Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/B6oBfHx78xHxJp5229BZxDHL5qM.roa
File:                     B6oBfHx78xHxJp5229BZxDHL5qM.roa (raw, json)
Hash identifier:          HIo6DLACaPDcKwxANoGXcfd2Le3CsWBpk4FOadO75/Y=
Subject key identifier:   07:AA:01:7C:7C:7B:F3:11:F1:26:9E:76:DB:D0:59:C4:31:CB:E6:A3
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       6D
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/B6oBfHx78xHxJp5229BZxDHL5qM.roa
Signing time:             Wed 06 Oct 2021 03:01:54 +0000
ROA not before:           Wed 06 Oct 2021 03:01:54 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     19905
IP address blocks:        14.192.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Oct  6 03:01:54 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=07AA017C7C7BF311F1269E76DBD059C431CBE6A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b1:59:af:99:c0:f3:25:f3:4e:ea:99:86:4e:
                    30:6a:06:cd:16:ea:b8:05:ac:04:cb:0a:68:5d:cb:
                    b5:01:bc:8d:c9:b7:b4:bb:ae:31:46:c9:f5:58:ac:
                    44:f3:6a:1e:99:8f:78:4c:8b:91:c3:21:04:b4:b7:
                    c5:42:64:2e:1a:f6:27:35:46:fa:0b:d5:a1:31:76:
                    f8:e3:86:6f:01:1e:7c:c2:58:07:4e:04:60:3b:3f:
                    4c:39:5c:bf:34:56:83:a5:20:1c:51:1e:84:1c:3a:
                    76:79:97:5c:90:fc:6b:8c:10:7d:01:af:7b:11:22:
                    87:7d:76:71:84:f3:13:87:38:49:fa:fa:08:44:f4:
                    2b:64:19:e3:1d:ae:76:43:6d:e7:7a:02:0c:01:1d:
                    a7:4b:ec:8c:aa:1a:a7:03:5e:d0:21:6a:25:32:55:
                    b0:d2:23:60:85:da:4a:7c:a2:0f:57:2a:2f:37:85:
                    ff:87:30:53:f1:df:43:c5:e7:11:9e:26:79:ab:d3:
                    b9:d4:55:2c:16:7c:1b:2a:f3:37:d8:6e:60:43:fc:
                    10:35:4c:9a:da:ef:46:32:34:71:48:cf:60:92:d0:
                    11:78:a8:a0:ec:d4:2c:7e:43:df:00:12:49:39:e8:
                    1d:cb:ab:bc:fa:66:6b:cd:ab:d7:e1:ba:db:87:e9:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AA:01:7C:7C:7B:F3:11:F1:26:9E:76:DB:D0:59:C4:31:CB:E6:A3
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/B6oBfHx78xHxJp5229BZxDHL5qM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:98:85:b3:51:94:63:63:5d:5f:18:3c:db:3d:65:05:03:96:
         33:84:8c:d5:41:3f:0f:27:28:d6:12:3c:ad:81:fa:dc:52:93:
         9a:57:30:5a:bb:41:cb:ac:0f:b0:8d:c2:66:b0:ed:66:4e:d2:
         0e:0b:e1:fe:d3:9f:54:49:89:b6:c2:a4:d3:bf:fd:53:3f:d5:
         26:f4:44:f2:4a:9c:e4:2e:74:2f:43:33:46:c5:46:5e:8f:14:
         da:6c:bd:fb:52:9a:0e:8a:3c:c7:c5:4d:db:3a:d3:31:25:57:
         1a:5e:d8:4d:20:b6:e4:cc:74:a6:c5:cf:60:74:e5:f3:c0:84:
         3a:ac:a6:68:f1:b6:38:68:81:49:d8:31:05:39:3a:be:7e:0a:
         b6:05:ae:69:74:79:dc:bf:f9:bc:f6:c6:f1:b8:3a:76:32:65:
         88:c2:13:0d:3b:8a:9c:40:e5:af:11:19:f1:07:a9:c8:19:68:
         e3:83:c2:3f:d9:3e:f1:c5:bc:d1:07:4c:59:fa:3b:f0:ff:a8:
         5c:5b:98:48:73:fa:32:58:db:99:96:6a:78:d4:8d:83:67:1c:
         c7:fe:6e:21:9d:2b:db:bc:c5:5b:64:2f:a3:59:8b:12:cb:c9:
         b0:c6:eb:a9:d2:57:3b:c0:74:1e:bb:12:90:a4:0b:fc:76:f2:
         0a:36:20:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----