Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/tzkCW63c-xYHc6ZA7ekhGb-nsjc.roa
File:                     tzkCW63c-xYHc6ZA7ekhGb-nsjc.roa (raw, json)
Hash identifier:          yhvHAiU/1LmFX0yt1v5lT4MdlJvLjzMeaNBEPvAhJsw=
Subject key identifier:   B7:39:02:5B:AD:DC:FB:16:07:73:A6:40:ED:E9:21:19:BF:A7:B2:37
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       3E
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/tzkCW63c-xYHc6ZA7ekhGb-nsjc.roa
Signing time:             Wed 20 Apr 2022 09:32:49 +0000
ROA not before:           Wed 20 Apr 2022 09:32:49 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.33.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:32:49 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=B739025BADDCFB160773A640EDE92119BFA7B237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:ac:55:fe:48:2b:8d:c9:73:e7:8c:aa:e1:
                    6e:93:30:aa:81:ea:bc:36:f1:8b:d2:b3:3c:c7:00:
                    f0:83:1f:86:1d:a6:b5:af:b9:d3:6e:eb:ba:73:76:
                    89:74:13:dd:b9:20:77:33:32:08:de:c7:73:75:16:
                    94:f2:26:98:d6:44:90:fe:67:c2:cb:60:df:50:0d:
                    4b:8b:3e:81:fe:29:b7:7c:3f:7f:25:c0:49:3e:63:
                    d2:11:25:cb:33:77:ba:79:3c:0b:95:70:d8:a1:8e:
                    b4:8c:1c:15:08:da:eb:19:0e:37:45:88:e9:66:57:
                    3f:de:ef:a1:38:e2:ad:3f:f8:5c:7a:d9:92:b0:26:
                    07:bb:c2:63:57:58:9a:7a:bd:ed:c8:a0:18:57:60:
                    34:d1:d7:02:66:5a:85:e5:00:48:be:d6:f8:37:62:
                    e6:6a:55:a1:5f:cb:7b:19:6a:94:6f:f0:bb:b8:55:
                    80:72:ba:aa:b7:02:6f:38:67:96:f8:e5:88:0d:38:
                    ea:07:71:46:9e:21:c6:f3:eb:40:8e:01:ba:8e:76:
                    c7:60:16:0d:b7:36:79:67:6d:e2:ec:69:f1:61:41:
                    f8:66:e4:e2:58:b8:26:f6:19:e6:50:0f:88:55:4c:
                    07:4b:22:80:f9:f1:cc:43:4c:99:5a:f5:4a:d0:22:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:39:02:5B:AD:DC:FB:16:07:73:A6:40:ED:E9:21:19:BF:A7:B2:37
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/tzkCW63c-xYHc6ZA7ekhGb-nsjc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.33.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f5:23:8e:4a:b4:66:37:12:19:31:28:c8:d1:c5:a8:2c:b1:
         f1:28:75:e7:7d:43:c6:e2:79:76:c3:03:80:a0:46:e6:e9:07:
         6f:a8:be:63:b3:60:96:20:a8:51:b2:db:61:1a:5f:f7:da:f3:
         e6:de:2a:ff:a3:0f:ad:3d:fd:2e:72:1f:05:c2:03:a4:8d:54:
         ec:91:96:a5:38:0d:e9:a7:11:d6:14:11:7f:82:49:cc:4e:81:
         7f:a0:b5:63:69:52:0b:34:63:72:46:2a:df:b5:aa:a5:18:4c:
         0c:b5:38:24:91:2a:2a:b7:da:9d:07:fe:a3:19:7b:fe:5f:35:
         b9:99:aa:c9:6f:17:c8:6c:5e:2b:08:28:21:f0:af:a1:c0:81:
         51:57:93:80:b4:5b:3e:fd:95:04:15:7e:86:11:8b:3e:59:04:
         74:50:e7:40:11:92:84:62:3f:2f:b4:f7:c9:d1:86:83:0b:1c:
         f2:bd:01:f2:33:d0:68:06:db:fb:72:92:96:52:dd:1f:cf:b9:
         79:e5:0a:c7:b9:8b:34:ca:54:23:95:8d:62:75:54:ec:95:1a:
         37:33:91:29:d6:57:84:73:19:21:7b:6d:ff:04:95:ba:5e:b2:
         d9:7b:e5:e3:91:b0:f9:a9:ab:34:89:5c:c7:dd:f8:04:bd:36:
         61:3d:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----