Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/chcs7tbUdCZgVP_5kJSSiYqlgpE.roa
File:                     chcs7tbUdCZgVP_5kJSSiYqlgpE.roa (raw, json)
Hash identifier:          zxvqsyG717FssGQYQiPBYOokSWzWDvApD8A5pJ8AhnI=
Subject key identifier:   72:17:2C:EE:D6:D4:74:26:60:54:FF:F9:90:94:92:89:8A:A5:82:91
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       63
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/chcs7tbUdCZgVP_5kJSSiYqlgpE.roa
Signing time:             Tue 25 May 2021 02:36:58 +0000
ROA not before:           Tue 25 May 2021 02:36:58 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     18126
IP address blocks:        202.150.48.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May 25 02:36:58 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=72172CEED6D474266054FFF9909492898AA58291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:61:a6:a0:b1:89:54:18:96:2f:af:3a:7c:
                    ac:b9:d6:ce:b8:d2:6e:be:83:ab:c1:7b:1c:f5:ea:
                    e0:f4:e0:7d:17:c8:0f:35:24:4e:4e:f2:bb:f3:53:
                    56:6c:f2:33:84:fb:42:15:e8:7d:85:94:c9:5e:76:
                    08:13:f3:fa:3d:dc:fa:41:14:c2:ce:b4:79:b9:11:
                    4c:98:35:60:5d:a3:4c:d6:c4:c9:f1:d8:1f:75:72:
                    fc:7d:42:78:76:c2:97:f5:e5:3e:c8:62:1f:86:87:
                    c8:09:a7:95:90:61:3e:1b:3d:fb:b2:1c:ab:2b:af:
                    2f:55:96:2d:db:5b:73:ba:28:5d:94:1a:90:f8:a5:
                    63:67:e3:d0:96:10:32:d4:23:1a:50:c9:8b:40:40:
                    89:57:ad:ea:b5:aa:cb:d1:27:43:b2:a7:1f:89:78:
                    7d:4f:cd:70:ca:10:ce:e0:94:b5:5b:89:fb:0a:44:
                    3f:42:2f:f8:8f:59:66:be:1a:1e:d2:5c:09:c7:17:
                    95:b1:cd:fe:48:f2:c9:3f:a8:3d:b4:33:27:4f:cf:
                    d0:6c:86:65:f3:ce:71:c0:4c:8b:7b:c9:28:6c:32:
                    2b:08:14:fb:f4:d1:1e:3b:84:ac:9e:8d:92:ed:1e:
                    f0:09:79:ec:91:80:c4:f8:17:61:f0:cc:4b:e3:03:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:17:2C:EE:D6:D4:74:26:60:54:FF:F9:90:94:92:89:8A:A5:82:91
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/chcs7tbUdCZgVP_5kJSSiYqlgpE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:82:0a:11:5e:c2:b3:b2:f3:44:9c:47:0e:b8:5c:22:c8:
         f3:3f:d5:a7:08:83:65:87:cd:6f:57:e5:6c:6a:28:49:43:18:
         bb:37:f2:95:e9:4c:dc:47:58:a0:15:8a:81:b5:c7:c2:8f:05:
         35:40:f0:bd:ac:c2:70:7f:23:73:8c:00:0c:c0:7e:22:34:a0:
         7e:87:c3:1f:75:84:4b:74:72:26:8f:50:3d:6b:94:23:29:66:
         81:4a:36:3a:67:4e:2c:db:58:b8:8e:91:28:3c:2a:ca:01:16:
         9c:04:e4:d2:22:47:4d:4a:5e:60:6c:21:f1:5c:2f:6e:37:77:
         af:14:b2:56:25:8c:a6:30:be:21:31:74:81:65:09:f4:8e:ac:
         10:b8:2a:93:05:05:fd:4d:75:6a:40:94:b6:28:32:27:54:a8:
         9b:7a:82:fa:62:97:74:ea:32:4e:36:24:b8:f3:35:54:f2:18:
         b5:4d:87:36:28:eb:2c:b9:54:ea:fc:66:68:6f:a4:ea:fa:a5:
         fd:3e:7a:c7:8b:45:a5:81:9d:0e:3f:d6:f2:73:48:22:a2:8e:
         5c:9f:d9:ad:a8:00:1e:33:20:83:03:98:ad:1c:25:d8:f5:ee:
         18:d9:65:3d:09:26:34:ba:2a:6d:07:79:db:9e:c2:d7:1c:f7:
         b6:24:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----