Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/SAY1y3Fmk1t2bR-7pW3HIenSvVE.roa
File:                     SAY1y3Fmk1t2bR-7pW3HIenSvVE.roa (raw, json)
Hash identifier:          VLljIANY5fVx7VeWjfrmKnV03F3bbAf/hz3bZ5Y0mZs=
Subject key identifier:   48:06:35:CB:71:66:93:5B:76:6D:1F:BB:A5:6D:C7:21:E9:D2:BD:51
Certificate issuer:       /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial:       34
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/SAY1y3Fmk1t2bR-7pW3HIenSvVE.roa
Signing time:             Mon 01 Nov 2021 01:28:15 +0000
ROA not before:           Mon 01 Nov 2021 01:28:15 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     131079
IP address blocks:        2001:3a0:f007::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
        Validity
            Not Before: Nov  1 01:28:15 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=480635CB7166935B766D1FBBA56DC721E9D2BD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:44:09:0d:25:1b:0f:8b:ef:7e:44:2b:45:
                    ad:f5:59:82:8c:cd:44:a3:e1:6b:66:6e:75:c3:ba:
                    9f:1f:52:bb:c1:f1:a8:b1:18:f6:71:22:81:56:6d:
                    f6:c7:f0:f6:e4:8f:16:5e:d6:54:9e:80:c2:1c:d3:
                    a6:0c:db:b4:f6:0f:e1:7f:49:db:3e:28:1c:5f:4b:
                    94:53:0e:db:a0:e5:c9:2f:09:3f:43:a1:b4:62:5e:
                    22:84:36:40:50:b6:85:fd:64:72:33:d9:15:14:2f:
                    e2:54:63:ff:aa:74:a4:47:05:8e:63:97:48:2e:41:
                    f9:cd:0b:e4:f1:75:af:6e:6b:8d:2b:ec:60:a1:40:
                    ef:57:61:ec:2a:e9:58:03:a0:7e:2e:f0:ac:43:a8:
                    2b:2a:3f:a1:ea:8a:83:5c:62:c6:73:06:01:2c:75:
                    76:29:90:84:3b:17:25:71:fe:a5:5e:12:88:8f:b4:
                    50:52:83:0e:67:f3:d7:37:75:46:5a:b8:e3:9b:e4:
                    a8:4a:b5:aa:88:f1:99:93:e6:89:ed:46:34:76:d9:
                    4d:5e:c8:9c:2f:c1:75:5a:5d:86:f6:89:b4:9a:c2:
                    be:36:3e:4a:59:e4:5a:76:50:05:c1:3f:02:03:44:
                    6d:e7:2a:32:d2:ed:c0:c0:2b:15:25:a6:18:99:a5:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:06:35:CB:71:66:93:5B:76:6D:1F:BB:A5:6D:C7:21:E9:D2:BD:51
            X509v3 Authority Key Identifier:
                keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/SAY1y3Fmk1t2bR-7pW3HIenSvVE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3a0:f007::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:57:32:bd:92:27:47:62:30:8e:5b:ba:da:db:a7:83:cd:36:
         17:58:65:9e:dd:9c:bd:10:9e:36:fc:f4:e3:aa:ae:99:2f:84:
         66:56:f7:a9:67:35:19:40:57:1f:01:42:d3:5c:81:68:2d:c3:
         c0:34:35:2e:bc:f1:8d:9d:1b:16:9f:d6:bc:75:df:99:57:06:
         68:8e:0c:10:00:6b:94:51:31:b5:f4:35:c3:a4:60:2c:8d:1d:
         00:27:5b:26:30:98:a2:27:e9:2d:0d:01:65:02:fe:60:42:89:
         3b:26:0c:ab:12:2f:b4:a6:16:35:ed:b9:93:8a:50:64:5a:0e:
         6a:c9:0b:bf:c3:d3:a3:7b:a2:16:c2:e1:df:ae:bb:d8:0d:25:
         61:73:88:37:50:3d:a5:17:8b:88:43:1b:37:12:42:44:1d:f5:
         15:d6:97:e1:53:0c:a5:10:43:f1:ca:b3:97:56:39:54:4f:fc:
         17:b0:ba:78:8a:ba:75:69:0e:b2:7f:ca:9c:12:9c:b7:f1:ea:
         c9:24:5e:4e:55:88:93:a9:df:37:de:4f:f6:e3:f7:ac:cb:71:
         2d:8b:bf:14:08:e3:c4:ab:d0:a2:3e:8b:a9:81:2e:7f:5f:41:
         e2:23:df:b7:9d:af:be:0f:57:99:de:c4:70:29:db:8a:cc:b3:
         55:16:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----