Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30045/6o7xtOCVNfujhb7AjWrGk0mwCmw.roa
File:                     6o7xtOCVNfujhb7AjWrGk0mwCmw.roa (raw, json)
Hash identifier:          11GT/8jFaz7d+N2jyTEWcpPyFSHQEv8kvl6WPINJzNQ=
Subject key identifier:   EA:8E:F1:B4:E0:95:35:FB:A3:85:BE:C0:8D:6A:C6:93:49:B0:0A:6C
Certificate issuer:       /CN=395D892753C1595E076B5F10065A048661C3079E
Certificate serial:       1C
Authority key identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/6o7xtOCVNfujhb7AjWrGk0mwCmw.roa
Signing time:             Tue 25 May 2021 02:37:03 +0000
ROA not before:           Tue 25 May 2021 02:37:03 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     2515
IP address blocks:        2001:dc2::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395D892753C1595E076B5F10065A048661C3079E
        Validity
            Not Before: May 25 02:37:03 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=EA8EF1B4E09535FBA385BEC08D6AC69349B00A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:93:f1:cc:09:b0:3e:19:f3:7f:37:38:a1:
                    79:db:bf:6f:63:69:d7:ca:a0:41:dc:76:52:68:8d:
                    24:6e:7f:c3:1c:52:00:a4:76:16:5c:a4:d6:50:53:
                    96:4b:57:6e:ff:57:63:c2:64:e8:e8:4e:69:38:55:
                    27:d1:01:dd:6f:71:4e:01:ff:c8:80:d0:ee:68:35:
                    14:d8:58:03:1a:16:70:ac:64:0a:4b:06:21:28:d8:
                    25:07:13:91:b6:26:1a:3f:4b:83:8c:9e:37:12:14:
                    17:f6:4c:4a:bd:e8:16:21:91:02:35:53:87:70:65:
                    f5:21:4e:57:c0:77:13:26:44:0e:55:aa:d4:31:e4:
                    b7:a6:e4:5c:2c:b5:8c:4f:92:cc:6d:4a:6f:94:02:
                    0c:cc:c0:25:5d:07:7a:4e:21:da:3e:e1:05:5a:5a:
                    c8:4f:ea:b9:47:2b:ea:6e:68:33:14:a5:c1:14:c7:
                    10:97:7a:ce:d6:9f:18:9f:b3:06:05:45:d7:68:41:
                    5a:5f:26:c7:64:0a:14:c6:a9:61:69:a3:e0:77:90:
                    df:ea:b7:19:9b:16:bf:fc:2b:a7:50:98:ae:c3:6f:
                    08:6b:24:86:2b:b9:02:38:04:b4:73:f6:be:bf:37:
                    77:12:af:08:e3:fc:78:f3:d6:15:50:d9:36:68:af:
                    ad:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8E:F1:B4:E0:95:35:FB:A3:85:BE:C0:8D:6A:C6:93:49:B0:0A:6C
            X509v3 Authority Key Identifier:
                keyid:39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/6o7xtOCVNfujhb7AjWrGk0mwCmw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dc2::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:6c:02:e5:ac:01:c1:06:47:71:60:ab:7a:62:e0:a3:56:e8:
         1e:f9:ef:15:4e:35:2e:ad:57:3a:2c:81:38:e9:be:c7:d4:6c:
         bc:e6:3d:56:46:00:0c:14:1f:cb:15:9f:c9:2f:1f:a4:89:f5:
         1e:0e:bb:f9:1f:2a:69:96:04:81:e5:f0:0b:c5:df:28:c7:79:
         42:4a:90:7e:73:79:dc:9c:cf:b3:f9:30:9c:8f:8c:4d:e4:84:
         e2:ab:7f:8c:ec:26:42:8d:30:bd:e4:aa:95:c0:dd:bb:88:6e:
         ae:37:7f:39:8e:bb:ae:d4:2f:31:59:b9:ea:d8:ae:09:ea:17:
         1c:c7:c2:5a:cf:ed:ba:2e:96:f5:59:3f:ed:82:ee:5d:26:58:
         0d:3e:f4:0c:dc:13:e5:98:fc:b4:7d:6a:01:34:48:67:2a:d9:
         31:43:b4:d4:2b:3a:5f:77:90:6a:0c:59:29:61:4d:a1:0d:28:
         b9:26:5b:8f:64:d6:ae:fa:21:95:2f:70:a6:43:6d:df:31:96:
         68:4f:46:78:b2:2e:52:e8:71:c9:15:4a:44:dc:f2:ec:97:ac:
         94:07:80:7d:34:42:3e:e9:57:b8:5d:6a:51:be:38:33:61:a0:
         54:b2:70:f9:78:53:26:5e:db:3d:e5:16:a0:7a:34:9b:4a:72:
         bb:c5:97:f5
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOTVE
ODkyNzUzQzE1OTVFMDc2QjVGMTAwNjVBMDQ4NjYxQzMwNzlFMB4XDTIxMDUyNTAy
MzcwM1oXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoRUE4RUYxQjRFMDk1MzVG
QkEzODVCRUMwOEQ2QUM2OTM0OUIwMEE2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKtjk/HMCbA+GfN/Nzihedu/b2Np18qgQdx2UmiNJG5/wxxSAKR2
Flyk1lBTlktXbv9XY8Jk6OhOaThVJ9EB3W9xTgH/yIDQ7mg1FNhYAxoWcKxkCksG
ISjYJQcTkbYmGj9Lg4yeNxIUF/ZMSr3oFiGRAjVTh3Bl9SFOV8B3EyZEDlWq1DHk
t6bkXCy1jE+SzG1Kb5QCDMzAJV0Hek4h2j7hBVpayE/quUcr6m5oMxSlwRTHEJd6
ztafGJ+zBgVF12hBWl8mx2QKFMapYWmj4HeQ3+q3GZsWv/wrp1CYrsNvCGskhiu5
AjgEtHP2vr83dxKvCOP8ePPWFVDZNmivrS8CAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBTqjvG04JU1+6OFvsCNasaTSbAKbDAfBgNVHSMEGDAWgBQ5XYknU8FZXgdrXxAG
WgSGYcMHnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNDUvT1YySkoxUEJXVjRIYTE4UUJsb0VobUhEQjU0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT1YySkoxUEJXVjRIYTE4UUJsb0Vo
bUhEQjU0LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDQ1LzZvN3h0T0NWTmZ1amhiN0FqV3JHazBtd0Ntdy5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQ3CMA0GCSqGSIb3DQEBCwUA
A4IBAQCCbALlrAHBBkdxYKt6YuCjVuge+e8VTjUurVc6LIE46b7H1Gy85j1WRgAM
FB/LFZ/JLx+kifUeDrv5HypplgSB5fALxd8ox3lCSpB+c3ncnM+z+TCcj4xN5ITi
q3+M7CZCjTC95KqVwN27iG6uN385jruu1C8xWbnq2K4J6hccx8Jaz+26Lpb1WT/t
gu5dJlgNPvQM3BPlmPy0fWoBNEhnKtkxQ7TUKzpfd5BqDFkpYU2hDSi5JluPZNau
+iGVL3CmQ23fMZZoT0Z4si5S6HHJFUpE3PLsl6yUB4B9NEI+6Ve4XWpRvjgzYaBU
snD5eFMmXts95RagejSbSnK7xZf1
-----END CERTIFICATE-----