Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/qZ-9F9zVKyOXse_Dk2-8tg5vdhY.roa
File:                     qZ-9F9zVKyOXse_Dk2-8tg5vdhY.roa (raw, json)
Hash identifier:          6f9JdcBfcfvyWKXM5aGloa6ObkXSuBMq2taXhYFn934=
Subject key identifier:   A9:9F:BD:17:DC:D5:2B:23:97:B1:EF:C3:93:6F:BC:B6:0E:6F:76:16
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       15
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/qZ-9F9zVKyOXse_Dk2-8tg5vdhY.roa
Signing time:             Wed 20 Apr 2022 09:07:30 +0000
ROA not before:           Wed 20 Apr 2022 09:07:30 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        218.216.88.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:07:30 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=A99FBD17DCD52B2397B1EFC3936FBCB60E6F7616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:33:27:fc:2e:0b:48:e7:50:b2:5e:75:3d:
                    41:52:2f:b6:06:b3:f6:59:ac:80:2b:ee:8e:fe:32:
                    76:ff:4f:9b:13:16:a5:bc:0c:4b:12:52:34:f1:d7:
                    bf:2b:37:68:20:4f:e9:0f:9e:cb:dc:d7:a2:18:3a:
                    d0:4c:b5:2d:77:48:fc:2f:b5:e1:95:9c:81:1e:25:
                    7b:91:55:02:77:97:e8:43:5b:db:78:3d:10:f1:2b:
                    60:6d:cc:e4:ad:ad:cf:6d:23:a1:c1:42:1d:6c:72:
                    d5:04:b7:f2:4d:20:15:cb:71:b9:35:f4:e0:d3:90:
                    1a:9b:1c:d1:33:0b:8b:e9:25:49:c0:2f:1a:6a:b1:
                    cd:0b:72:02:df:c0:d4:07:d9:b7:e8:15:cd:a7:1d:
                    7c:20:40:2e:13:8d:0e:fd:a1:6f:cc:3c:b4:58:49:
                    08:09:7b:3e:9d:11:5f:41:85:6d:85:ce:11:5f:c8:
                    24:aa:3f:be:7f:57:80:46:a1:a3:38:9e:01:0c:cf:
                    88:b2:ae:2d:91:5f:97:08:43:5a:09:1b:ec:d5:33:
                    5f:04:de:db:0c:33:c1:b3:6d:1f:da:a2:9f:e4:26:
                    4c:35:38:90:84:bb:1e:eb:ab:ad:9c:a5:42:07:2b:
                    0c:8e:f1:74:0f:ea:09:3f:28:77:ee:4c:1c:1d:73:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9F:BD:17:DC:D5:2B:23:97:B1:EF:C3:93:6F:BC:B6:0E:6F:76:16
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/qZ-9F9zVKyOXse_Dk2-8tg5vdhY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:5e:7c:67:16:c2:b1:5a:af:68:df:66:2b:2d:e6:64:b4:24:
         a1:9a:b3:a8:95:fb:a9:a1:cc:62:df:f5:c2:09:6c:c2:db:85:
         d6:4c:4d:80:0e:cf:51:65:3e:ca:db:74:86:16:7d:ad:f0:27:
         2f:ee:c8:b2:20:0f:10:11:1f:ee:f4:cd:16:1c:7c:34:e0:37:
         48:0d:cf:ac:60:df:d4:62:af:92:4a:b9:79:05:f2:f1:df:a1:
         d2:00:7e:e0:93:ca:35:da:5e:8e:47:40:bb:9f:fa:de:ac:fc:
         65:37:76:8a:09:d9:22:65:61:78:68:e6:1d:17:e9:71:a5:9c:
         75:f6:70:3d:05:cb:26:3b:ef:d2:79:5f:80:d9:09:09:cb:f6:
         7e:f7:25:60:d8:a0:98:b4:4e:0c:0b:99:94:5b:64:9b:a9:f7:
         7c:ac:13:6a:b0:8f:19:c4:13:8f:72:9c:48:27:59:35:13:91:
         8e:00:25:1d:a6:32:af:a6:35:54:69:85:fa:23:84:bb:61:a5:
         5c:87:45:5d:57:87:09:43:23:d0:d6:e3:6b:df:9c:fa:d5:2b:
         64:1d:ed:57:74:c9:c6:78:39:88:3b:71:c3:58:a9:5c:cf:83:
         c5:a9:01:59:98:69:97:cc:c4:f5:1f:13:94:e2:6b:8e:9d:8b:
         8f:76:39:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----