Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/Y1Mx0w3QcwQUbVELmbQJEPu-yuM.roa
File:                     Y1Mx0w3QcwQUbVELmbQJEPu-yuM.roa (raw, json)
Hash identifier:          6e85f50ApwgyXY2Z1rx66R9BI0HLJY30+d7W5zy0LTc=
Subject key identifier:   63:53:31:D3:0D:D0:73:04:14:6D:51:0B:99:B4:09:10:FB:BE:CA:E3
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       30
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/Y1Mx0w3QcwQUbVELmbQJEPu-yuM.roa
Signing time:             Tue 25 May 2021 02:36:48 +0000
ROA not before:           Tue 25 May 2021 02:36:48 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     7667
IP address blocks:        202.255.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: May 25 02:36:48 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=635331D30DD07304146D510B99B40910FBBECAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:39:59:2e:e2:d5:4d:90:ed:0e:7c:63:b4:
                    d3:9f:7b:be:46:95:b7:a9:31:ab:aa:77:04:1f:5e:
                    c8:69:93:07:37:b5:aa:40:9f:d1:6b:86:fd:f2:03:
                    28:88:07:41:40:17:59:6e:88:5b:7e:54:b1:13:15:
                    1e:be:0e:c4:4f:de:84:c2:78:cb:74:e8:de:88:75:
                    bc:f7:1e:29:ec:6c:7a:af:16:dc:65:a9:44:03:06:
                    ec:9c:6e:2f:8b:c0:8a:6d:22:df:dc:ac:36:4a:a2:
                    71:a3:eb:5b:90:ea:90:ff:49:53:bd:61:4e:a7:a3:
                    79:c4:8f:60:06:40:9f:a0:e4:2d:c2:b8:f4:0d:77:
                    50:c6:d1:6f:85:5f:78:0a:03:92:30:20:f4:29:f4:
                    29:19:f0:57:d3:aa:5c:5d:f0:31:a3:d2:c1:7b:5a:
                    68:07:f3:dd:8c:34:ae:54:f2:56:df:43:e3:80:37:
                    c1:06:d0:5d:b0:fe:5b:3b:33:a6:a8:54:73:8f:8d:
                    59:00:ce:25:f9:3c:09:fd:1d:3f:2e:9d:79:ae:cd:
                    d3:fe:84:89:99:ea:9e:39:45:ff:ba:e9:71:a3:33:
                    05:24:df:e6:b8:c3:c4:fe:72:8d:7c:98:65:38:cb:
                    a1:21:2c:23:aa:7d:82:6e:48:74:53:ca:e1:82:d4:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:53:31:D3:0D:D0:73:04:14:6D:51:0B:99:B4:09:10:FB:BE:CA:E3
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/Y1Mx0w3QcwQUbVELmbQJEPu-yuM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ef:7c:40:70:0e:06:3a:e2:f8:18:6a:cd:9b:ce:29:ba:ca:
         99:1c:ee:db:8b:38:29:51:c4:d4:50:70:17:01:86:67:e9:c5:
         af:ca:65:a0:3f:81:00:ab:85:b5:96:f6:f9:7e:14:ce:ab:af:
         56:0c:fd:66:10:23:c0:b0:cd:92:78:97:2b:c5:1a:c9:ec:bc:
         22:ad:c6:98:3f:ba:ac:21:eb:6c:0c:26:84:90:1c:94:cd:74:
         9c:ac:b6:22:6c:70:8d:ec:32:25:1b:0a:6c:b0:8c:7b:2c:a9:
         e0:13:1a:5a:44:f3:93:ae:97:3c:eb:ec:05:5a:58:46:df:29:
         1f:17:70:e2:9e:ba:b6:ba:c9:a9:0f:97:1c:d2:d4:b7:a7:a5:
         bf:37:75:ab:78:77:f8:ea:55:78:5e:cd:a3:2e:cf:26:83:d9:
         76:cb:69:07:79:2e:cb:8a:33:4c:92:54:e4:0f:e2:74:88:55:
         25:b0:2a:3c:07:55:dd:ea:b0:de:b3:23:e9:fc:ae:cd:22:24:
         ba:31:cf:fd:b2:89:fe:0d:7d:81:23:b6:c3:df:96:a1:bf:b4:
         f9:6d:a2:3f:9a:85:58:64:a3:54:2c:ae:6b:1e:2b:b4:d6:1b:
         1c:d7:64:ed:bd:27:f8:ae:1e:f0:da:bd:ce:a3:ed:de:49:4b:
         2c:f6:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----