Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/g2K79-EgNHbaV7ouVXpq0wdQWtk.roa
File:                     g2K79-EgNHbaV7ouVXpq0wdQWtk.roa (raw, json)
Hash identifier:          TGRdX8pJuwTZ0nt61Buq2j8ctS0uZeJ2CUbVycbTBiw=
Subject key identifier:   83:62:BB:F7:E1:20:34:76:DA:57:BA:2E:55:7A:6A:D3:07:50:5A:D9
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       3A
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/g2K79-EgNHbaV7ouVXpq0wdQWtk.roa
Signing time:             Sun 01 May 2022 01:31:17 +0000
ROA not before:           Sun 01 May 2022 01:31:17 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     37892
IP address blocks:        124.247.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: May  1 01:31:17 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=8362BBF7E1203476DA57BA2E557A6AD307505AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:0b:5c:20:1f:41:e1:0a:12:92:d5:f5:68:
                    c0:56:17:9e:d9:43:62:1b:dd:3f:c7:1f:49:62:ee:
                    49:a2:d8:4f:32:e6:70:61:a0:ee:f5:8b:b6:d8:b9:
                    0d:a0:62:68:cb:44:30:bb:b6:f8:d9:08:8d:f1:5c:
                    9c:3f:dd:30:ab:df:30:16:7a:71:62:f1:ec:f3:28:
                    48:f1:79:62:fa:6f:03:61:6e:a2:52:b0:1d:d5:10:
                    99:09:8e:93:5f:fd:b7:d5:a7:61:d1:b6:d4:4a:04:
                    9a:db:55:e5:aa:3f:b5:df:47:6a:5b:25:04:fe:1b:
                    22:f7:8a:69:79:71:aa:72:85:85:89:25:b4:3a:20:
                    fb:a1:86:09:a6:b5:75:47:c8:9c:5e:dc:19:f5:8a:
                    e3:12:04:3b:41:2c:b5:30:8e:13:e2:82:18:cb:90:
                    2f:f5:96:5d:50:0e:8d:74:19:6c:8b:b9:fd:9b:1c:
                    f8:2a:e8:a9:38:6d:78:6a:ac:63:43:fe:6d:8b:f8:
                    ad:05:02:10:90:91:12:45:b0:f4:64:56:6f:18:51:
                    78:5c:db:e8:af:16:e4:40:29:a0:93:15:82:2e:63:
                    54:d2:00:ab:a7:ea:ec:3e:00:6d:72:f2:e9:df:d1:
                    61:a8:ce:08:9c:b0:11:56:a1:87:40:3a:e4:b9:77:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:62:BB:F7:E1:20:34:76:DA:57:BA:2E:55:7A:6A:D3:07:50:5A:D9
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/g2K79-EgNHbaV7ouVXpq0wdQWtk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8f:92:32:82:ff:2c:32:84:7d:7e:16:02:96:25:b7:8b:29:d8:
         69:e2:89:53:24:28:4b:54:4a:16:2b:4c:8f:c6:76:ff:54:a6:
         ed:67:73:e3:61:91:f8:ea:c9:85:fe:fe:6a:49:21:15:a5:9d:
         b3:72:72:e9:e3:a1:1d:96:51:bd:93:3f:e5:33:6b:a0:58:5e:
         84:96:f3:48:5d:30:b1:16:d5:06:26:19:d8:ff:94:fa:bf:2f:
         a4:4c:bc:8a:8a:e7:c5:4a:81:48:09:45:91:2f:d3:c7:c8:c8:
         36:84:71:8c:2a:5e:93:79:80:0a:09:c5:42:82:8f:ff:c6:61:
         14:e1:7d:73:7d:05:9b:12:4b:d7:9b:07:10:ec:60:cc:ad:f7:
         8a:b0:e5:02:00:de:de:16:6c:3d:d0:57:0e:90:ed:13:4d:b9:
         90:12:0b:ee:62:b7:02:fd:1a:f5:f4:d1:ff:58:b9:13:f8:6f:
         63:5b:f2:f6:ef:3c:9f:a2:23:7f:fb:63:20:02:32:48:2b:8d:
         5b:db:ef:e1:09:c0:43:a7:1d:36:05:ef:2c:3f:e9:8d:76:a7:
         b6:b2:6b:89:e3:f1:a8:f6:45:eb:49:4e:e9:ea:e8:9a:c2:a7:
         79:98:86:bd:c6:0e:2a:fa:10:35:b1:7c:b7:bc:c3:da:48:ce:
         c2:91:d2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----