Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/uXvYFdL1Ok-iUJbaDJje5E_1lL8.roa
File:                     uXvYFdL1Ok-iUJbaDJje5E_1lL8.roa (raw, json)
Hash identifier:          T9ZcOrZQSg3DVkJPrvbsyYuR45Le0KFOyhW99z6ILg8=
Subject key identifier:   B9:7B:D8:15:D2:F5:3A:4F:A2:50:96:DA:0C:98:DE:E4:4F:F5:94:BF
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       83
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uXvYFdL1Ok-iUJbaDJje5E_1lL8.roa
Signing time:             Sat 08 May 2021 04:05:45 +0000
ROA not before:           Sat 08 May 2021 04:05:45 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        122.16.0.0/12 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:45 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=B97BD815D2F53A4FA25096DA0C98DEE44FF594BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:a5:34:ea:ba:28:92:8a:04:9c:7e:86:a9:
                    dd:39:2c:ed:a3:c2:73:db:a9:de:d9:33:56:59:58:
                    11:98:bb:50:7d:ad:ed:4e:35:ca:9b:ed:91:c0:6f:
                    b9:0f:50:4f:f2:cd:3d:39:b5:72:b4:0c:30:2a:4d:
                    e2:58:82:bf:23:b5:b3:ac:5d:39:68:2c:ec:30:0e:
                    0a:c1:76:09:5b:ce:2d:d4:1c:25:47:c9:bd:ba:e0:
                    34:51:aa:f4:df:ce:98:4a:9d:c8:d7:6e:f0:64:09:
                    6d:ad:e4:0c:59:7b:bd:14:0d:96:03:c9:9a:65:99:
                    b7:6c:15:07:f8:a6:1a:f6:5a:61:ae:e2:ca:24:b0:
                    7e:cc:ff:3b:df:bd:82:79:a5:5d:ec:3c:f5:ef:ce:
                    e6:09:34:a3:fe:9b:ec:6a:e4:eb:4f:1d:16:af:d3:
                    92:87:8a:3b:62:19:62:e7:02:65:7a:53:20:00:2a:
                    7f:c3:35:4f:ee:8e:8d:d1:05:27:c0:97:96:0e:25:
                    31:69:17:74:c4:4a:f2:82:aa:7a:14:7d:4f:c3:1b:
                    e4:eb:9c:b1:07:de:6f:b6:28:14:0c:0f:86:36:9b:
                    d7:d0:52:bd:f2:e0:77:c1:49:c1:72:ad:e3:1a:97:
                    11:44:ba:42:80:a8:8c:b9:f6:72:c8:2c:a4:d1:9d:
                    e4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7B:D8:15:D2:F5:3A:4F:A2:50:96:DA:0C:98:DE:E4:4F:F5:94:BF
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uXvYFdL1Ok-iUJbaDJje5E_1lL8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.16.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         9e:bd:e9:f4:54:24:1d:77:ab:83:f4:32:68:ee:db:9e:9f:e4:
         16:ee:f8:c7:f4:50:6d:38:8f:78:03:73:ee:17:c0:0f:a1:17:
         9e:87:9e:bf:e0:4f:2d:33:3a:4c:a0:45:25:73:4a:db:95:53:
         11:a9:99:28:ae:8b:a7:52:1b:02:0b:bc:54:ea:c8:eb:5a:fc:
         b1:26:0c:46:29:39:50:22:3a:cd:2a:69:1c:81:cc:ec:6c:95:
         84:0d:7a:4a:4f:5b:f6:7c:f4:c2:49:7a:90:05:91:5e:f7:97:
         1e:82:75:c4:6c:14:a8:2b:e4:a0:9e:5b:bc:fe:32:9f:6c:9d:
         0e:ab:48:f4:f4:ba:19:36:17:1d:bc:5e:c6:4c:11:58:04:2e:
         f6:b3:0a:29:4c:f9:91:57:a1:c5:04:80:54:e0:34:31:c4:bf:
         38:e8:2f:96:70:2d:e7:62:3e:70:58:0e:79:5f:0b:93:ec:7e:
         38:e8:b0:22:48:ba:77:88:35:25:cb:d1:07:96:72:da:2f:2a:
         1c:29:28:1c:bd:b3:59:54:6a:15:69:6c:43:60:e9:cc:39:7b:
         e8:57:ac:df:88:eb:1c:2f:fe:f4:74:dc:2c:22:b7:3d:48:f0:
         d2:a9:ae:e2:14:ea:35:60:46:14:6f:95:92:da:ed:2f:60:f3:
         79:8f:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----