Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/mpVBu0OKJsH1I8dw0kw0dNCPxTs.roa
File:                     mpVBu0OKJsH1I8dw0kw0dNCPxTs.roa (raw, json)
Hash identifier:          sAB9UlPfcUncAo5MoeBjrdqVno6qyY3pKX2ezGaYICc=
Subject key identifier:   9A:95:41:BB:43:8A:26:C1:F5:23:C7:70:D2:4C:34:74:D0:8F:C5:3B
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       52
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/mpVBu0OKJsH1I8dw0kw0dNCPxTs.roa
Signing time:             Wed 20 Apr 2022 09:42:28 +0000
ROA not before:           Wed 20 Apr 2022 09:42:28 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        182.158.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:42:28 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=9A9541BB438A26C1F523C770D24C3474D08FC53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:a6:b2:f5:54:ce:9d:f7:21:7d:3e:db:c1:
                    d0:8e:5c:3e:2d:2c:8a:5f:58:9a:93:3e:2f:73:4f:
                    6a:52:75:a1:bd:e0:dc:9f:76:f1:5e:a6:6f:51:9b:
                    00:a5:0d:c9:f5:28:bd:70:6d:3f:c9:77:7c:f0:48:
                    34:1a:6e:e9:a7:e3:d4:5d:26:46:ac:a2:de:96:8b:
                    16:da:cc:3f:75:37:73:b4:bd:75:97:d4:85:18:38:
                    60:ff:46:f9:76:e8:be:e4:e5:46:2a:2a:f3:52:20:
                    70:65:29:1b:46:7c:a2:81:79:17:9b:a1:89:63:4a:
                    1e:82:a6:1e:b1:47:70:59:04:de:55:bd:d5:1b:01:
                    99:53:6c:60:05:51:0d:68:85:9d:8b:84:d5:bb:12:
                    b6:be:4f:23:70:ab:5f:8d:e4:a8:5c:d1:61:78:63:
                    c6:a1:09:a4:c8:f9:46:d1:32:4b:8c:40:64:8d:86:
                    b7:92:27:54:60:e8:82:ea:36:15:84:5d:dc:dd:6c:
                    93:de:c9:b5:c8:f1:c8:35:10:be:3d:03:20:f4:fd:
                    b4:a2:39:04:14:6f:0a:df:84:2a:ef:04:e2:c2:a7:
                    45:b6:33:e4:50:fb:57:16:cf:c2:1b:fb:7b:86:2c:
                    7d:06:07:88:d8:99:55:9c:55:c3:b8:f5:59:c1:58:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:95:41:BB:43:8A:26:C1:F5:23:C7:70:D2:4C:34:74:D0:8F:C5:3B
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/mpVBu0OKJsH1I8dw0kw0dNCPxTs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.158.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0f:13:1d:28:81:c5:ab:8e:e3:6b:dd:35:69:fd:cd:6c:e6:f9:
         82:60:98:ae:e7:b8:e1:55:c5:bc:a6:04:55:ce:a6:f6:7e:d6:
         61:08:31:51:42:e0:68:35:c6:59:26:8b:9c:47:5e:9e:65:2e:
         8a:40:bb:84:cc:ac:aa:b1:52:fc:08:8b:e3:23:e1:36:81:77:
         a4:a4:89:55:41:fd:ac:38:1a:b9:86:91:b3:03:8a:67:d0:f4:
         59:cf:c5:1f:f4:c4:95:ab:43:50:47:4c:70:46:83:41:4a:43:
         20:c0:15:dd:00:14:43:3c:bc:7e:91:cc:c3:77:21:7b:08:9e:
         e6:8d:b0:c9:bf:39:27:a9:f3:2d:69:a7:69:f7:01:dd:a1:9a:
         67:f5:f3:ff:8f:6a:b6:f2:03:6d:5f:7d:8b:88:df:df:28:96:
         22:de:7f:3e:3b:90:26:5c:d4:17:d5:24:12:f8:4d:12:6a:22:
         c6:a4:d4:74:ab:c3:af:4a:9b:00:c0:96:67:a6:e0:73:58:68:
         c1:f0:7e:ad:48:5c:d2:bd:1d:2a:7a:7b:9f:af:d3:b6:cc:5b:
         e6:de:ef:34:84:09:33:a3:df:8c:5b:8b:1c:a8:24:9d:0e:d1:
         e3:6c:40:3a:a5:ab:ef:e7:48:ec:63:9c:34:51:70:16:e7:2d:
         f1:fd:67:ed
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
NDIyOFoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoOUE5NTQxQkI0MzhBMjZD
MUY1MjNDNzcwRDI0QzM0NzREMDhGQzUzQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALFgprL1VM6d9yF9PtvB0I5cPi0sil9YmpM+L3NPalJ1ob3g3J92
8V6mb1GbAKUNyfUovXBtP8l3fPBINBpu6afj1F0mRqyi3paLFtrMP3U3c7S9dZfU
hRg4YP9G+XbovuTlRioq81IgcGUpG0Z8ooF5F5uhiWNKHoKmHrFHcFkE3lW91RsB
mVNsYAVRDWiFnYuE1bsStr5PI3CrX43kqFzRYXhjxqEJpMj5RtEyS4xAZI2Gt5In
VGDoguo2FYRd3N1sk97JtcjxyDUQvj0DIPT9tKI5BBRvCt+EKu8E4sKnRbYz5FD7
VxbPwhv7e4YsfQYHiNiZVZxVw7j1WcFYhDsCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBSalUG7Q4omwfUjx3DSTDR00I/FOzAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvbXBWQnUwT0tKc0gxSThkdzBrdzBkTkNQeFRzLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAbaeMA0GCSqGSIb3DQEBCwUAA4IBAQAP
Ex0ogcWrjuNr3TVp/c1s5vmCYJiu57jhVcW8pgRVzqb2ftZhCDFRQuBoNcZZJouc
R16eZS6KQLuEzKyqsVL8CIvjI+E2gXekpIlVQf2sOBq5hpGzA4pn0PRZz8Uf9MSV
q0NQR0xwRoNBSkMgwBXdABRDPLx+kczDdyF7CJ7mjbDJvzknqfMtaadp9wHdoZpn
9fP/j2q28gNtX32LiN/fKJYi3n8+O5AmXNQX1SQS+E0SaiLGpNR0q8OvSpsAwJZn
puBzWGjB8H6tSFzSvR0qenufr9O2zFvm3u80hAkzo9+MW4scqCSdDtHjbEA6pavv
50jsY5w0UXAW5y3x/Wft
-----END CERTIFICATE-----