Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/rodYPn2bvCGSh0r-KMq1BFrIeRQ.roa
File:                     rodYPn2bvCGSh0r-KMq1BFrIeRQ.roa (raw, json)
Hash identifier:          qyXs9xQ6huQAlID+5scFypuvZdRNHwaOaCT3JRCIilk=
Subject key identifier:   AE:87:58:3E:7D:9B:BC:21:92:87:4A:FE:28:CA:B5:04:5A:C8:79:14
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       3D
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/rodYPn2bvCGSh0r-KMq1BFrIeRQ.roa
Signing time:             Wed 20 Apr 2022 09:32:48 +0000
ROA not before:           Wed 20 Apr 2022 09:32:48 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.33.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:32:48 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=AE87583E7D9BBC2192874AFE28CAB5045AC87914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:ad:10:0b:96:91:0b:59:24:3d:2c:1a:a0:
                    98:de:f0:26:53:bc:21:0e:53:c5:0c:b9:94:09:48:
                    90:79:8a:6d:95:96:13:22:0a:96:7f:0d:6e:cf:c8:
                    60:8a:e7:5d:e7:15:7c:e6:91:78:9d:e3:d0:70:0d:
                    af:91:70:98:2b:29:3f:17:da:ea:74:c8:fb:3a:f8:
                    fa:fe:7f:04:d3:ab:72:75:65:ee:e3:65:fc:87:ef:
                    ab:ee:75:98:3f:62:54:b8:cf:7f:f7:a3:19:b9:fc:
                    99:d7:ec:56:f4:e7:86:a0:67:55:aa:5d:b4:5c:73:
                    7c:76:d8:9f:7c:8e:08:81:1c:67:00:38:00:b3:7b:
                    d2:b7:f9:ed:bd:19:a1:e7:d6:ca:c5:b4:e1:5b:eb:
                    f4:4c:a8:eb:fa:c4:b3:00:3a:cd:6a:9c:1e:83:7b:
                    5d:80:34:88:cf:f2:bd:50:ec:37:54:69:95:d6:9b:
                    a2:da:62:c4:52:4f:f2:7f:0c:7a:69:db:69:6c:09:
                    f8:c6:a6:ad:f3:24:5e:2f:16:f1:12:65:82:67:92:
                    98:56:b0:e6:77:6e:d2:c6:ac:a6:45:ed:3f:1f:df:
                    f9:2f:a5:52:f6:78:6c:28:2e:30:65:eb:d0:76:01:
                    82:5a:88:70:fb:71:7f:f7:f4:a0:d9:13:e0:7e:aa:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:87:58:3E:7D:9B:BC:21:92:87:4A:FE:28:CA:B5:04:5A:C8:79:14
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/rodYPn2bvCGSh0r-KMq1BFrIeRQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.33.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:9d:c4:70:79:90:f9:75:fc:88:ef:e3:c4:2a:4f:0a:da:a5:
         20:dd:30:d7:a5:d3:8c:53:c8:21:76:84:22:87:a8:79:a8:f7:
         b6:8c:66:ee:4c:19:e4:c5:fa:65:8e:21:f2:e9:99:63:96:a5:
         fd:98:cc:5c:89:c1:c1:9c:99:46:2d:3b:44:c8:da:88:a8:5b:
         c2:9c:e2:3e:89:54:3d:85:ec:a8:67:e5:07:7c:c3:9e:cb:33:
         a3:7a:ad:4d:ad:4f:3a:27:54:a3:54:09:44:ab:d1:d6:1c:e0:
         38:d4:ce:21:1c:93:f7:e5:11:9f:dc:4f:ca:20:f7:c3:24:01:
         57:0e:43:0a:d5:91:09:4b:13:b0:fe:82:0c:ed:22:50:71:a2:
         b9:6e:8a:3d:ba:67:c0:bf:b2:5b:40:77:5a:27:cc:5f:f8:c8:
         e9:3a:5c:13:5f:5f:ef:f2:76:9b:8e:34:dd:d5:7d:e0:60:e7:
         a0:1a:51:65:f0:e5:d0:53:07:7d:09:d6:e7:56:9c:2a:fb:d9:
         88:34:a0:d2:98:a8:b6:a0:87:29:c1:04:97:81:d4:95:f7:29:
         0d:51:0e:49:76:49:bd:7e:c1:23:af:10:3d:e0:71:1b:0a:6d:
         6d:22:24:94:71:3c:38:92:48:3d:e1:a0:bb:08:59:d4:88:16:
         f8:58:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----