Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30267/HLFB4M_n8JNLHfPjeeRINrWcE8I.roa
File:                     HLFB4M_n8JNLHfPjeeRINrWcE8I.roa (raw, json)
Hash identifier:          s9xs61x75dfHluK3orJNju93Il6OgjO3C4YgZNn7Cy0=
Subject key identifier:   1C:B1:41:E0:CF:E7:F0:93:4B:1D:F3:E3:79:E4:48:36:B5:9C:13:C2
Certificate issuer:       /CN=AB99FE69A832191F847C33B243442E9D68AD1433
Certificate serial:       12
Authority key identifier: AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/HLFB4M_n8JNLHfPjeeRINrWcE8I.roa
Signing time:             Sat 19 Jun 2021 08:42:03 +0000
ROA not before:           Sat 19 Jun 2021 08:42:03 +0000
ROA not after:            Wed 15 Jun 2022 01:30:03 +0000
asID:                     16509
IP address blocks:        2401:af80:9011::/56 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB99FE69A832191F847C33B243442E9D68AD1433
        Validity
            Not Before: Jun 19 08:42:03 2021 GMT
            Not After : Jun 15 01:30:03 2022 GMT
        Subject: CN=1CB141E0CFE7F0934B1DF3E379E44836B59C13C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:ab:07:49:70:00:5c:12:88:57:24:28:a7:
                    e5:bc:1a:dc:d6:51:3e:8e:a5:95:52:f4:29:6a:cf:
                    7a:69:a9:41:1a:37:c9:86:40:88:7b:1b:57:de:18:
                    ce:50:3a:62:60:f5:3b:20:33:4a:26:ed:b8:55:43:
                    e7:ce:f3:ee:6c:f3:97:55:81:35:7f:fc:be:30:a1:
                    94:09:a0:cf:06:86:cb:af:08:ef:ae:61:90:67:06:
                    01:bf:08:e1:9c:61:96:bc:68:83:9e:ee:c7:e8:d2:
                    01:85:09:95:07:68:82:b4:d2:ed:4e:7d:79:73:11:
                    87:60:7b:97:24:73:8e:6b:1e:43:8e:ab:a4:4b:76:
                    45:a0:66:a2:ff:96:38:bd:26:5a:47:b5:b8:95:1a:
                    55:70:b4:64:58:30:26:81:43:93:d4:42:54:a5:d4:
                    0f:26:d1:e1:52:90:66:6b:55:87:83:1d:cb:34:f2:
                    93:69:37:0b:7d:c5:05:65:d4:cd:7a:af:ae:9e:37:
                    53:15:3e:42:c3:c9:2a:0b:4d:54:3c:c5:7c:37:ed:
                    27:41:43:87:be:78:4d:7f:82:1d:87:7e:35:9a:95:
                    4a:3b:68:2d:06:5e:66:77:9c:d8:36:59:26:3b:fe:
                    1f:56:00:fe:be:f8:b4:7e:67:58:f0:d6:15:7e:53:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B1:41:E0:CF:E7:F0:93:4B:1D:F3:E3:79:E4:48:36:B5:9C:13:C2
            X509v3 Authority Key Identifier:
                keyid:AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/HLFB4M_n8JNLHfPjeeRINrWcE8I.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af80:9011::/56

