Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/2AWu77O9d9puLEH5lwrEgp1nrPI.roa
File:                     2AWu77O9d9puLEH5lwrEgp1nrPI.roa (raw, json)
Hash identifier:          ZyaQ11so1TKkm4T9/Xr4D+yEU71nCc3BuZm//TtSqiY=
Subject key identifier:   D8:05:AE:EF:B3:BD:77:DA:6E:2C:41:F9:97:0A:C4:82:9D:67:AC:F2
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       22
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/2AWu77O9d9puLEH5lwrEgp1nrPI.roa
Signing time:             Tue 25 May 2021 02:47:07 +0000
ROA not before:           Tue 25 May 2021 02:47:07 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     37892
IP address blocks:        202.145.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: May 25 02:47:07 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=D805AEEFB3BD77DA6E2C41F9970AC4829D67ACF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:19:d9:21:56:4e:5d:df:06:4d:95:19:55:
                    f2:e5:57:3a:02:dc:ed:70:81:02:27:a3:d2:fe:55:
                    5e:d8:8a:02:0a:7b:03:b6:63:75:d5:0c:c8:60:f7:
                    a7:71:a5:95:28:c8:80:90:65:07:59:80:c5:f0:ac:
                    f7:bd:c3:08:ac:da:b8:f6:df:d8:45:55:08:e2:68:
                    66:33:87:a2:e6:7d:4c:be:c7:8d:3a:6d:8b:19:a9:
                    83:2f:8c:44:37:4b:1b:0e:05:cf:87:96:1d:90:1a:
                    79:63:53:a8:70:14:a7:77:ab:54:8b:cd:67:04:be:
                    ee:0f:14:db:7a:8b:c9:e9:6c:80:97:c4:1b:a6:71:
                    14:bc:5b:b3:92:10:8a:97:9a:e5:9c:ed:8d:ca:af:
                    51:1d:39:4d:91:18:a8:9a:bd:2f:7b:37:37:dc:fb:
                    2c:f8:71:da:09:02:e0:9e:a2:fa:b8:e9:84:5e:ec:
                    f0:e2:9f:3a:76:d5:c3:89:6c:63:de:3e:71:4a:52:
                    1a:0f:5c:82:c1:61:16:2b:b4:90:d3:9c:61:26:9f:
                    91:29:19:8b:f9:b8:d5:44:fd:fc:3a:68:db:97:0a:
                    94:5f:ad:c2:bb:f3:f5:2c:f9:36:d7:d9:32:76:3a:
                    a4:dd:77:4d:ea:58:8e:6f:e3:95:6b:c3:70:6f:63:
                    26:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:05:AE:EF:B3:BD:77:DA:6E:2C:41:F9:97:0A:C4:82:9D:67:AC:F2
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/2AWu77O9d9puLEH5lwrEgp1nrPI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:62:4b:17:0a:5f:31:5a:07:57:4d:5a:25:00:03:22:b1:a6:
         30:27:a6:8e:f4:78:39:f9:47:7b:22:87:f3:a6:cb:44:56:12:
         16:b6:ef:c9:b3:78:3b:72:57:23:6b:9a:3a:73:f2:cb:7b:bc:
         97:d1:b0:67:f2:c9:47:13:c7:86:1f:67:30:bf:69:87:c4:2b:
         fa:b3:9b:42:0f:75:b4:51:98:ad:f2:74:97:c7:c3:2b:62:d6:
         ef:ff:52:8a:b9:2f:45:fa:01:d2:9b:b8:33:09:90:f0:21:ed:
         65:c2:36:9b:01:df:72:d7:f2:e8:1a:d6:fb:2f:60:7a:44:4e:
         32:70:23:4c:d6:a4:5f:5d:0b:4c:91:6e:ac:ee:14:00:74:f9:
         1b:03:7d:c3:b9:18:ac:76:ef:bc:d6:9b:dc:02:51:67:3a:da:
         7b:2d:79:6c:f6:d0:db:05:77:39:ad:52:58:b2:4a:16:9f:5d:
         a4:6d:49:e3:cc:2c:1d:44:46:81:e9:c6:80:fe:eb:4d:fe:1e:
         04:73:fe:9a:a5:ae:be:be:77:40:57:6d:85:20:53:a7:ec:0c:
         34:bc:75:8b:80:69:0e:bf:be:ee:d5:6e:7c:58:a2:94:96:a0:
         53:2a:fd:b0:b2:7d:99:ae:d7:43:70:34:14:e0:30:21:f8:ac:
         b6:34:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----