Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/xn-gUrlQZ_HImnFihn0zCr4lxd0.roa
File:                     xn-gUrlQZ_HImnFihn0zCr4lxd0.roa (raw, json)
Hash identifier:          TizEHU2Txa6I/13iTktp6CwKaSkgvLv3vam1ifwb27k=
Subject key identifier:   C6:7F:A0:52:B9:50:67:F1:C8:9A:71:62:86:7D:33:0A:BE:25:C5:DD
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       50
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/xn-gUrlQZ_HImnFihn0zCr4lxd0.roa
Signing time:             Wed 20 Apr 2022 09:42:28 +0000
ROA not before:           Wed 20 Apr 2022 09:42:28 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.211.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:42:28 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=C67FA052B95067F1C89A7162867D330ABE25C5DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:f2:4b:a3:8c:ad:78:01:c3:14:0b:8f:26:
                    d1:b7:70:8d:12:5a:d6:74:f6:ad:c4:dc:1f:3d:19:
                    9b:c8:f6:ba:53:98:5e:0f:d0:c2:c6:0b:44:6c:6c:
                    5b:a2:b7:ca:b4:f9:6e:23:3a:d6:00:b3:37:11:46:
                    31:b2:75:9f:c6:df:d5:d2:a3:2d:e5:1c:28:fa:d9:
                    da:39:cc:ad:a5:3b:61:a0:65:44:3f:b1:87:31:40:
                    15:b7:a2:2f:7a:61:ea:f4:53:79:31:b3:0b:5c:ee:
                    1d:44:55:de:66:03:2b:70:e0:12:a1:91:7c:45:b6:
                    db:01:bf:fc:4e:84:a5:d5:b5:2f:16:5b:49:fc:71:
                    18:46:b1:76:f9:54:00:5d:b7:4b:24:ac:5e:17:a1:
                    38:30:5d:35:6f:0f:18:34:9f:67:c4:e5:90:55:91:
                    42:5d:e5:d5:31:4a:3d:37:3c:68:b8:5e:0d:be:de:
                    f0:8d:5a:de:f0:3c:6a:42:cc:f1:50:4b:ef:99:0f:
                    2e:d6:1a:b9:52:39:f9:fa:66:66:3d:fb:56:42:25:
                    2e:2b:5d:ce:7a:85:13:1b:82:71:ab:6b:f2:11:fd:
                    54:cf:81:d2:6b:ea:1a:6b:a5:f8:42:38:d5:8c:d2:
                    4d:48:69:fc:6d:a3:48:fd:82:a1:8c:d1:78:16:68:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:A0:52:B9:50:67:F1:C8:9A:71:62:86:7D:33:0A:BE:25:C5:DD
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/xn-gUrlQZ_HImnFihn0zCr4lxd0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.211.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0e:cd:1f:d5:3c:71:b0:1d:79:9c:96:1c:ea:f3:37:4a:c6:1d:
         ca:26:7a:e3:e4:13:14:4f:7a:72:e3:de:86:03:e3:48:79:74:
         5f:41:55:92:0e:9c:f5:05:f7:bb:4e:86:40:9c:53:d8:12:19:
         fe:1f:e5:9e:39:94:39:86:86:06:f2:91:ec:fc:e2:54:b6:25:
         6f:1a:24:e8:2c:14:2f:92:46:6f:c2:bc:d5:8b:d2:cf:ad:51:
         91:53:bd:b5:dd:6c:94:20:6b:88:c3:40:2a:b1:30:55:a3:9b:
         45:00:6b:3a:93:4d:d8:50:a9:af:1d:ce:0f:c2:53:bf:95:c5:
         a7:8c:76:19:89:28:7c:e8:3d:d7:94:3c:aa:36:dc:a4:6a:8a:
         83:eb:b4:43:53:96:33:f1:3a:7c:f3:ad:2d:33:c3:28:86:16:
         f2:a9:c9:1a:f6:c6:3d:94:d1:ee:d7:1e:0f:e6:06:bf:ca:06:
         11:74:0d:53:d9:20:91:fd:9a:49:90:b0:ae:f8:d8:1d:09:17:
         1e:4b:52:60:68:fd:57:7c:40:ce:47:f9:a6:eb:70:6f:fe:6e:
         ad:db:64:4c:0a:7f:fb:95:64:40:bc:e2:84:c5:32:aa:b3:df:
         9d:a0:1d:5e:e7:3c:06:f5:fd:0c:81:01:50:d7:9f:aa:ee:fe:
         8d:b5:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----