Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Ac4zo20mjRnpg5vSNz9ZIsjT_-g.roa
File:                     Ac4zo20mjRnpg5vSNz9ZIsjT_-g.roa (raw, json)
Hash identifier:          IpcSiFG7DOL6GQdr3DW72Z9NW5Wnehzrql+XZykwh/Y=
Subject key identifier:   01:CE:33:A3:6D:26:8D:19:E9:83:9B:D2:37:3F:59:22:C8:D3:FF:E8
Certificate issuer:       /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial:       33
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Ac4zo20mjRnpg5vSNz9ZIsjT_-g.roa
Signing time:             Mon 01 Nov 2021 01:28:15 +0000
ROA not before:           Mon 01 Nov 2021 01:28:15 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     38644
IP address blocks:        2001:3a0:f006::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
        Validity
            Not Before: Nov  1 01:28:15 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=01CE33A36D268D19E9839BD2373F5922C8D3FFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:5d:ab:e7:bb:da:9a:1f:5d:5a:c1:cb:4e:
                    08:a5:0e:b9:45:ef:dd:e7:d0:ca:1c:a3:ad:29:38:
                    2d:c6:9c:56:34:26:ba:29:f4:cb:72:c8:7c:1e:ab:
                    ca:8a:46:d4:80:30:ad:3b:4c:0a:b1:66:d4:5f:9e:
                    60:47:66:e2:e8:41:85:01:ea:22:c3:9c:9a:bb:90:
                    c2:c3:31:49:49:ec:ee:20:76:c9:b2:b1:a7:ed:3e:
                    9c:19:b4:62:1b:ff:06:7e:cd:fc:17:67:e0:46:52:
                    21:5c:f3:42:e5:52:06:4a:31:25:74:e4:0d:f3:a4:
                    dd:c9:58:79:b0:44:ce:12:ca:7b:4a:fc:3e:e6:71:
                    80:1d:28:ee:37:3f:0d:f6:42:9d:25:f7:c1:89:98:
                    e5:34:f9:39:3b:0f:89:ad:30:70:3a:c0:c9:42:68:
                    c8:1c:3c:18:9c:e6:5f:9b:95:0d:8f:1e:59:e1:30:
                    56:c7:e8:fd:00:a9:92:4d:8a:56:90:69:9c:9d:cc:
                    7f:36:9d:74:47:c6:72:f1:40:ce:ce:07:43:3f:e9:
                    9b:a7:cd:58:d6:8e:da:d5:9f:a3:62:7c:88:d2:17:
                    f6:09:45:39:4a:d4:df:f5:d4:41:60:66:59:8e:2f:
                    4d:f5:09:5b:26:4e:f9:eb:b1:e4:5d:02:44:61:ca:
                    42:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CE:33:A3:6D:26:8D:19:E9:83:9B:D2:37:3F:59:22:C8:D3:FF:E8
            X509v3 Authority Key Identifier:
                keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Ac4zo20mjRnpg5vSNz9ZIsjT_-g.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3a0:f006::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:7b:f1:8b:f7:9b:62:46:a5:e3:04:cd:10:3c:e5:72:83:03:
         bc:7d:59:a4:58:bf:3c:6c:1b:89:ae:14:43:64:d2:50:c7:ce:
         81:6a:1a:58:d5:f0:2d:1a:c7:e8:d4:e5:4e:1e:09:89:38:a9:
         4a:df:2c:6e:26:e6:b9:8a:49:f5:b5:09:30:5d:92:eb:c3:ba:
         7b:cb:e8:5a:c2:96:0f:b2:0b:05:6e:cc:01:42:83:fe:d3:e3:
         c6:66:cc:98:cc:5e:5f:fd:b1:db:0e:52:98:ee:9d:c0:37:42:
         dc:7d:2f:88:30:2b:a9:a4:1f:4f:af:e9:53:f3:46:85:e6:eb:
         c3:37:be:f9:d9:0b:8e:ef:f0:cb:29:c8:ce:65:1c:5e:df:bc:
         25:ae:17:6d:d8:f6:ec:6f:78:24:78:74:34:50:f8:b9:73:10:
         c9:9e:c4:06:d2:84:5f:5b:71:2c:c2:9a:c4:6c:2e:35:01:e7:
         1d:07:03:e2:82:bd:a9:1d:64:32:26:24:6d:2c:d8:6b:c0:36:
         b6:e8:56:c2:bc:f2:bd:a9:7e:a5:8e:50:bf:42:e0:89:70:bc:
         4b:74:13:7e:b7:d2:46:55:de:bb:dd:f6:33:52:20:74:0b:c4:
         81:27:b2:cc:9c:5e:9c:8e:39:6c:58:53:c7:e2:e4:e2:a2:a2:
         55:40:01:85
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMDZC
MUYzRDY0OUU1QTI1QUExMzQwQzE4QkQ2QTdDMjRDRjM2QUY2MB4XDTIxMTEwMTAx
MjgxNVoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMDFDRTMzQTM2RDI2OEQx
OUU5ODM5QkQyMzczRjU5MjJDOEQzRkZFODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMhGXavnu9qaH11awctOCKUOuUXv3efQyhyjrSk4LcacVjQmuin0
y3LIfB6ryopG1IAwrTtMCrFm1F+eYEdm4uhBhQHqIsOcmruQwsMxSUns7iB2ybKx
p+0+nBm0Yhv/Bn7N/Bdn4EZSIVzzQuVSBkoxJXTkDfOk3clYebBEzhLKe0r8PuZx
gB0o7jc/DfZCnSX3wYmY5TT5OTsPia0wcDrAyUJoyBw8GJzmX5uVDY8eWeEwVsfo
/QCpkk2KVpBpnJ3MfzaddEfGcvFAzs4HQz/pm6fNWNaO2tWfo2J8iNIX9glFOUrU
3/XUQWBmWY4vTfUJWyZO+eux5F0CRGHKQmECAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBQBzjOjbSaNGemDm9I3P1kiyNP/6DAfBgNVHSMEGDAWgBQQax89ZJ5aJaoTQMGL
1qfCTPNq9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMDMvRUdzZlBXU2VXaVdxRTBEQmk5YW53a3p6YXZZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRUdzZlBXU2VXaVdxRTBEQmk5YW53
a3p6YXZZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDAzL0FjNHpvMjBtalJucGc1dlNOejlaSXNqVF8tZy5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQOg8AYwDQYJKoZIhvcNAQEL
BQADggEBAHx78Yv3m2JGpeMEzRA85XKDA7x9WaRYvzxsG4muFENk0lDHzoFqGljV
8C0ax+jU5U4eCYk4qUrfLG4m5rmKSfW1CTBdkuvDunvL6FrClg+yCwVuzAFCg/7T
48ZmzJjMXl/9sdsOUpjuncA3Qtx9L4gwK6mkH0+v6VPzRoXm68M3vvnZC47v8Msp
yM5lHF7fvCWuF23Y9uxveCR4dDRQ+LlzEMmexAbShF9bcSzCmsRsLjUB5x0HA+KC
vakdZDImJG0s2GvANrboVsK88r2pfqWOUL9C4IlwvEt0E3630kZV3rvd9jNSIHQL
xIEnssycXpyOOWxYU8fi5OKiolVAAYU=
-----END CERTIFICATE-----