Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/MIRoomzn8fnpCqDjSfC37Oxymq4.roa
File:                     MIRoomzn8fnpCqDjSfC37Oxymq4.roa (raw, json)
Hash identifier:          0idKHQBd+qsuAOG1NVhagN4cugjKWvZotX6XoWL+OhU=
Subject key identifier:   30:84:68:A2:6C:E7:F1:F9:E9:0A:A0:E3:49:F0:B7:EC:EC:72:9A:AE
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       14
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/MIRoomzn8fnpCqDjSfC37Oxymq4.roa
Signing time:             Mon 01 Nov 2021 01:28:57 +0000
ROA not before:           Mon 01 Nov 2021 01:28:57 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        2001:240::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Nov  1 01:28:57 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=308468A26CE7F1F9E90AA0E349F0B7ECEC729AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:97:93:e5:b2:57:36:c7:63:d1:26:32:42:
                    5f:04:da:d2:5e:5d:6b:f0:88:47:b6:74:16:b3:33:
                    c5:1c:8a:95:01:e4:a9:5a:ad:3d:94:4b:d7:f7:18:
                    42:56:b2:93:43:b5:bf:ed:ad:69:e6:81:23:8a:23:
                    1f:ae:ec:81:f9:d2:6b:af:f7:3d:8d:6e:ed:87:c0:
                    8b:9b:83:24:e6:28:87:7b:4b:14:8c:cb:c7:d1:25:
                    5e:bb:60:4d:a4:8f:4e:68:a6:13:0f:0c:88:01:df:
                    42:5a:e4:c7:1c:c3:b3:3a:9f:0b:e3:80:d2:aa:7d:
                    3a:06:a2:59:3b:ed:36:0f:1f:57:f6:0c:fa:f7:39:
                    70:c3:81:84:b2:f5:d5:ab:8d:fd:23:16:11:5f:58:
                    bf:13:77:d5:b1:48:b5:f5:9c:d9:ad:0f:fa:d8:c5:
                    c2:22:ec:3e:5f:71:e5:ba:97:fb:f0:e8:7b:77:9c:
                    c5:39:fe:5d:e4:30:86:43:99:1a:45:6c:4f:5a:a4:
                    45:d5:59:c0:55:e9:a3:78:3f:b8:19:d3:f7:74:d0:
                    10:a7:e0:3d:2c:c4:00:fa:19:1c:a5:5f:98:56:e4:
                    86:27:b9:cb:70:70:21:9c:ef:7f:53:f0:7f:17:bf:
                    89:ee:90:8e:29:dc:fb:cc:c6:75:46:a1:a6:5f:33:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:84:68:A2:6C:E7:F1:F9:E9:0A:A0:E3:49:F0:B7:EC:EC:72:9A:AE
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/MIRoomzn8fnpCqDjSfC37Oxymq4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:51:dc:d1:ec:2a:e1:7b:58:e1:d3:9b:00:fa:48:d6:ac:f4:
         da:0a:f2:5c:6f:aa:a6:7d:58:04:82:3b:a5:4a:b2:0a:8a:e0:
         81:17:b9:90:eb:37:c9:32:37:d3:aa:7b:b0:a5:30:d6:f6:77:
         91:10:87:50:9d:0c:84:a6:fc:b0:b3:d3:5c:d4:15:59:fe:35:
         a8:54:84:b7:93:91:f0:3f:e1:fe:c9:91:ea:1c:73:61:ea:6b:
         e8:c7:31:d6:57:e9:1e:fc:2c:88:c8:5c:3e:7e:fa:45:99:06:
         7d:4d:29:04:e1:14:59:59:b6:17:26:54:d8:50:98:35:9e:75:
         7a:82:1c:db:34:6e:0e:3e:02:cb:bb:ca:63:b9:55:b6:83:49:
         26:cb:11:73:41:93:78:5c:53:6c:ef:19:ce:bf:91:ca:5f:1c:
         56:6d:4f:b6:2f:85:7e:04:6a:77:e2:0d:3a:cc:a4:e1:67:2e:
         fe:04:e8:f7:ac:61:6f:5f:a7:41:54:4e:e6:01:02:8d:19:c9:
         4d:0b:fb:b1:a6:0f:6f:8f:07:d4:68:be:e9:7a:96:b4:8a:af:
         b3:05:2a:93:a1:19:16:46:1c:9a:60:52:89:1a:6b:82:be:88:
         dc:54:8f:77:19:f0:a3:f3:6b:8d:cf:fa:67:3c:b6:86:99:38:
         e3:52:c7:a2
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1
QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTIxMTEwMTAx
Mjg1N1oXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMzA4NDY4QTI2Q0U3RjFG
OUU5MEFBMEUzNDlGMEI3RUNFQzcyOUFBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL4rl5Plslc2x2PRJjJCXwTa0l5da/CIR7Z0FrMzxRyKlQHkqVqt
PZRL1/cYQlayk0O1v+2taeaBI4ojH67sgfnSa6/3PY1u7YfAi5uDJOYoh3tLFIzL
x9ElXrtgTaSPTmimEw8MiAHfQlrkxxzDszqfC+OA0qp9OgaiWTvtNg8fV/YM+vc5
cMOBhLL11auN/SMWEV9YvxN31bFItfWc2a0P+tjFwiLsPl9x5bqX+/Doe3ecxTn+
XeQwhkOZGkVsT1qkRdVZwFXpo3g/uBnT93TQEKfgPSzEAPoZHKVfmFbkhie5y3Bw
IZzvf1Pwfxe/ie6Qjinc+8zGdUahpl8zuI0CAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBQwhGiibOfx+ekKoONJ8Lfs7HKarjAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp
cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt
RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDE2L01JUm9vbXpuOGZucENxRGpTZkMzN094eW1xNC5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQJAMA0GCSqGSIb3DQEBCwUA
A4IBAQAJUdzR7Crhe1jh05sA+kjWrPTaCvJcb6qmfVgEgjulSrIKiuCBF7mQ6zfJ
MjfTqnuwpTDW9neREIdQnQyEpvyws9Nc1BVZ/jWoVIS3k5HwP+H+yZHqHHNh6mvo
xzHWV+ke/CyIyFw+fvpFmQZ9TSkE4RRZWbYXJlTYUJg1nnV6ghzbNG4OPgLLu8pj
uVW2g0kmyxFzQZN4XFNs7xnOv5HKXxxWbU+2L4V+BGp34g06zKThZy7+BOj3rGFv
X6dBVE7mAQKNGclNC/uxpg9vjwfUaL7pepa0iq+zBSqToRkWRhyaYFKJGmuCvojc
VI93GfCj82uNz/pnPLaGmTjjUsei
-----END CERTIFICATE-----