    Signature Algorithm: sha256WithRSAEncryption
         a1:c2:2f:d4:85:cb:0d:26:d5:15:2c:8e:42:b9:80:8d:d6:13:
         06:9d:81:20:1b:95:2c:d2:51:94:6b:37:99:5c:33:9f:7e:ea:
         ef:59:23:bb:e4:94:c6:08:69:73:fd:a3:6b:53:72:84:9a:50:
         fe:de:ff:b6:73:57:0d:37:b6:0d:86:cd:8c:c6:ca:5a:b7:e4:
         b9:a6:5f:fa:78:65:99:ad:07:a5:74:fa:e8:8d:38:56:53:a0:
         f5:56:10:ee:ba:57:74:0f:a5:93:b9:bc:0a:48:b9:31:19:d7:
         57:5b:4f:52:d1:da:23:a7:e5:38:68:64:28:b6:70:62:bf:7a:
         05:aa:69:4c:68:e4:fd:2a:67:6d:f3:c4:ca:1b:66:1c:56:9f:
         71:61:87:1b:f5:6e:21:9d:02:85:67:53:49:4d:f4:eb:d2:41:
         8d:6d:97:55:d2:2c:b5:88:45:8e:ba:e3:50:c5:59:9e:2b:9a:
         b6:e8:85:b9:4a:2f:e0:7f:57:4a:f8:10:5c:85:b9:cc:b4:bb:
         01:4b:3e:52:91:7b:57:19:d2:94:23:3e:46:4d:ab:cd:32:c8:
         b7:a0:fe:2f:85:4f:bc:cf:06:f3:0f:7f:f8:bc:70:ff:d4:8e:
         53:0a:c5:a5:3d:cf:1e:49:49:60:62:7f:55:94:de:7b:27:98:
         22:e4:c0:49
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQjk5
RkU2OUE4MzIxOTFGODQ3QzMzQjI0MzQ0MkU5RDY4QUQxNDMzMB4XDTIxMDYxOTA4
NDIwM1oXDTIyMDYxNTAxMzAwM1owMzExMC8GA1UEAxMoMUNCMTQxRTBDRkU3RjA5
MzRCMURGM0UzNzlFNDQ4MzZCNTlDMTNDMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANmJqwdJcABcEohXJCin5bwa3NZRPo6llVL0KWrPemmpQRo3yYZA
iHsbV94YzlA6YmD1OyAzSibtuFVD587z7mzzl1WBNX/8vjChlAmgzwaGy68I765h
kGcGAb8I4Zxhlrxog57ux+jSAYUJlQdogrTS7U59eXMRh2B7lyRzjmseQ46rpEt2
RaBmov+WOL0mWke1uJUaVXC0ZFgwJoFDk9RCVKXUDybR4VKQZmtVh4MdyzTyk2k3
C33FBWXUzXqvrp43UxU+QsPJKgtNVDzFfDftJ0FDh754TX+CHYd+NZqVSjtoLQZe
Znec2DZZJjv+H1YA/r74tH5nWPDWFX5Tp+sCAwEAAaOCAeEwggHdMB0GA1UdDgQW
BBQcsUHgz+fwk0sd8+N55Eg2tZwTwjAfBgNVHSMEGDAWgBSrmf5pqDIZH4R8M7JD
RC6daK0UMzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyNjcvcTVuLWFhZ3lHUi1FZkRPeVEwUXVuV2l0RkRNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcTVuLWFhZ3lHUi1FZkRPeVEwUXVu
V2l0RkRNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMjY3L0hMRkI0TV9uOEpOTEhmUGplZVJJTnJXY0U4SS5yb2Ew
IwYIKwYBBQUHAQcBAf8EFDASMBAEAgACMAoDCAAkAa+AkBEAMA0GCSqGSIb3DQEB
CwUAA4IBAQChwi/UhcsNJtUVLI5CuYCN1hMGnYEgG5Us0lGUazeZXDOffurvWSO7
5JTGCGlz/aNrU3KEmlD+3v+2c1cNN7YNhs2Mxspat+S5pl/6eGWZrQeldProjThW
U6D1VhDuuld0D6WTubwKSLkxGddXW09S0dojp+U4aGQotnBiv3oFqmlMaOT9Kmdt
88TKG2YcVp9xYYcb9W4hnQKFZ1NJTfTr0kGNbZdV0iy1iEWOuuNQxVmeK5q26IW5
Si/gf1dK+BBchbnMtLsBSz5SkXtXGdKUIz5GTavNMsi3oP4vhU+8zwbzD3/4vHD/
1I5TCsWlPc8eSUlgYn9VlN57J5gi5MBJ
-----END CERTIFICATE-----