
                    f9:4f:6b:75:96:9e:41:c9:e5:1b:f5:30:e1:b6:4e:
                    63:a1:b0:61:bc:49:5d:a1:ae:11:a2:d3:f1:f5:c2:
                    f4:39:32:e2:da:91:00:1f:90:22:f4:77:67:1a:e8:
                    07:51:b3:54:94:bf:27:f3:72:e5:16:ee:8c:1d:05:
                    30:01:3f:4f:a2:17:36:bb:7b:3d:aa:42:de:90:0e:
                    52:5a:96:aa:5f:26:ac:76:bc:aa:e8:52:fd:9b:c6:
                    9d:90:64:c1:97:57:01:b8:61:ce:d8:ec:a7:78:99:
                    c7:90:27:c3:d9:f9:74:e2:84:f4:92:b2:9c:5b:f5:
                    da:71:f2:5f:d5:91:35:c9:2d:80:95:e8:28:db:b5:
                    ef:1b:b6:c1:24:b2:fe:bc:f5:0f:68:04:3a:31:52:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2E:19:34:02:E0:23:7B:AE:67:C0:06:AD:65:AF:AB:10:68:F0:46
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/lS4ZNALgI3uuZ8AGrWWvqxBo8EY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.127.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:52:25:77:3b:92:2a:7c:a4:01:8c:d4:0f:96:fd:77:f5:14:
         3e:d2:01:b3:16:68:9e:63:d1:7a:7b:f7:cc:cb:0e:60:69:63:
         f0:85:47:7e:f2:b3:ba:7b:01:d9:64:88:0f:bd:5e:7e:f3:d0:
         9a:2f:d5:8f:6e:92:8e:92:c1:e9:72:75:bf:b9:f4:87:77:15:
         76:65:92:06:8d:33:63:3c:51:7c:a8:e0:8b:5e:8f:f8:53:29:
         60:34:06:09:21:fb:fe:55:5f:80:3a:54:71:ab:0c:ac:0d:90:
         45:32:16:28:87:cd:5f:14:2e:e7:91:e0:ce:67:22:d9:8d:25:
         0c:3a:34:93:34:5b:36:42:91:bc:a0:05:75:f3:3e:a1:bb:9b:
         c5:b7:64:e2:39:18:00:da:f4:c7:83:30:0a:b0:1f:d4:a4:79:
         c9:b3:29:d8:31:50:a8:d6:4a:58:99:ab:f8:23:99:8c:5c:1a:
         9b:db:e1:e3:9a:9c:ab:dc:37:7b:2f:5e:7d:a2:ab:2f:ee:ca:
         2d:18:b9:8d:ad:c3:b7:bf:92:6c:30:c8:6e:2d:ca:9f:85:b9:
         fc:d2:44:42:1f:79:7b:43:61:b6:f1:44:bb:c9:ad:67:ec:03:
         a9:c7:e3:02:cb:6e:aa:76:b4:fa:4d:4d:81:d0:c3:40:b7:f0:
         44:d3:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----