Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/oOJYfg4SmrQNn_OPWAmr7QPRVUo.roa
File:                     oOJYfg4SmrQNn_OPWAmr7QPRVUo.roa (raw, json)
Hash identifier:          oTkEgm3pcBWzXBub1ez3qlYFpYQWslokXJbOct8Qh3E=
Subject key identifier:   A0:E2:58:7E:0E:12:9A:B4:0D:9F:F3:8F:58:09:AB:ED:03:D1:55:4A
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       0D
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/oOJYfg4SmrQNn_OPWAmr7QPRVUo.roa
Signing time:             Tue 27 Jul 2021 02:35:59 +0000
ROA not before:           Tue 27 Jul 2021 02:35:59 +0000
ROA not after:            Fri 15 Jul 2022 01:30:02 +0000
asID:                     63789
IP address blocks:        202.9.208.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Jul 27 02:35:59 2021 GMT
            Not After : Jul 15 01:30:02 2022 GMT
        Subject: CN=A0E2587E0E129AB40D9FF38F5809ABED03D1554A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:4d:a4:19:56:13:39:7b:8f:c6:13:6b:b6:
                    e9:f5:76:61:db:f2:56:77:a7:fd:94:97:5c:fc:91:
                    b4:6d:d3:70:26:b9:ca:6c:47:45:62:a6:53:d7:51:
                    d8:9f:f0:14:b7:44:ed:64:74:95:f7:4b:82:ed:fc:
                    5c:eb:c1:0b:be:86:d6:81:da:2e:a5:5d:5b:72:a3:
                    d2:63:3c:97:62:c7:ab:0a:e4:e0:59:6e:a0:06:38:
                    3f:d7:1c:5e:d8:b8:ad:0b:b1:73:21:ab:1d:57:fc:
                    de:ba:89:8c:78:b9:cf:44:b4:55:de:9d:eb:50:b6:
                    10:bb:22:36:14:eb:ec:e4:7f:84:5b:a2:46:89:f9:
                    d0:40:04:8c:23:68:f8:48:84:60:29:29:de:d1:86:
                    09:e1:74:2d:86:98:3f:18:1f:e2:94:96:f1:50:d1:
                    c7:ef:e9:d9:f2:60:b0:0c:16:a2:97:f0:75:0c:65:
                    53:b0:39:59:25:a9:77:19:36:a0:01:04:2b:14:ec:
                    61:85:86:95:bc:ad:24:bf:6e:db:70:43:c8:66:5e:
                    0c:5d:8d:a3:d0:7a:44:47:6d:66:5f:e3:6c:3f:e6:
                    e2:68:9f:e6:86:74:d4:66:ba:e1:46:62:da:36:d8:
                    05:8a:93:86:11:20:e1:a1:67:d5:63:70:08:05:fe:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E2:58:7E:0E:12:9A:B4:0D:9F:F3:8F:58:09:AB:ED:03:D1:55:4A
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/oOJYfg4SmrQNn_OPWAmr7QPRVUo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:98:54:84:3f:af:b8:c1:fe:1a:fa:f8:76:a8:fa:83:4f:25:
         ac:7c:2a:36:79:f1:e9:e4:9d:60:41:45:0b:75:37:68:66:8e:
         2e:02:2f:0c:e8:40:d6:f1:a6:49:36:76:d4:4f:88:98:a4:73:
         54:6b:c7:b5:c7:c3:79:da:bd:d1:7b:f6:e1:c4:ba:a5:a8:2c:
         5d:e7:b3:9f:96:e1:f1:28:5f:57:2a:71:a7:c3:cd:f4:e8:72:
         04:17:c6:e2:7c:32:c8:2b:8d:ed:a3:30:6e:ce:db:eb:7a:04:
         65:1f:a4:5f:d9:f1:cf:d1:5b:b7:4c:3b:60:48:88:7d:81:bc:
         1b:4f:fe:83:18:09:0f:eb:5e:5b:1f:3b:19:ba:94:26:76:ec:
         e3:4f:01:42:8c:da:bf:d2:16:9d:a6:7c:33:6c:50:05:34:e8:
         6e:5e:ba:81:cd:50:da:0d:ce:0a:3f:39:b0:c3:31:e3:d3:55:
         b9:37:27:86:f2:19:09:71:93:7b:1f:4f:1f:07:c9:da:54:f4:
         92:3b:fa:3c:48:9d:62:0b:a4:24:9b:4c:f2:9b:e5:82:5e:5d:
         0f:ec:4c:14:30:58:3a:a8:09:70:20:52:af:9b:86:99:7d:b4:
         c9:63:98:20:80:52:70:de:dc:dc:8e:7b:67:69:cf:60:47:a2:
         e4:50:fe:9e
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEOEYx
NTE0NTA4QUZDMzhFNTE3NDNCNkNCNThCQTY1NjFFREQzQkI5MB4XDTIxMDcyNzAy
MzU1OVoXDTIyMDcxNTAxMzAwMlowMzExMC8GA1UEAxMoQTBFMjU4N0UwRTEyOUFC
NDBEOUZGMzhGNTgwOUFCRUQwM0QxNTU0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL+pTaQZVhM5e4/GE2u26fV2YdvyVnen/ZSXXPyRtG3TcCa5ymxH
RWKmU9dR2J/wFLdE7WR0lfdLgu38XOvBC76G1oHaLqVdW3Kj0mM8l2LHqwrk4Flu
oAY4P9ccXti4rQuxcyGrHVf83rqJjHi5z0S0Vd6d61C2ELsiNhTr7OR/hFuiRon5
0EAEjCNo+EiEYCkp3tGGCeF0LYaYPxgf4pSW8VDRx+/p2fJgsAwWopfwdQxlU7A5
WSWpdxk2oAEEKxTsYYWGlbytJL9u23BDyGZeDF2No9B6REdtZl/jbD/m4mif5oZ0
1Ga64UZi2jbYBYqThhEg4aFn1WNwCAX+bNECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSg4lh+DhKatA2f849YCavtA9FVSjAfBgNVHSMEGDAWgBTY8VFFCK/DjlF0O2y1
i6ZWHt07uTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjk5LzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3ZE83ay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3
ZE83ay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOTkvb09KWWZnNFNtclFObl9PUFdBbXI3UVBSVlVvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsoJ0DANBgkqhkiG9w0BAQsFAAOCAQEA
WZhUhD+vuMH+Gvr4dqj6g08lrHwqNnnx6eSdYEFFC3U3aGaOLgIvDOhA1vGmSTZ2
1E+ImKRzVGvHtcfDedq90Xv24cS6pagsXeezn5bh8ShfVypxp8PN9OhyBBfG4nwy
yCuN7aMwbs7b63oEZR+kX9nxz9Fbt0w7YEiIfYG8G0/+gxgJD+teWx87GbqUJnbs
408BQozav9IWnaZ8M2xQBTTobl66gc1Q2g3OCj85sMMx49NVuTcnhvIZCXGTex9P
HwfJ2lT0kjv6PEidYgukJJtM8pvlgl5dD+xMFDBYOqgJcCBSr5uGmX20yWOYIIBS
cN7c3I57Z2nPYEei5FD+ng==
-----END CERTIFICATE-----