Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/U_h_vEQcfW3v2KhYyeT5OhJKarY.roa
File:                     U_h_vEQcfW3v2KhYyeT5OhJKarY.roa (raw, json)
Hash identifier:          ZS5loi+L+75Ri2rdc7+9/GEHjDfSUloH1JbHgX7m1JY=
Subject key identifier:   53:F8:7F:BC:44:1C:7D:6D:EF:D8:A8:58:C9:E4:F9:3A:12:4A:6A:B6
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       09
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/U_h_vEQcfW3v2KhYyeT5OhJKarY.roa
Signing time:             Tue 16 Mar 2021 04:45:38 +0000
ROA not before:           Tue 16 Mar 2021 04:45:38 +0000
ROA not after:            Tue 15 Mar 2022 08:34:35 +0000
asID:                     9351
IP address blocks:        110.44.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar 16 04:45:38 2021 GMT
            Not After : Mar 15 08:34:35 2022 GMT
        Subject: CN=53F87FBC441C7D6DEFD8A858C9E4F93A124A6AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:e0:08:22:ae:de:d1:2f:26:72:b7:96:d6:
                    88:ff:9f:72:60:20:18:9d:91:03:82:f3:47:7e:5b:
                    a7:93:0e:17:87:64:00:0e:d5:a7:b5:64:ae:f4:01:
                    6e:91:f6:35:a2:47:ea:db:8b:d0:b8:cb:26:3d:c4:
                    9b:dd:3b:92:0e:bf:69:32:77:d5:c2:ab:41:86:8f:
                    71:de:69:c3:f9:11:0a:3b:d7:a9:ec:e9:8d:0a:be:
                    0b:ea:c0:5e:9e:50:c2:bb:37:0f:25:d7:f1:92:a5:
                    94:79:1b:f8:3f:88:f8:c8:72:c3:01:91:88:76:09:
                    b2:91:51:69:d0:0a:92:7c:f4:3a:c2:a1:ee:26:b6:
                    c5:52:4f:19:9d:1d:3b:e0:0c:e1:ef:74:89:02:6f:
                    90:72:9b:77:1d:21:38:18:01:c3:3f:c4:ac:18:14:
                    68:76:be:4a:fe:a4:5a:ba:9b:89:1e:1b:91:02:a8:
                    7e:93:f2:af:d4:06:ae:44:b0:1a:25:5b:21:df:9b:
                    87:79:b2:24:07:d6:9c:5f:d7:14:58:f6:f4:d4:e0:
                    1a:de:cf:bb:ad:35:a5:4b:91:b9:31:17:71:88:f2:
                    98:8c:43:1a:5d:d3:57:f6:7f:c6:b4:a5:9e:3a:ba:
                    6f:ef:fc:f2:37:49:9c:7c:11:76:28:fc:6c:79:7c:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F8:7F:BC:44:1C:7D:6D:EF:D8:A8:58:C9:E4:F9:3A:12:4A:6A:B6
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/U_h_vEQcfW3v2KhYyeT5OhJKarY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:1a:f9:af:c2:61:cb:a1:01:8e:10:04:d9:06:85:50:4e:83:
         d7:80:ad:59:79:49:5d:28:83:3f:b3:16:4a:c6:85:fa:b9:21:
         e4:a5:22:4f:d8:0c:f4:53:5e:c5:a4:2a:d0:f7:2f:04:38:f2:
         e3:7f:27:ef:29:88:d4:7f:61:78:74:87:5e:c7:03:71:64:ad:
         42:ec:ec:82:45:25:59:f1:2f:56:4d:00:4d:f6:bf:72:4b:78:
         ba:38:7c:ed:50:f3:18:76:96:81:2a:90:16:46:f3:9a:eb:ca:
         89:1f:2a:8d:1d:e0:64:d7:d7:1f:e9:41:aa:d1:93:36:6d:21:
         90:10:dd:b5:c5:e6:02:4d:f1:3e:e2:b2:95:0f:24:ef:15:76:
         4f:75:68:72:b4:9a:ea:fc:68:b3:ba:40:ec:fa:a2:e7:83:90:
         50:de:e1:0c:8a:90:a4:ef:29:c6:90:0a:7e:60:8f:7a:c7:4f:
         87:0d:70:5a:9c:d4:51:ac:11:d0:36:83:70:17:4d:e6:de:c0:
         50:75:f5:46:1b:76:69:07:c7:75:91:79:04:f8:0d:43:df:96:
         e1:49:99:f0:f2:62:f9:ae:88:29:b6:cd:84:78:b9:9b:d9:e3:
         b8:ee:21:5b:03:af:71:57:ca:22:76:d6:95:e2:89:b0:0f:ca:
         b8:70:dd:a5
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MDBF
RjM1OEJDQkUxNEEzNThDQTRFRUU0MUI0RTkwREM5MjNFOUQyMB4XDTIxMDMxNjA0
NDUzOFoXDTIyMDMxNTA4MzQzNVowMzExMC8GA1UEAxMoNTNGODdGQkM0NDFDN0Q2
REVGRDhBODU4QzlFNEY5M0ExMjRBNkFCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALXA4Agirt7RLyZyt5bWiP+fcmAgGJ2RA4LzR35bp5MOF4dkAA7V
p7VkrvQBbpH2NaJH6tuL0LjLJj3Em907kg6/aTJ31cKrQYaPcd5pw/kRCjvXqezp
jQq+C+rAXp5Qwrs3DyXX8ZKllHkb+D+I+MhywwGRiHYJspFRadAKknz0OsKh7ia2
xVJPGZ0dO+AM4e90iQJvkHKbdx0hOBgBwz/ErBgUaHa+Sv6kWrqbiR4bkQKofpPy
r9QGrkSwGiVbId+bh3myJAfWnF/XFFj29NTgGt7Pu601pUuRuTEXcYjymIxDGl3T
V/Z/xrSlnjq6b+/88jdJnHwRdij8bHl8LMkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRT+H+8RBx9be/YqFjJ5Pk6EkpqtjAfBgNVHSMEGDAWgBRQDvNYvL4Uo1jKTu5B
tOkNySPp0jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM0L1VBN3pXTHktRktOWXlrN3VRYlRwRGNrajZkSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VBN3pXTHktRktOWXlrN3VRYlRwRGNr
ajZkSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yMzQvVV9oX3ZFUWNmVzN2MktoWXllVDVPaEpLYXJZLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBW4sQDANBgkqhkiG9w0BAQsFAAOCAQEA
aRr5r8Jhy6EBjhAE2QaFUE6D14CtWXlJXSiDP7MWSsaF+rkh5KUiT9gM9FNexaQq
0PcvBDjy438n7ymI1H9heHSHXscDcWStQuzsgkUlWfEvVk0ATfa/ckt4ujh87VDz
GHaWgSqQFkbzmuvKiR8qjR3gZNfXH+lBqtGTNm0hkBDdtcXmAk3xPuKylQ8k7xV2
T3VocrSa6vxos7pA7Pqi54OQUN7hDIqQpO8pxpAKfmCPesdPhw1wWpzUUawR0DaD
cBdN5t7AUHX1Rht2aQfHdZF5BPgNQ9+W4UmZ8PJi+a6IKbbNhHi5m9njuO4hWwOv
cVfKInbWleKJsA/KuHDdpQ==
-----END CERTIFICATE-----