Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30267/ZpQbVIOxS8xnO7M5OTIA8Yxrjn4.roa
File:                     ZpQbVIOxS8xnO7M5OTIA8Yxrjn4.roa (raw, json)
Hash identifier:          mYiXk6Bh2JS2htS+1vZTWPv9278VnfeoRU86nvW+OiU=
Subject key identifier:   66:94:1B:54:83:B1:4B:CC:67:3B:B3:39:39:32:00:F1:8C:6B:8E:7E
Certificate issuer:       /CN=AB99FE69A832191F847C33B243442E9D68AD1433
Certificate serial:       15
Authority key identifier: AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/ZpQbVIOxS8xnO7M5OTIA8Yxrjn4.roa
Signing time:             Tue 22 Jun 2021 03:09:41 +0000
ROA not before:           Tue 22 Jun 2021 03:09:41 +0000
ROA not after:            Wed 15 Jun 2022 01:30:03 +0000
asID:                     59103
IP address blocks:        2401:af80:9011::/56 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB99FE69A832191F847C33B243442E9D68AD1433
        Validity
            Not Before: Jun 22 03:09:41 2021 GMT
            Not After : Jun 15 01:30:03 2022 GMT
        Subject: CN=66941B5483B14BCC673BB339393200F18C6B8E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:56:de:7c:61:4f:57:1d:26:49:76:0e:d3:
                    57:18:a6:85:11:9a:f6:b1:04:9c:f8:d1:60:40:c9:
                    8c:a6:11:49:af:c8:b3:d6:76:47:f0:53:b1:3c:c1:
                    86:4e:a3:96:86:e2:66:58:4c:75:4c:d5:16:74:53:
                    c5:e6:82:3f:1c:d9:ca:49:87:a6:a0:e2:7d:85:97:
                    ed:a6:97:97:1c:aa:ed:5f:ae:3a:a5:65:13:0f:02:
                    0c:73:4d:24:f6:3f:19:ce:ef:e7:39:44:bc:bc:a5:
                    01:e9:35:e2:6f:84:03:2d:d5:ef:75:60:a5:cd:26:
                    6a:10:9b:fb:b6:39:18:e9:38:16:ff:8d:40:55:0a:
                    2c:fd:79:75:cd:d7:8a:56:32:8b:b9:ca:54:d1:7e:
                    56:be:18:b2:61:3d:6d:1f:97:c3:e6:93:30:f4:01:
                    3e:00:d4:1b:17:7c:01:7a:89:9a:e1:75:8d:d3:c0:
                    a9:98:47:26:7a:41:8a:7c:eb:42:a8:ae:b0:ec:56:
                    83:db:20:4d:55:64:84:dc:06:6e:06:2a:be:77:f3:
                    03:3d:41:5e:b6:7f:14:38:56:f8:1c:a8:a3:7c:e2:
                    bc:89:ff:8a:02:bc:ae:1d:b5:dc:21:44:96:73:2a:
                    a4:4b:72:c3:e1:da:77:13:20:bd:76:b9:b5:95:74:
                    0f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:94:1B:54:83:B1:4B:CC:67:3B:B3:39:39:32:00:F1:8C:6B:8E:7E
            X509v3 Authority Key Identifier:
                keyid:AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/ZpQbVIOxS8xnO7M5OTIA8Yxrjn4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af80:9011::/56

    Signature Algorithm: sha256WithRSAEncryption
         57:80:d1:c6:62:a1:2b:65:6e:59:fb:75:b3:a9:5a:91:64:85:
         94:77:a0:02:45:9f:14:2f:3d:30:44:cd:96:d4:c1:6a:fb:26:
         3b:22:c9:a5:c3:b5:73:93:1f:c2:5c:24:cd:f4:c6:03:7b:f6:
         e0:16:53:24:25:70:e0:74:00:ab:70:31:9a:1b:94:2d:c0:54:
         e2:9d:91:89:7f:6a:4e:4d:d6:ab:9f:6c:63:49:a1:2f:e2:1e:
         3a:2c:5a:85:9c:43:32:e5:64:f6:7d:48:35:44:c7:2b:d4:d3:
         98:f9:62:b4:23:55:79:fa:85:81:76:d1:48:1b:1c:5e:29:69:
         4a:d1:f1:8c:99:b6:84:a3:2c:69:01:ac:39:15:2c:55:01:4b:
         fa:83:9e:87:5d:c3:b4:f5:b3:1c:82:77:a6:c1:38:dc:65:23:
         35:c7:74:cb:be:0e:f0:b7:93:42:39:9f:f8:27:50:13:f6:53:
         73:2d:77:17:92:eb:91:a1:a4:3c:1f:39:4d:aa:9e:d0:a4:8f:
         1c:42:c1:56:a2:ca:84:a0:39:b3:1d:82:39:1c:7c:89:36:41:
         5a:fd:cc:6d:c5:ae:2d:0f:0b:f4:34:14:3d:8e:34:83:92:b0:
         c2:ce:8a:7e:4e:15:4c:01:a6:93:8f:18:04:df:d7:55:e0:19:
         ad:10:6b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----