Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30058/bfxfsRLMlxQYqS_3LXCxIzAxAWY.roa
File:                     bfxfsRLMlxQYqS_3LXCxIzAxAWY.roa (raw, json)
Hash identifier:          +fvhQ2f2shP1lqd6ifMF32/LbCHhw3BmFGNyMYDId+o=
Subject key identifier:   6D:FC:5F:B1:12:CC:97:14:18:A9:2F:F7:2D:70:B1:23:30:31:01:66
Certificate issuer:       /CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
Certificate serial:       1A
Authority key identifier: A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/bfxfsRLMlxQYqS_3LXCxIzAxAWY.roa
Signing time:             Tue 25 May 2021 02:36:52 +0000
ROA not before:           Tue 25 May 2021 02:36:52 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     18126
IP address blocks:        2001:f58::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
        Validity
            Not Before: May 25 02:36:52 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=6DFC5FB112CC971418A92FF72D70B12330310166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:ec:23:fb:e8:ea:15:fa:57:32:a2:2f:e7:
                    61:b6:65:61:6a:76:a5:22:92:72:89:b1:5e:4d:5b:
                    a6:6d:41:be:4f:16:99:32:40:9a:87:29:cd:f0:e0:
                    ce:fb:5e:d8:ea:73:f1:a1:10:63:2f:bd:18:43:fc:
                    e9:54:ab:65:16:2c:da:96:a3:dc:bd:91:31:1a:17:
                    9a:fc:18:70:a6:8a:24:ab:32:7b:1a:32:d1:4b:09:
                    75:72:60:4a:41:09:be:5b:e3:3b:c5:23:c4:b7:0e:
                    06:ef:0b:54:fb:f3:c7:d5:ca:be:c3:ff:08:42:ed:
                    e4:30:3d:35:d2:84:3d:88:a4:00:16:30:8c:cb:90:
                    5b:76:f8:83:e7:3c:38:4a:a5:0c:03:d8:cc:1c:0f:
                    44:83:a4:5b:0e:a0:e6:d0:21:89:c0:6d:95:44:d3:
                    d1:9f:b6:51:dc:29:02:21:49:b3:79:49:2d:ac:d3:
                    03:2a:eb:3c:fe:1d:7d:81:24:64:b5:fa:3b:f1:a3:
                    4e:ca:1c:46:57:d9:87:22:7f:32:72:23:15:21:f5:
                    0e:ff:e8:b9:a8:ff:46:52:4a:ad:9d:f6:b9:45:4b:
                    fe:91:06:76:25:ba:bb:42:fe:aa:16:6e:5f:e7:19:
                    d4:3b:a1:f6:8c:13:a4:c0:17:61:9e:bc:94:a5:53:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FC:5F:B1:12:CC:97:14:18:A9:2F:F7:2D:70:B1:23:30:31:01:66
            X509v3 Authority Key Identifier:
                keyid:A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/bfxfsRLMlxQYqS_3LXCxIzAxAWY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f58::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:29:ad:a4:89:fd:fb:e3:48:2c:f7:e2:a0:13:45:6f:bc:5d:
         9e:66:47:b0:71:07:c1:61:e5:e5:8e:16:eb:6c:a6:53:aa:d6:
         c3:47:06:59:07:99:de:60:bf:fa:84:08:45:a0:35:c8:dd:d4:
         91:79:80:f4:7a:75:4c:48:31:19:31:51:4c:ca:03:0e:c2:ad:
         e3:31:20:9f:84:67:34:fa:9e:d2:fc:3e:14:3f:d0:45:6e:85:
         83:ff:78:ea:db:0a:d1:13:81:76:bf:84:36:99:cd:8a:5b:cf:
         e4:b2:60:80:73:db:42:33:b1:10:c8:14:f1:6c:cf:97:b0:5d:
         a2:53:04:42:cf:66:44:9e:20:88:90:d0:1e:75:4c:f1:16:ef:
         c7:82:cd:ac:8e:27:4d:1a:fa:90:e9:88:2a:6a:74:cc:30:e5:
         31:41:ad:c6:1e:a7:cd:d6:8d:8e:9e:60:d2:d7:3c:28:76:4a:
         6d:a1:12:74:5a:4b:91:4a:36:43:0e:6a:32:c0:0c:7a:fc:f6:
         b6:2b:2a:c1:b3:1f:47:b9:67:8c:53:3a:76:11:f7:c1:cb:fd:
         f8:35:f1:7d:b2:cb:d4:12:b9:30:9b:10:46:b3:b4:b2:3a:86:
         43:59:57:08:8b:67:09:f0:52:7f:a3:e8:7d:81:9c:f1:68:23:
         ca:c4:89:aa
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBMTk0
QTgzQzlDNkY0MDRGNzlGNUNERUI4Q0ZFMTE0N0Y1NEYyMUUwMB4XDTIxMDUyNTAy
MzY1MloXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoNkRGQzVGQjExMkNDOTcx
NDE4QTkyRkY3MkQ3MEIxMjMzMDMxMDE2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMdV7CP76OoV+lcyoi/nYbZlYWp2pSKScomxXk1bpm1Bvk8WmTJA
mocpzfDgzvte2Opz8aEQYy+9GEP86VSrZRYs2paj3L2RMRoXmvwYcKaKJKsyexoy
0UsJdXJgSkEJvlvjO8UjxLcOBu8LVPvzx9XKvsP/CELt5DA9NdKEPYikABYwjMuQ
W3b4g+c8OEqlDAPYzBwPRIOkWw6g5tAhicBtlUTT0Z+2UdwpAiFJs3lJLazTAyrr
PP4dfYEkZLX6O/GjTsocRlfZhyJ/MnIjFSH1Dv/ouaj/RlJKrZ32uUVL/pEGdiW6
u0L+qhZuX+cZ1Duh9owTpMAXYZ68lKVTJb8CAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBRt/F+xEsyXFBipL/ctcLEjMDEBZjAfBgNVHSMEGDAWgBShlKg8nG9AT3n1zeuM
/hFH9U8h4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNTgvb1pTb1BKeHZRRTk1OWMzcmpQNFJSX1ZQSWVBLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvb1pTb1BKeHZRRTk1OWMzcmpQNFJS
X1ZQSWVBLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDU4L2JmeGZzUkxNbHhRWXFTXzNMWEN4SXpBeEFXWS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQ9YMA0GCSqGSIb3DQEBCwUA
A4IBAQA4Ka2kif3740gs9+KgE0VvvF2eZkewcQfBYeXljhbrbKZTqtbDRwZZB5ne
YL/6hAhFoDXI3dSReYD0enVMSDEZMVFMygMOwq3jMSCfhGc0+p7S/D4UP9BFboWD
/3jq2wrRE4F2v4Q2mc2KW8/ksmCAc9tCM7EQyBTxbM+XsF2iUwRCz2ZEniCIkNAe
dUzxFu/Hgs2sjidNGvqQ6YgqanTMMOUxQa3GHqfN1o2OnmDS1zwodkptoRJ0WkuR
SjZDDmoywAx6/Pa2KyrBsx9HuWeMUzp2EffBy/34NfF9ssvUErkwmxBGs7SyOoZD
WVcIi2cJ8FJ/o+h9gZzxaCPKxImq
-----END CERTIFICATE-----