Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/VH0318Ha5Lw2j8uP047QVfkN2zA.roa
File:                     VH0318Ha5Lw2j8uP047QVfkN2zA.roa (raw, json)
Hash identifier:          og0yMjtNDwCX152DPs1/wh6YamLXIvdXxJycaKIoI94=
Subject key identifier:   54:7D:37:D7:C1:DA:E4:BC:36:8F:CB:8F:D3:8E:D0:55:F9:0D:DB:30
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       1F
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/VH0318Ha5Lw2j8uP047QVfkN2zA.roa
Signing time:             Tue 05 Oct 2021 01:59:33 +0000
ROA not before:           Tue 05 Oct 2021 01:59:33 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     9351
IP address blocks:        150.91.128.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Oct  5 01:59:33 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=547D37D7C1DAE4BC368FCB8FD38ED055F90DDB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:70:4e:9d:bf:9f:74:a2:f8:2b:2a:8b:a6:
                    cf:77:51:5f:d4:9d:63:3a:27:bd:c5:06:b1:c4:50:
                    a1:02:c7:f8:66:79:e3:dc:2f:49:c0:90:02:a4:dc:
                    22:59:f6:0a:e3:c4:6f:6f:41:57:2b:eb:9d:a8:a0:
                    8c:7b:de:c0:60:44:5e:38:86:e0:13:d8:7f:de:b3:
                    73:6e:84:3f:97:1d:fe:4d:3b:78:ee:52:4c:2f:9f:
                    d7:17:21:25:9c:77:46:f2:9f:04:3a:7a:4a:5e:f7:
                    98:07:80:1a:88:7a:c8:34:2c:2c:5b:30:4b:53:9e:
                    b9:b0:90:94:8e:f7:df:95:f4:bf:18:34:78:1e:42:
                    e2:bc:09:54:50:4a:74:28:6a:a2:7c:91:4a:d0:71:
                    11:ca:0f:75:31:1c:a2:2b:91:9d:46:7d:be:5c:1f:
                    f2:28:d7:98:11:6f:d7:44:0d:a0:9f:d7:f5:a9:11:
                    86:f7:2e:de:83:0d:b3:93:d3:58:96:3a:08:ec:48:
                    fa:62:07:a0:17:9b:e8:ef:4c:f8:c0:7b:6c:da:a8:
                    76:1f:62:e8:b1:16:fc:4b:74:d0:28:ad:b0:95:bf:
                    e1:19:05:70:24:aa:5f:a2:e8:3c:22:e8:1a:95:5d:
                    ac:8b:c7:75:bd:67:56:08:66:9f:cb:14:96:30:d9:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:37:D7:C1:DA:E4:BC:36:8F:CB:8F:D3:8E:D0:55:F9:0D:DB:30
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/VH0318Ha5Lw2j8uP047QVfkN2zA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.91.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:9e:aa:10:17:f6:d5:51:a9:2b:bc:61:c9:5b:46:03:28:c1:
         84:5b:06:a9:7a:e1:2a:8c:b4:a1:bb:4e:06:0a:36:6b:69:0b:
         6b:06:d0:fa:0e:29:48:91:16:3f:b8:04:4c:cf:c1:f4:00:ba:
         ef:07:e6:75:0a:99:f9:ba:23:45:da:90:60:79:fe:e0:17:5e:
         02:23:cf:d4:17:8a:58:d7:94:de:66:3b:e5:68:4d:36:05:2e:
         4a:c3:5b:45:2d:7c:f6:a1:3b:69:f5:61:9f:5e:26:d2:f5:c3:
         7f:f7:82:5e:da:08:32:ad:0e:a3:ff:28:d3:18:d0:90:6d:b1:
         d1:ea:8d:04:c8:62:17:05:35:02:be:a4:28:52:7c:bd:31:df:
         ff:80:1d:cf:21:e7:bf:0e:f2:06:c8:f0:f0:d7:fc:72:15:30:
         50:67:53:4a:e6:01:08:2a:25:47:09:dd:bf:4f:af:9d:6a:8c:
         e7:fb:25:fa:bc:f0:da:58:1c:19:94:a4:7d:98:0e:25:0f:62:
         65:5a:7c:6e:97:69:0a:bf:d1:3d:3f:74:30:c0:1f:9f:77:43:
         be:7f:e0:d3:f1:a7:97:71:57:cd:f0:91:f8:c5:ec:9f:98:70:
         26:51:93:60:88:c6:03:13:7b:55:7f:06:d9:1b:c4:4b:1d:e9:
         65:7f:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----