Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/5c_2c3G312cMgCxDPypF56PStRY.roa
File:                     5c_2c3G312cMgCxDPypF56PStRY.roa (raw, json)
Hash identifier:          6ynhSXZIHsIKEPhq0Ulqx8rzOfpbmNoBi2YznYZKrOQ=
Subject key identifier:   E5:CF:F6:73:71:B7:D7:67:0C:80:2C:43:3F:2A:45:E7:A3:D2:B5:16
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       11
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/5c_2c3G312cMgCxDPypF56PStRY.roa
Signing time:             Wed 18 Aug 2021 07:54:34 +0000
ROA not before:           Wed 18 Aug 2021 07:54:34 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     2518
IP address blocks:        2001:260::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: Aug 18 07:54:34 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=E5CFF67371B7D7670C802C433F2A45E7A3D2B516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:f8:6f:51:8e:a9:56:db:81:d6:7a:5a:8a:
                    2b:84:fe:0a:8b:95:af:48:ca:ae:62:cd:7c:fc:20:
                    16:57:de:45:1d:91:d0:a0:9a:68:d4:cc:98:48:9f:
                    46:8c:47:af:e4:bc:b8:66:41:6a:f5:60:eb:7f:b7:
                    0f:9b:71:02:00:65:1a:94:b9:66:3b:aa:7f:6b:8a:
                    cb:57:49:91:3b:7e:17:5d:f5:11:1e:d4:2a:ec:ab:
                    64:bf:85:d2:17:a6:0e:3c:1f:8f:c1:38:63:28:65:
                    02:91:20:e2:d1:a7:f9:e0:c1:3e:0a:dd:4c:9b:d6:
                    7a:1d:55:e9:70:69:0a:30:37:21:e6:cf:f0:fc:99:
                    ef:d2:f6:31:f3:3f:19:7f:9c:46:9a:41:0e:92:f6:
                    81:26:31:48:56:48:91:6b:46:a2:60:3a:38:db:30:
                    4f:24:d5:49:f1:73:b3:e3:9b:98:a9:79:31:b4:f9:
                    b7:75:ea:37:90:0b:8f:0a:90:9c:9a:4f:97:f6:7f:
                    10:6d:49:d5:67:19:98:33:70:77:78:d9:61:76:4e:
                    44:eb:85:6f:ad:f4:b5:2e:7e:6f:83:5d:64:5b:fc:
                    ba:bc:e9:53:81:4f:67:d2:b9:09:75:b8:d2:a1:37:
                    1e:b9:c9:f5:8d:64:5e:6b:a8:6d:11:3a:55:a0:bf:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:F6:73:71:B7:D7:67:0C:80:2C:43:3F:2A:45:E7:A3:D2:B5:16
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/5c_2c3G312cMgCxDPypF56PStRY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:260::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:12:6a:37:63:59:b0:9c:71:39:ee:d2:e3:de:8f:53:99:d1:
         09:fc:24:06:32:1e:7a:11:e7:72:2f:cd:16:6a:a2:b8:0b:4e:
         48:88:64:22:ce:62:da:aa:69:1d:ba:13:0b:89:32:83:1b:f7:
         98:4a:bc:3e:2f:4a:be:c5:f2:e1:99:df:40:46:02:7d:8e:93:
         00:65:13:69:5b:51:89:a1:3f:48:02:e6:9a:4b:a6:76:24:e2:
         b8:25:dc:1f:e0:a5:50:d0:50:e0:d5:8a:f3:fd:c1:a7:9c:a0:
         ef:94:00:40:a0:d3:0f:36:ae:13:9b:e7:1b:88:78:fd:a6:b0:
         82:82:4d:33:2f:8b:63:9f:6e:88:ff:8c:23:83:35:53:88:cd:
         5c:6a:25:c9:ad:b2:14:53:50:c3:24:cd:f4:f2:b6:92:67:2e:
         ea:a0:fe:6e:28:da:a2:bd:bf:59:a7:b3:ad:2d:97:5c:28:ea:
         5f:08:78:96:79:c7:4c:df:45:3c:4a:d6:5d:12:f6:4a:e9:a5:
         ea:43:ef:fd:48:18:d4:0e:06:42:6e:b7:4e:ba:04:30:8e:68:
         a6:05:42:32:ad:61:25:15:24:9e:91:61:da:2c:de:f8:c0:6c:
         ac:be:ca:01:b3:51:3e:4a:06:27:42:65:37:17:04:21:6c:90:
         d8:89:41:b0
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRUE1
RDgyMTU2NThFNjQ0MzEyREE0NDA1NUExQTE2Qzk1MzI4RDhCMB4XDTIxMDgxODA3
NTQzNFoXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoRTVDRkY2NzM3MUI3RDc2
NzBDODAyQzQzM0YyQTQ1RTdBM0QyQjUxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKT1+G9RjqlW24HWelqKK4T+CouVr0jKrmLNfPwgFlfeRR2R0KCa
aNTMmEifRoxHr+S8uGZBavVg63+3D5txAgBlGpS5Zjuqf2uKy1dJkTt+F131ER7U
KuyrZL+F0hemDjwfj8E4YyhlApEg4tGn+eDBPgrdTJvWeh1V6XBpCjA3IebP8PyZ
79L2MfM/GX+cRppBDpL2gSYxSFZIkWtGomA6ONswTyTVSfFzs+ObmKl5MbT5t3Xq
N5ALjwqQnJpPl/Z/EG1J1WcZmDNwd3jZYXZOROuFb630tS5+b4NdZFv8urzpU4FP
Z9K5CXW40qE3HrnJ9Y1kXmuobRE6VaC/36MCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBTlz/ZzcbfXZwyALEM/KkXno9K1FjAfBgNVHSMEGDAWgBTupdghVljmRDEtpEBV
oaFslTKNizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTUvN3FYWUlWWlk1a1F4TGFSQVZhR2hiSlV5allzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN3FYWUlWWlk1a1F4TGFSQVZhR2hi
SlV5allzLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDE1LzVjXzJjM0czMTJjTWdDeERQeXBGNTZQU3RSWS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQJgMA0GCSqGSIb3DQEBCwUA
A4IBAQCoEmo3Y1mwnHE57tLj3o9TmdEJ/CQGMh56EedyL80WaqK4C05IiGQizmLa
qmkduhMLiTKDG/eYSrw+L0q+xfLhmd9ARgJ9jpMAZRNpW1GJoT9IAuaaS6Z2JOK4
Jdwf4KVQ0FDg1Yrz/cGnnKDvlABAoNMPNq4Tm+cbiHj9prCCgk0zL4tjn26I/4wj
gzVTiM1caiXJrbIUU1DDJM308raSZy7qoP5uKNqivb9Zp7OtLZdcKOpfCHiWecdM
30U8StZdEvZK6aXqQ+/9SBjUDgZCbrdOugQwjmimBUIyrWElFSSekWHaLN74wGys
vsoBs1E+SgYnQmU3FwQhbJDYiUGw
-----END CERTIFICATE-----