Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2285/_K4uejBijVeUOg5PALpky4F4wiY.roa
File:                     _K4uejBijVeUOg5PALpky4F4wiY.roa (raw, json)
Hash identifier:          4EJO+7CVslDPfuqHuGMJP/0AN5K0MMVJeLFm+Vffcy4=
Subject key identifier:   FC:AE:2E:7A:30:62:8D:57:94:3A:0E:4F:00:BA:64:CB:81:78:C2:26
Certificate issuer:       /CN=7C01445105DBAF2750BA19245C7064AD40F7226D
Certificate serial:       15
Authority key identifier: 7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/_K4uejBijVeUOg5PALpky4F4wiY.roa
Signing time:             Tue 25 May 2021 02:37:04 +0000
ROA not before:           Tue 25 May 2021 02:37:04 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     2907
IP address blocks:        202.253.88.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C01445105DBAF2750BA19245C7064AD40F7226D
        Validity
            Not Before: May 25 02:37:04 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=FCAE2E7A30628D57943A0E4F00BA64CB8178C226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a8:e0:b2:c1:d5:98:4e:55:80:ed:78:8b:c5:
                    24:f6:83:bc:84:46:b6:d5:60:e7:08:45:e2:a8:34:
                    aa:94:f2:00:b0:16:4b:a4:a8:56:28:25:cc:14:90:
                    a2:7d:ab:60:65:df:ed:af:91:63:1e:90:af:41:65:
                    b4:0f:37:b3:86:bb:31:46:83:84:3c:e9:ba:45:30:
                    6f:37:c3:a3:bd:9e:b1:c8:6f:cc:f3:57:56:b8:9c:
                    3c:a4:ca:49:e0:70:da:4f:9f:c8:8c:4d:36:d9:8a:
                    d2:13:9b:4a:a8:cc:86:d1:37:56:d0:f7:44:ff:fa:
                    4c:dd:67:03:36:de:04:35:db:2b:38:e1:b4:d4:f0:
                    3f:75:9b:83:b1:90:3d:96:f2:79:41:cd:25:18:81:
                    13:ee:a6:53:9f:52:9b:06:62:1a:bd:fe:2f:95:ca:
                    c2:a1:31:78:82:13:3b:69:58:93:b6:ed:33:ce:19:
                    5f:d5:d6:85:7b:53:e9:09:f2:4f:fd:d3:c1:f1:8b:
                    6e:a5:73:45:0f:50:81:70:47:cb:11:59:b3:38:02:
                    c0:84:66:44:5b:bd:a4:8f:70:77:6a:90:3c:d0:2a:
                    e1:4d:41:f0:0a:69:c6:3d:fe:b5:ac:e8:f5:4c:40:
                    bb:a1:de:8e:ad:ce:84:87:69:c2:ce:31:4b:81:3e:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AE:2E:7A:30:62:8D:57:94:3A:0E:4F:00:BA:64:CB:81:78:C2:26
            X509v3 Authority Key Identifier:
                keyid:7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/_K4uejBijVeUOg5PALpky4F4wiY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.253.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:f8:23:d3:b4:ae:8c:a4:cd:f6:b2:da:69:e5:15:b3:d1:a2:
         1f:22:55:af:f8:af:3e:1c:56:b4:1e:b6:99:e8:2b:73:b8:df:
         7f:35:1f:53:a3:b8:92:aa:22:ec:91:20:25:77:b5:ff:96:7e:
         8c:09:3f:20:ea:79:19:40:2c:5d:a0:0f:9f:5e:99:c7:36:c1:
         d6:8d:56:d8:f1:8f:97:33:40:9e:d9:a1:b5:08:c6:ae:a8:7d:
         2a:ca:1a:aa:1e:6c:4c:81:69:e8:0a:4e:19:0e:c3:93:50:34:
         a9:a8:8c:7c:51:56:8a:6e:3d:70:ea:f1:0d:83:d9:4b:7d:ca:
         bc:13:4f:97:c0:95:fe:1a:c1:6f:81:1c:9f:18:57:e2:31:c9:
         47:3f:00:a0:2d:2e:d9:86:04:99:34:aa:f5:d3:83:57:55:4d:
         ab:e7:01:50:0c:94:68:9c:db:cf:25:6e:b8:5c:ee:20:21:23:
         12:e6:33:7c:b6:c3:6d:ee:bd:4e:ad:32:b0:a5:7a:d8:8c:ec:
         17:c1:78:f4:db:5d:99:d6:36:89:63:41:81:6d:56:f3:4c:24:
         9f:55:8e:5c:5a:05:e0:79:42:21:b2:61:42:a5:a2:3c:e4:97:
         2c:0b:03:00:ea:44:d7:35:20:fd:bc:4c:c8:19:2f:c7:95:7e:
         26:57:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----