Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30047/XagXCqtA9SL64XK4-3Ok8PDa5jk.roa
File:                     XagXCqtA9SL64XK4-3Ok8PDa5jk.roa (raw, json)
Hash identifier:          /BbAm7+CQSoRxG5mK8EfDtioihuPXSNBp8CU06flFw8=
Subject key identifier:   5D:A8:17:0A:AB:40:F5:22:FA:E1:72:B8:FB:73:A4:F0:F0:DA:E6:39
Certificate issuer:       /CN=075054052FAE3C210E8A73FBE525CAC74E786A26
Certificate serial:       1F
Authority key identifier: 07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/XagXCqtA9SL64XK4-3Ok8PDa5jk.roa
Signing time:             Tue 25 May 2021 02:36:53 +0000
ROA not before:           Tue 25 May 2021 02:36:53 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     37899
IP address blocks:        2001:a000::/21 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075054052FAE3C210E8A73FBE525CAC74E786A26
        Validity
            Not Before: May 25 02:36:53 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=5DA8170AAB40F522FAE172B8FB73A4F0F0DAE639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:95:e1:95:ab:16:fb:06:43:4e:19:52:6f:
                    df:83:c5:f2:f5:38:07:08:22:87:5c:98:0f:12:c4:
                    44:86:62:1f:14:68:80:ce:4b:41:5b:7b:e9:ec:f5:
                    d5:94:9a:cd:a0:da:3e:9e:2f:18:f5:9c:df:de:11:
                    39:72:b3:17:74:25:c4:11:8e:7c:cf:d2:b3:6e:4c:
                    d4:0c:a5:5a:46:ef:71:59:20:fb:ad:5d:f8:67:b0:
                    92:59:68:dd:d3:8c:1e:06:9f:81:83:e3:00:be:72:
                    6b:b3:05:c7:e7:c7:02:fc:d8:b0:d4:9f:d6:8c:3c:
                    13:71:9b:e1:3d:69:5d:62:e0:99:bb:0e:06:b9:59:
                    06:8a:28:8d:e5:1d:f7:42:21:34:5d:e2:8d:3a:39:
                    fa:ee:31:cd:06:ed:83:b9:77:32:fe:d6:60:98:c0:
                    a9:b6:53:4f:0a:28:19:e8:52:50:c4:a2:77:f4:f9:
                    c4:0e:b4:94:57:a3:04:5d:a0:e2:96:04:ff:2e:f2:
                    a5:bc:89:fc:fc:49:ab:fb:5f:e5:f5:f6:6b:75:72:
                    01:dc:67:70:f8:9d:a9:be:44:e7:f5:cb:ab:e7:8a:
                    8f:40:1d:db:91:84:88:07:e0:93:78:e6:29:83:08:
                    9a:41:17:f0:75:67:88:eb:43:df:87:81:75:11:6e:
                    87:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A8:17:0A:AB:40:F5:22:FA:E1:72:B8:FB:73:A4:F0:F0:DA:E6:39
            X509v3 Authority Key Identifier:
                keyid:07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/XagXCqtA9SL64XK4-3Ok8PDa5jk.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:a000::/21

    Signature Algorithm: sha256WithRSAEncryption
         65:68:02:27:20:37:ca:42:a1:b0:6c:4a:28:56:23:79:fa:60:
         9e:42:0a:e2:ae:74:54:ac:ae:53:06:2e:d8:9e:99:a3:c5:d7:
         81:be:a5:f7:dc:bc:dc:2b:37:ab:68:f2:cd:05:2c:b3:fc:84:
         d3:4f:13:4b:86:69:41:72:15:a6:7b:d1:ab:12:ca:11:0b:68:
         09:f8:5c:13:c4:f2:4f:79:54:ff:f3:ef:d5:2d:6b:04:2b:e0:
         d1:2c:49:83:fb:7c:25:6c:51:20:e3:33:90:11:6a:03:6d:a7:
         f0:07:49:47:12:29:fa:fb:bd:0e:19:8a:8a:b9:3b:2c:07:88:
         59:f6:a8:3f:04:aa:36:85:db:a7:32:25:e7:f4:d8:fe:60:02:
         fc:3a:8d:f4:13:d0:70:9a:77:5a:0c:68:86:fc:b8:6a:f9:25:
         0b:5b:f9:cd:f9:3c:6b:72:c5:41:02:c9:1f:5a:62:cf:0a:b4:
         99:fd:26:ff:79:43:4d:62:18:a8:14:74:27:40:36:48:45:bb:
         ab:01:12:14:b1:76:29:d4:4e:c5:9f:28:8c:68:25:0c:7a:83:
         e2:12:2a:ec:de:b7:22:99:9c:61:18:35:7d:05:bd:95:0e:0f:
         aa:ec:a9:78:3a:07:e6:51:ef:a0:97:fa:db:97:57:2d:63:58:
         15:97:e3:7e
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNzUw
NTQwNTJGQUUzQzIxMEU4QTczRkJFNTI1Q0FDNzRFNzg2QTI2MB4XDTIxMDUyNTAy
MzY1M1oXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoNURBODE3MEFBQjQwRjUy
MkZBRTE3MkI4RkI3M0E0RjBGMERBRTYzOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALUrleGVqxb7BkNOGVJv34PF8vU4Bwgih1yYDxLERIZiHxRogM5L
QVt76ez11ZSazaDaPp4vGPWc394ROXKzF3QlxBGOfM/Ss25M1AylWkbvcVkg+61d
+Gewkllo3dOMHgafgYPjAL5ya7MFx+fHAvzYsNSf1ow8E3Gb4T1pXWLgmbsOBrlZ
BooojeUd90IhNF3ijTo5+u4xzQbtg7l3Mv7WYJjAqbZTTwooGehSUMSid/T5xA60
lFejBF2g4pYE/y7ypbyJ/PxJq/tf5fX2a3VyAdxncPidqb5E5/XLq+eKj0Ad25GE
iAfgk3jmKYMImkEX8HVniOtD34eBdRFuh3ECAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBRdqBcKq0D1Ivrhcrj7c6Tw8NrmOTAfBgNVHSMEGDAWgBQHUFQFL648IQ6Kc/vl
JcrHTnhqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNDcvQjFCVUJTLXVQQ0VPaW5QNzVTWEt4MDU0YWlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQjFCVUJTLXVQQ0VPaW5QNzVTWEt4
MDU0YWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDQ3L1hhZ1hDcXRBOVNMNjRYSzQtM09rOFBEYTVqay5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgACMAYDBAMgAaAwDQYJKoZIhvcNAQELBQAD
ggEBAGVoAicgN8pCobBsSihWI3n6YJ5CCuKudFSsrlMGLtiemaPF14G+pffcvNwr
N6to8s0FLLP8hNNPE0uGaUFyFaZ70asSyhELaAn4XBPE8k95VP/z79UtawQr4NEs
SYP7fCVsUSDjM5ARagNtp/AHSUcSKfr7vQ4Zioq5OywHiFn2qD8EqjaF26cyJef0
2P5gAvw6jfQT0HCad1oMaIb8uGr5JQtb+c35PGtyxUECyR9aYs8KtJn9Jv95Q01i
GKgUdCdANkhFu6sBEhSxdinUTsWfKIxoJQx6g+ISKuzetyKZnGEYNX0FvZUOD6rs
qXg6B+ZR76CX+tuXVy1jWBWX434=
-----END CERTIFICATE-----