Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/uiA7Qvlvc6ZfeED5VfpiFD9X2YU.roa
File:                     uiA7Qvlvc6ZfeED5VfpiFD9X2YU.roa (raw, json)
Hash identifier:          mbuP/uhB82oKkNPoTJPQPfy3Fm5Afm99u2TdO2DlBgc=
Subject key identifier:   BA:20:3B:42:F9:6F:73:A6:5F:78:40:F9:55:FA:62:14:3F:57:D9:85
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       4D
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/uiA7Qvlvc6ZfeED5VfpiFD9X2YU.roa
Signing time:             Wed 20 Apr 2022 09:42:27 +0000
ROA not before:           Wed 20 Apr 2022 09:42:27 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.234.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:42:27 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=BA203B42F96F73A65F7840F955FA62143F57D985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:53:c8:ac:bd:e6:3d:f6:c0:59:8c:b0:f6:
                    55:71:3b:54:65:ba:af:37:b0:86:51:66:c4:71:81:
                    58:7f:d7:66:41:ba:9f:50:16:01:60:93:80:19:5d:
                    42:10:7a:a0:27:77:51:62:ff:42:53:a6:4c:bd:12:
                    75:47:22:28:6e:19:5a:4a:49:73:d9:d7:16:c1:ac:
                    85:9c:4c:b4:51:1f:be:1e:98:2d:07:d7:35:d8:0f:
                    b1:1e:48:7d:a5:a1:dd:3d:7a:62:cf:a8:10:d7:55:
                    1b:f7:a0:26:e3:8f:d3:c9:77:d0:38:d7:e1:9a:d1:
                    82:7f:81:bd:5a:20:53:19:80:e7:3c:3a:81:f8:1d:
                    c2:9f:c2:f3:d5:69:85:b4:83:3e:ce:78:c0:92:7e:
                    69:d5:ae:37:39:7a:51:f4:f4:55:90:f5:dd:80:c1:
                    19:52:26:99:7e:d8:ea:0f:f3:31:41:5a:b8:64:40:
                    08:1a:0c:fe:22:34:a9:d8:62:9e:99:4c:58:3a:6e:
                    0b:2e:4d:a4:a8:c1:8c:4a:80:31:7e:fd:38:25:f8:
                    a7:3e:41:ad:0a:f8:5f:8a:71:96:24:b3:b0:87:c5:
                    8b:9f:9f:49:6d:f5:0e:93:fb:fd:29:58:d3:83:01:
                    a6:3b:7b:5e:2b:35:65:57:2f:06:e3:18:b4:21:81:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:20:3B:42:F9:6F:73:A6:5F:78:40:F9:55:FA:62:14:3F:57:D9:85
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/uiA7Qvlvc6ZfeED5VfpiFD9X2YU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a8:b7:d7:7f:82:33:2f:23:4c:ad:d5:31:f4:19:05:04:d6:
         e5:e5:63:25:6c:e7:1c:b7:4a:db:ab:2a:44:2c:7c:d3:d3:9d:
         10:ec:e4:57:87:65:1c:64:51:a2:1a:c0:fa:9b:db:c3:79:8e:
         97:e4:e8:96:1c:bc:c3:5e:31:01:eb:72:fb:0a:a1:c8:b9:1b:
         65:86:fe:b4:80:ad:35:ab:d3:6d:21:e8:3d:fd:4b:62:62:17:
         a7:cd:3e:3c:68:c4:2a:d2:7e:4d:ee:8d:4e:32:ac:2f:8e:ff:
         44:a9:d9:3e:fe:46:ab:0d:d1:64:53:8c:f8:26:4c:27:44:83:
         47:64:a0:5b:42:9b:cf:65:78:26:0e:9d:9f:bf:39:36:ba:8d:
         71:01:be:0d:05:d7:d2:d8:68:1a:38:15:43:04:a4:77:c1:97:
         5a:6d:e8:ad:fa:fe:ea:60:52:0d:95:fa:43:69:72:5a:fc:85:
         0f:57:75:62:5a:e5:fe:18:62:ad:aa:2a:20:db:89:76:2f:ba:
         56:70:69:d0:46:53:a0:d8:4e:ee:9e:b2:a9:41:c8:bb:d5:aa:
         81:53:9c:d9:60:0d:bf:5d:cb:17:f4:a6:65:68:a8:08:5c:b0:
         c0:02:d6:4e:1e:5f:3f:75:7c:df:9b:30:f4:35:fc:2e:d7:d7:
         67:2e:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----