Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30045/1HETKhY0ppWdBEDRpCLtXoRlJ_M.roa
File:                     1HETKhY0ppWdBEDRpCLtXoRlJ_M.roa (raw, json)
Hash identifier:          aQ40Tgjky7OBxBXInEEyRY1+o01CbLjT6r9UWztjy0g=
Subject key identifier:   D4:71:13:2A:16:34:A6:95:9D:04:40:D1:A4:22:ED:5E:84:65:27:F3
Certificate issuer:       /CN=395D892753C1595E076B5F10065A048661C3079E
Certificate serial:       1D
Authority key identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/1HETKhY0ppWdBEDRpCLtXoRlJ_M.roa
Signing time:             Tue 25 May 2021 02:37:04 +0000
ROA not before:           Tue 25 May 2021 02:37:04 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     2515
IP address blocks:        2001:c40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395D892753C1595E076B5F10065A048661C3079E
        Validity
            Not Before: May 25 02:37:04 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=D471132A1634A6959D0440D1A422ED5E846527F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:57:fb:93:60:55:6f:84:49:23:50:a5:0b:
                    b2:3a:4f:d1:76:b2:84:7b:ac:12:a7:09:e9:09:36:
                    8b:d2:4f:d3:7c:68:93:10:40:4b:9d:5b:de:49:39:
                    94:63:ff:24:97:67:23:ce:47:a4:05:36:39:15:b1:
                    c4:98:07:b3:b1:16:0d:af:42:1d:db:00:88:7e:9b:
                    4b:d6:2c:62:2a:e6:38:79:a4:e0:03:68:c9:b3:1a:
                    d0:f5:d8:97:45:05:55:d3:89:c8:c5:fc:2d:92:bc:
                    9b:2f:68:75:b0:56:3c:1e:43:1a:ea:30:96:03:c7:
                    e6:69:ed:43:41:4f:6f:54:46:2b:23:a1:5a:88:9f:
                    a4:77:95:a2:b3:a5:84:63:fb:53:e2:ed:97:5b:09:
                    fc:1a:6d:a4:ad:58:41:39:da:bf:98:9d:5d:a5:14:
                    57:5c:77:0c:7b:f0:d6:17:c7:21:9c:69:0a:17:4b:
                    49:ae:6c:c1:aa:da:f6:f4:bc:02:c0:23:ed:de:be:
                    ff:19:43:84:de:bf:a5:fd:2d:3d:e6:c9:47:68:d7:
                    c7:9d:2b:93:fd:87:f5:c0:ab:9f:ba:81:3e:24:22:
                    e0:5a:6b:75:d6:56:33:b3:0b:19:89:64:9b:aa:df:
                    8e:7e:fd:c1:ec:62:52:49:1b:c8:ed:5b:92:80:15:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:71:13:2A:16:34:A6:95:9D:04:40:D1:A4:22:ED:5E:84:65:27:F3
            X509v3 Authority Key Identifier:
                keyid:39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/1HETKhY0ppWdBEDRpCLtXoRlJ_M.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:f6:e9:33:16:11:e7:93:c8:84:df:ac:55:43:d0:35:a7:bf:
         9b:d0:54:65:63:ba:63:0d:93:c6:f6:18:a8:dd:ae:a3:f6:c5:
         82:17:af:97:f0:bd:00:6d:65:93:db:ba:50:f6:05:5a:25:ec:
         5a:47:6b:44:83:2b:d7:ae:6a:d4:06:1f:c9:4c:c6:30:ac:3f:
         9b:ef:b0:37:29:65:a2:a6:a3:72:8e:51:f1:85:70:7e:19:27:
         35:b7:72:4b:b6:69:0e:c8:f1:7b:6c:d6:d1:d2:a5:a6:8f:7f:
         33:2f:05:8a:5c:20:34:17:5e:ab:cf:3a:42:8f:f6:18:6d:1f:
         fe:68:b7:e4:d5:74:e9:f4:02:a9:3e:59:cd:49:4b:29:24:5b:
         16:95:94:75:a5:db:69:8b:b6:b0:71:09:ba:84:aa:48:17:87:
         0d:36:94:be:65:92:dd:a2:88:30:8c:fd:34:31:ef:71:0c:9a:
         f5:ff:3a:2f:0c:d0:2f:b9:b6:e9:8b:2f:b2:b2:13:66:c0:41:
         e0:19:7f:95:b8:07:71:04:95:ca:76:9b:0a:92:15:e5:3b:dd:
         d1:00:9b:8a:d4:e8:16:81:03:63:19:05:b9:a6:2f:cc:ea:d0:
         3e:dc:8d:8d:7b:f2:f3:75:1e:c8:2c:5a:28:b3:89:de:f2:34:
         28:0f:ad:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----