Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ebwcAq2MvUPxqwIPnQGJbUyAsAU.roa
File:                     ebwcAq2MvUPxqwIPnQGJbUyAsAU.roa (raw, json)
Hash identifier:          yr7r9oD6mGTKR4d5CHx4tYMM7ypKHgb1kykOQep5pS0=
Subject key identifier:   79:BC:1C:02:AD:8C:BD:43:F1:AB:02:0F:9D:01:89:6D:4C:80:B0:05
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       02
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ebwcAq2MvUPxqwIPnQGJbUyAsAU.roa
Signing time:             Thu 02 Sep 2021 01:13:09 +0000
ROA not before:           Thu 02 Sep 2021 01:13:09 +0000
ROA not after:            Fri 02 Sep 2022 01:06:28 +0000
asID:                     24121
IP address blocks:        112.140.128.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Sep  2 01:13:09 2021 GMT
            Not After : Sep  2 01:06:28 2022 GMT
        Subject: CN=79BC1C02AD8CBD43F1AB020F9D01896D4C80B005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:5e:fd:11:aa:78:ea:58:ce:4a:e7:d4:22:
                    a6:59:11:b9:37:9a:47:8b:a7:1f:de:5f:df:f5:3c:
                    4a:46:74:fc:33:4e:79:50:dc:4a:7d:9b:db:4b:1f:
                    98:ed:9f:f3:08:90:95:bd:b1:f5:62:19:2b:d1:e1:
                    ce:8c:aa:f3:3b:a7:68:7b:3f:83:d3:65:84:56:aa:
                    7d:bb:c1:c1:ed:1d:3e:93:e7:14:0f:3e:be:87:80:
                    c9:72:16:5e:7b:d3:4d:c0:ef:69:df:0b:9a:08:4d:
                    f2:93:4f:ed:f6:0c:31:c9:3e:14:92:d6:b2:83:d1:
                    7c:2d:68:eb:00:e9:3b:3c:56:ed:a8:cc:ab:85:1c:
                    77:bb:13:20:ba:6e:90:69:dd:e3:38:0e:ec:8c:0c:
                    06:3c:cd:97:e4:bd:6e:1b:ee:49:8d:53:21:66:66:
                    92:8a:8d:67:66:47:ae:de:f8:42:ca:dd:ca:67:fc:
                    92:25:c5:1f:e4:80:7e:17:0e:45:a8:83:e5:2d:e2:
                    da:dd:e9:67:73:d5:4b:68:30:49:14:da:9f:09:75:
                    55:06:a3:f7:93:9e:50:40:6c:39:90:5f:e8:85:d6:
                    8c:e7:df:96:30:ea:ce:43:b3:5b:ef:74:12:b9:34:
                    ba:9f:ef:28:64:5d:f1:9b:fb:0d:c9:7f:6f:37:e6:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BC:1C:02:AD:8C:BD:43:F1:AB:02:0F:9D:01:89:6D:4C:80:B0:05
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ebwcAq2MvUPxqwIPnQGJbUyAsAU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:da:74:1d:1d:40:07:ac:91:87:97:53:15:cd:f7:12:ca:5d:
         80:17:ad:c6:30:61:85:ea:a0:cc:50:4a:81:44:49:e4:76:b3:
         f5:9e:94:0a:58:d9:0e:81:7e:b6:a7:ab:d0:f6:e8:a6:fd:f7:
         ca:24:5b:6d:a2:29:1c:f6:69:38:e8:ce:cb:2c:02:62:19:11:
         03:e6:f1:5e:87:1f:d0:78:71:8b:b9:94:58:8e:23:6a:48:48:
         46:94:22:7a:a8:2b:82:2d:f6:58:58:30:df:23:70:03:ce:34:
         07:41:38:0e:98:81:47:4d:d1:ce:f2:ff:75:31:ae:3f:d7:ca:
         f0:35:06:66:70:20:d5:ff:82:d0:d9:35:f5:e8:93:61:d5:fb:
         f1:25:d8:57:ca:c5:58:d5:29:68:6e:72:80:b2:75:16:51:ae:
         37:6a:9f:7f:8d:b2:e8:d3:72:ef:3d:13:04:99:08:85:78:3e:
         19:89:ac:6a:6b:87:b6:8a:ef:7b:c0:4e:96:d0:c1:77:a4:39:
         87:3a:16:17:d5:c2:96:9a:af:5d:ed:20:36:30:ad:95:f7:c3:
         b2:48:9d:b7:5f:f2:be:d5:90:e4:58:92:e3:e6:0f:88:20:fd:
         d7:b5:83:c6:71:e8:83:9f:5f:85:e2:2e:66:28:12:4c:bd:46:
         4a:00:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----