Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/yhKIT1iRIbx_LfafbdE_1GS1emA.roa
File:                     yhKIT1iRIbx_LfafbdE_1GS1emA.roa (raw, json)
Hash identifier:          1gkoTXjCatLe8DBiyJnJJXeKibrXOsh6BOUHBDEoDCk=
Subject key identifier:   CA:12:88:4F:58:91:21:BC:7F:2D:F6:9F:6D:D1:3F:D4:64:B5:7A:60
Certificate issuer:       /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
Certificate serial:       1B
Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/yhKIT1iRIbx_LfafbdE_1GS1emA.roa
Signing time:             Tue 25 May 2021 02:37:06 +0000
ROA not before:           Tue 25 May 2021 02:37:06 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     63774
IP address blocks:        103.113.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
        Validity
            Not Before: May 25 02:37:06 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=CA12884F589121BC7F2DF69F6DD13FD464B57A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:48:18:81:9f:f1:d4:de:de:0f:ba:4c:3b:0b:
                    06:c1:af:fd:2d:db:05:92:79:f6:ca:9b:b3:e8:f8:
                    84:3f:fe:55:25:5c:b3:8b:1d:34:03:42:0b:61:b5:
                    2d:63:1a:84:64:49:c5:e1:de:7c:9f:12:91:3e:9d:
                    e3:4d:08:38:7d:71:f8:ce:6c:9c:c9:49:9e:f1:ee:
                    be:6a:c6:9b:9c:98:00:6f:33:6d:7b:8b:b0:46:14:
                    07:4a:ca:9d:9e:1e:a5:dc:2d:cb:67:b1:6f:19:af:
                    57:1f:50:42:1c:13:5b:70:3a:fd:f1:d4:81:75:74:
                    af:53:d3:ee:a8:a4:25:d9:0b:0b:95:46:80:10:3b:
                    98:ed:00:35:57:d6:32:bf:86:5d:3b:45:9b:1f:84:
                    bf:de:01:e8:4e:e6:cf:62:94:3f:24:d4:e8:74:78:
                    da:60:4c:1e:18:da:c8:44:28:cc:64:fd:be:ee:62:
                    a9:8d:36:24:b5:b4:9b:25:3c:5d:94:e4:27:ef:cd:
                    61:84:6a:06:45:0a:c3:12:c8:cb:0f:a8:6e:83:96:
                    b0:45:60:9f:ba:1d:2c:ff:58:e5:34:e3:35:96:77:
                    27:02:d0:f4:57:cb:19:03:69:be:cf:b6:22:d4:65:
                    c5:81:d7:e5:c0:ac:9d:48:f3:99:0e:98:a1:3f:54:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:12:88:4F:58:91:21:BC:7F:2D:F6:9F:6D:D1:3F:D4:64:B5:7A:60
            X509v3 Authority Key Identifier:
                keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/yhKIT1iRIbx_LfafbdE_1GS1emA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:9c:f3:89:bd:49:56:89:81:d6:93:d3:3d:8f:22:75:c7:a3:
         92:08:bf:ed:13:28:55:fc:0f:98:0f:c2:e0:7e:e0:95:5a:7d:
         44:44:ac:f7:50:2f:71:cd:8f:fa:55:e7:65:1a:ff:1d:8e:66:
         12:32:07:bb:86:c1:56:87:e6:e0:46:fb:10:24:b5:fe:0e:c8:
         dd:eb:55:3c:cb:5a:73:5f:e3:4f:99:c3:16:5e:17:47:72:30:
         07:9e:63:e1:f6:0a:94:8e:94:91:37:6b:6c:27:2b:44:53:cd:
         31:8b:17:cc:f3:d8:d9:d9:20:da:cb:6d:98:7e:35:02:47:35:
         5b:31:8f:45:a1:5b:be:9e:c7:da:1e:19:fe:7f:db:aa:cd:92:
         e2:ca:cc:63:48:f6:b0:6a:c3:e4:fd:9a:ac:07:ec:f2:90:71:
         6a:da:a4:7d:45:e5:91:37:50:a4:5e:c4:34:d6:23:60:4e:b0:
         18:0a:2e:4a:28:c7:32:63:2e:c1:01:0a:e6:ec:e2:62:32:e2:
         91:07:0a:8e:21:6d:d0:17:7f:78:d2:e7:64:8a:5e:54:04:e3:
         52:20:9d:0a:1d:52:da:ff:e1:21:e8:72:21:5b:46:10:02:4a:
         48:e4:55:da:8f:27:76:1c:86:fe:d3:3c:03:76:b0:15:0f:fa:
         45:97:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----