Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/wJYHyWy_TRTX7WnUOU36k763mr4.roa
File:                     wJYHyWy_TRTX7WnUOU36k763mr4.roa (raw, json)
Hash identifier:          oD/FB0mK7z/VqaAdiIimf2Pq6/L9FON6dL2kmZeOxrY=
Subject key identifier:   C0:96:07:C9:6C:BF:4D:14:D7:ED:69:D4:39:4D:FA:93:BE:B7:9A:BE
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       A1
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/wJYHyWy_TRTX7WnUOU36k763mr4.roa
Signing time:             Sat 05 Jun 2021 03:47:33 +0000
ROA not before:           Sat 05 Jun 2021 03:47:33 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     4713
IP address blocks:        223.216.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun  5 03:47:33 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=C09607C96CBF4D14D7ED69D4394DFA93BEB79ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:fd:b8:3f:d4:5b:74:18:84:b5:c7:ba:e2:
                    bc:5c:91:c3:1c:ba:9a:bc:11:86:54:35:13:1d:0a:
                    db:9d:73:41:86:18:e4:9d:54:cd:05:12:4a:ca:4f:
                    95:9a:81:63:50:13:a7:b5:68:e5:70:ca:85:59:e9:
                    6e:0d:e9:ab:d2:9f:78:4b:00:37:22:e3:20:b7:26:
                    28:53:61:56:94:fd:ee:60:4b:73:64:22:0c:8e:79:
                    d1:a8:2a:db:71:9e:89:2c:32:37:5c:ee:18:3d:95:
                    55:8f:8e:4d:86:28:0a:f1:7c:65:36:1f:4e:60:88:
                    c4:f1:e3:17:61:46:0e:15:06:5e:76:52:5d:99:bc:
                    ee:15:aa:95:e7:ee:45:16:65:e8:03:2c:a7:4a:ae:
                    6a:5e:22:40:c8:df:e1:05:8b:e1:19:cb:97:fa:e3:
                    a1:78:cb:f3:04:02:db:1f:4b:0e:77:94:48:41:53:
                    ae:86:80:92:90:f2:b0:ef:b2:96:b1:32:b8:e0:c9:
                    38:d4:c5:48:b5:a3:60:e6:06:f4:ba:b5:25:97:0e:
                    59:e6:1a:ea:04:71:b5:66:fe:c2:2a:88:39:13:14:
                    0e:cf:b0:77:6c:04:bc:c5:47:13:63:76:46:a3:ce:
                    e1:3b:70:0f:7d:b8:77:4b:48:f8:cd:5b:c1:f8:9c:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:96:07:C9:6C:BF:4D:14:D7:ED:69:D4:39:4D:FA:93:BE:B7:9A:BE
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/wJYHyWy_TRTX7WnUOU36k763mr4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.216.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:80:42:d1:95:f7:87:b4:93:04:c0:91:10:92:ee:3e:63:
         12:72:46:80:14:d8:96:90:83:3b:a8:09:f5:61:da:c4:59:b5:
         a5:16:bd:2e:16:35:d6:2d:15:14:6f:07:ac:43:bb:b9:f3:6c:
         a1:1b:d5:ed:86:46:c8:09:c7:aa:9c:1f:35:61:68:70:ed:4d:
         40:42:4e:65:03:35:7c:6a:ae:42:44:e7:59:d0:d0:e0:92:5a:
         3b:14:e0:46:72:74:6f:d2:2f:c7:ff:9d:35:d6:17:12:fa:79:
         2d:d0:ea:7e:40:31:9b:ff:80:71:11:94:ef:4a:56:3f:4c:51:
         d4:b6:74:7f:a8:ad:5e:2c:e9:55:24:2b:8a:83:88:a9:68:4e:
         09:e1:3b:ac:8b:33:39:8e:e7:2a:0e:76:5c:92:34:9f:4f:75:
         8f:e6:31:15:8e:7d:e2:f1:da:d5:3b:9d:a1:cf:a0:ad:f5:16:
         97:9b:ec:29:38:73:64:35:ce:b3:84:53:66:52:09:d5:81:ef:
         7a:ae:33:59:5b:b5:1e:af:00:d0:02:6b:d8:5d:88:ba:e8:73:
         6f:da:77:4f:f4:12:4c:38:f9:9e:85:d9:4e:2e:3e:36:f2:f1:
         05:42:24:79:36:32:e5:03:bb:ff:b3:c9:f7:c1:53:75:d3:77:
         65:c7:3d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----