Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13131/zFQLi3a9DRwGBsHSUbe1IGRcyBk.roa
File:                     zFQLi3a9DRwGBsHSUbe1IGRcyBk.roa (raw, json)
Hash identifier:          6mEmrqHW+PHGi4nMoK+erDGhM18+vHCpDxCDws+opds=
Subject key identifier:   CC:54:0B:8B:76:BD:0D:1C:06:06:C1:D2:51:B7:B5:20:64:5C:C8:19
Certificate issuer:       /CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
Certificate serial:       1F
Authority key identifier: FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/zFQLi3a9DRwGBsHSUbe1IGRcyBk.roa
Signing time:             Tue 25 May 2021 02:31:46 +0000
ROA not before:           Tue 25 May 2021 02:31:46 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     38639
IP address blocks:        115.69.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
        Validity
            Not Before: May 25 02:31:46 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=CC540B8B76BD0D1C0606C1D251B7B520645CC819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:91:5d:0f:a1:a9:e4:82:28:e9:8d:32:27:
                    49:81:f8:da:7b:03:9f:f8:a9:33:58:be:e3:dd:98:
                    bb:84:8f:b9:ca:37:56:18:60:2a:48:40:77:fa:ae:
                    63:82:81:77:8b:bd:0b:d4:5c:f1:a4:b7:3f:01:e2:
                    83:80:9e:d1:26:02:73:a8:26:3e:d4:c9:74:92:38:
                    4a:46:2c:3e:b7:5b:a6:0d:b4:b9:d7:f7:29:48:e7:
                    b3:96:24:4e:6e:df:16:78:19:25:51:97:13:a8:22:
                    45:94:1a:3b:1f:6d:43:b4:42:91:c2:94:79:f1:7d:
                    df:5c:d4:1c:27:6f:cf:9e:2b:07:ca:86:4a:1b:e8:
                    bb:dc:52:99:53:c0:91:ea:95:c2:77:91:84:86:2c:
                    4e:33:a5:38:2b:0e:fa:e9:a4:7e:65:84:2f:69:56:
                    5e:86:f2:4e:5f:9c:5a:89:87:7d:75:d4:73:80:87:
                    12:20:89:9c:1e:c8:6d:68:ce:b6:da:77:78:ef:f3:
                    c0:c0:db:6d:56:9a:a0:c0:ee:b7:f1:49:e9:ad:ec:
                    18:30:0b:1c:c8:b2:bb:1f:61:ee:46:5f:2d:38:6f:
                    e2:47:a5:3b:26:c3:2a:de:8f:7f:53:38:f2:42:f6:
                    41:4f:50:c1:cb:c5:53:b0:cc:59:83:a0:73:63:6f:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:54:0B:8B:76:BD:0D:1C:06:06:C1:D2:51:B7:B5:20:64:5C:C8:19
            X509v3 Authority Key Identifier:
                keyid:FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/zFQLi3a9DRwGBsHSUbe1IGRcyBk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:f8:b8:7e:ff:fe:6a:a4:e1:3b:79:66:23:9b:33:4d:90:6b:
         61:92:23:9a:81:2c:7c:68:4b:50:dd:2b:36:21:7e:43:64:42:
         b5:d0:d6:35:3c:18:60:da:c3:78:86:ed:2c:a0:13:f0:ff:ad:
         52:83:95:a6:e4:09:f1:6c:d8:ca:7b:65:dc:db:2f:c5:b1:03:
         cc:0d:58:e9:b1:6c:f3:08:9c:a8:71:8e:d3:48:e6:a6:58:d6:
         9c:1a:f3:fd:13:1b:2b:a0:e7:97:87:71:5f:d9:ba:2c:1d:3e:
         fb:fe:23:d1:ec:c8:89:73:93:62:bc:a2:af:a8:5b:e9:32:0d:
         d2:c8:54:1e:18:61:4d:c2:e6:35:23:d9:6b:33:39:38:45:07:
         ca:9b:12:43:d0:b7:9a:68:c6:9d:1d:63:b4:39:ee:da:f8:5f:
         86:33:3b:76:3d:d1:e2:45:9a:f1:ed:0c:71:b4:c0:c5:6a:19:
         c7:c3:ac:6e:49:02:be:7a:a9:d5:6a:b6:a9:4e:28:78:5c:40:
         58:3d:11:41:43:b3:84:64:54:0a:14:f3:1a:92:ab:4e:99:9d:
         5c:da:30:f9:e5:07:6a:75:43:3b:4b:35:04:2f:05:34:00:31:
         ef:07:2f:45:7c:23:01:bf:01:48:96:10:2d:de:e3:5a:7d:ad:
         69:4b:55:92
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRDEz
RDgyMkE0REQ3QkEwNTA3OEY5RTYwMDI1RjhCRkYxMUJFRjgyMB4XDTIxMDUyNTAy
MzE0NloXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0M1NDBCOEI3NkJEMEQx
QzA2MDZDMUQyNTFCN0I1MjA2NDVDQzgxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANdYkV0PoankgijpjTInSYH42nsDn/ipM1i+492Yu4SPuco3Vhhg
KkhAd/quY4KBd4u9C9Rc8aS3PwHig4Ce0SYCc6gmPtTJdJI4SkYsPrdbpg20udf3
KUjns5YkTm7fFngZJVGXE6giRZQaOx9tQ7RCkcKUefF931zUHCdvz54rB8qGShvo
u9xSmVPAkeqVwneRhIYsTjOlOCsO+umkfmWEL2lWXobyTl+cWomHfXXUc4CHEiCJ
nB7IbWjOttp3eO/zwMDbbVaaoMDut/FJ6a3sGDALHMiyux9h7kZfLThv4kelOybD
Kt6Pf1M48kL2QU9QwcvFU7DMWYOgc2NvzJUCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBTMVAuLdr0NHAYGwdJRt7UgZFzIGTAfBgNVHSMEGDAWgBT9E9gipN17oFB4+eYA
Jfi/8RvvgjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMxMzEvX1JQWUlxVGRlNkJRZVBubUFDWDR2X0ViNzRJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX1JQWUlxVGRlNkJRZVBubUFDWDR2
X0ViNzRJLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEzMTMxL3pGUUxpM2E5RFJ3R0JzSFNVYmUxSUdSY3lCay5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANzReAwDQYJKoZIhvcNAQELBQAD
ggEBAC/4uH7//mqk4Tt5ZiObM02Qa2GSI5qBLHxoS1DdKzYhfkNkQrXQ1jU8GGDa
w3iG7SygE/D/rVKDlabkCfFs2Mp7ZdzbL8WxA8wNWOmxbPMInKhxjtNI5qZY1pwa
8/0TGyug55eHcV/ZuiwdPvv+I9HsyIlzk2K8oq+oW+kyDdLIVB4YYU3C5jUj2Wsz
OThFB8qbEkPQt5poxp0dY7Q57tr4X4YzO3Y90eJFmvHtDHG0wMVqGcfDrG5JAr56
qdVqtqlOKHhcQFg9EUFDs4RkVAoU8xqSq06ZnVzaMPnlB2p1QztLNQQvBTQAMe8H
L0V8IwG/AUiWEC3e41p9rWlLVZI=
-----END CERTIFICATE-----