Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/yTi2AQARHlLnbLUHYDW55teuLFc.roa
File:                     yTi2AQARHlLnbLUHYDW55teuLFc.roa (raw, json)
Hash identifier:          KsNahaNP/hdrv6KpWkPWiMPPetquNcGss94nUaWNoP4=
Subject key identifier:   C9:38:B6:01:00:11:1E:52:E7:6C:B5:07:60:35:B9:E6:D7:AE:2C:57
Certificate issuer:       /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial:       11
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/yTi2AQARHlLnbLUHYDW55teuLFc.roa
Signing time:             Thu 21 Oct 2021 08:44:28 +0000
ROA not before:           Thu 21 Oct 2021 08:44:28 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     38651
IP address blocks:        103.109.240.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
        Validity
            Not Before: Oct 21 08:44:28 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=C938B60100111E52E76CB5076035B9E6D7AE2C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:1e:85:1e:88:de:d5:45:a3:3a:77:87:47:
                    8e:c1:99:aa:4d:b3:ea:d8:15:82:43:3c:67:c0:a6:
                    55:1a:38:87:95:16:da:24:cc:2b:3c:7f:d0:82:9c:
                    5a:da:4e:c3:6c:d8:d7:b6:9a:18:7f:c2:a6:fe:75:
                    c2:14:eb:a0:f9:e5:18:ca:fb:93:a8:1d:a6:f7:58:
                    77:51:44:b5:51:27:e2:76:ce:7f:f2:da:c1:76:c3:
                    38:c5:26:28:5a:c3:9e:ba:19:95:e6:81:91:d9:93:
                    ff:0b:7d:6c:35:8c:ce:5d:fc:5f:6b:b9:1b:00:3e:
                    dc:5e:4c:bf:ab:f5:88:a0:31:d6:3c:47:18:c5:3c:
                    96:9f:5c:57:a1:45:dc:30:6b:7a:68:d9:45:13:a8:
                    a7:5e:31:04:fa:a5:c9:80:9a:27:d7:9c:b2:8b:e0:
                    ab:e9:18:4a:1c:e0:88:ce:25:d3:a1:c9:30:42:7f:
                    ca:57:d6:67:15:66:25:c6:6f:7d:aa:c3:49:3e:f1:
                    37:8e:5a:c1:53:f4:36:5a:a4:38:31:e4:1e:d0:bc:
                    79:ca:9a:4d:3e:44:ad:a8:d1:2c:cc:b5:8a:36:ea:
                    57:6e:95:89:27:20:70:5e:4d:c2:76:56:42:e2:3f:
                    ef:18:51:3a:d6:df:d6:58:63:b8:a4:5f:31:4f:8e:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:38:B6:01:00:11:1E:52:E7:6C:B5:07:60:35:B9:E6:D7:AE:2C:57
            X509v3 Authority Key Identifier:
                keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/yTi2AQARHlLnbLUHYDW55teuLFc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:99:11:62:26:32:ac:62:dc:b3:24:1a:f6:d2:ea:3d:58:0e:
         80:ea:5e:11:00:9c:0e:ad:d6:d2:9d:6d:95:46:5e:8d:d0:af:
         6e:26:5b:d9:28:c3:76:3c:94:23:41:ea:94:58:d2:01:14:69:
         cc:6e:88:a3:e3:b2:c3:c2:a2:f9:8a:96:49:97:0c:a5:2e:ff:
         f0:cb:58:65:30:4a:d8:22:c7:12:fd:c6:6f:76:a4:e6:d6:9d:
         e3:31:5b:a4:1b:53:c8:69:45:10:59:ac:89:ea:6a:34:65:1c:
         e0:f4:5f:6f:9f:2f:5e:58:3e:ce:2c:6b:8e:e3:82:b8:2b:51:
         64:f0:29:0c:90:f5:03:86:7e:63:5d:f6:15:64:f1:21:89:ac:
         6d:b7:02:d5:47:45:51:05:46:07:19:38:97:99:18:58:02:be:
         d0:c4:2a:84:0c:5d:bd:53:ed:af:1b:d0:27:b4:35:08:25:0e:
         6b:0a:5f:de:cc:e6:4d:0d:03:e2:6b:f6:aa:3c:5c:af:b1:43:
         a7:97:c9:17:c6:ce:fe:8a:d6:62:41:dc:8f:3f:95:9b:68:ed:
         3a:ce:f3:dd:61:0f:6e:8d:a0:d4:bd:9f:f3:0f:df:1a:c1:4c:
         84:38:39:41:88:38:f1:59:df:c4:62:31:3b:83:59:27:ce:d0:
         1d:4f:a2:93
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RjNF
MzNBQTZGOTJBODM3RkE4OTQ0QUI4MzYyN0QzQjQ0RTBDRjRBMB4XDTIxMTAyMTA4
NDQyOFoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQzkzOEI2MDEwMDExMUU1
MkU3NkNCNTA3NjAzNUI5RTZEN0FFMkM1NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALMbHoUeiN7VRaM6d4dHjsGZqk2z6tgVgkM8Z8CmVRo4h5UW2iTM
Kzx/0IKcWtpOw2zY17aaGH/Cpv51whTroPnlGMr7k6gdpvdYd1FEtVEn4nbOf/La
wXbDOMUmKFrDnroZleaBkdmT/wt9bDWMzl38X2u5GwA+3F5Mv6v1iKAx1jxHGMU8
lp9cV6FF3DBremjZRROop14xBPqlyYCaJ9ecsovgq+kYShzgiM4l06HJMEJ/ylfW
ZxVmJcZvfarDST7xN45awVP0NlqkODHkHtC8ecqaTT5ErajRLMy1ijbqV26ViScg
cF5NwnZWQuI/7xhROtbf1lhjuKRfMU+O7HMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTJOLYBABEeUudstQdgNbnm164sVzAfBgNVHSMEGDAWgBRfPjOqb5KoN/qJRKuD
Yn07RODPSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTcyL1h6NHpxbS1TcURmNmlVU3JnMko5TzBUZ3owby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1h6NHpxbS1TcURmNmlVU3JnMko5TzBU
Z3owby5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NzIveVRpMkFRQVJIbExuYkxVSFlEVzU1dGV1TEZjLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdt8DANBgkqhkiG9w0BAQsFAAOCAQEA
GJkRYiYyrGLcsyQa9tLqPVgOgOpeEQCcDq3W0p1tlUZejdCvbiZb2SjDdjyUI0Hq
lFjSARRpzG6Io+Oyw8Ki+YqWSZcMpS7/8MtYZTBK2CLHEv3Gb3ak5tad4zFbpBtT
yGlFEFmsiepqNGUc4PRfb58vXlg+zixrjuOCuCtRZPApDJD1A4Z+Y132FWTxIYms
bbcC1UdFUQVGBxk4l5kYWAK+0MQqhAxdvVPtrxvQJ7Q1CCUOawpf3szmTQ0D4mv2
qjxcr7FDp5fJF8bO/orWYkHcjz+Vm2jtOs7z3WEPbo2g1L2f8w/fGsFMhDg5QYg4
8VnfxGIxO4NZJ87QHU+ikw==
-----END CERTIFICATE-----