Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ZWASO9Er3AJeV07Gv01NMzK6T0k.roa
File:                     ZWASO9Er3AJeV07Gv01NMzK6T0k.roa (raw, json)
Hash identifier:          x9/4eD6b5cMEbxNu4CyETbCVP/w9tlw6XIOmAaQV/gI=
Subject key identifier:   65:60:12:3B:D1:2B:DC:02:5E:57:4E:C6:BF:4D:4D:33:32:BA:4F:49
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       20
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ZWASO9Er3AJeV07Gv01NMzK6T0k.roa
Signing time:             Tue 25 May 2021 02:37:15 +0000
ROA not before:           Tue 25 May 2021 02:37:15 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9370
IP address blocks:        2001:e40::/30 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: May 25 02:37:15 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=6560123BD12BDC025E574EC6BF4D4D3332BA4F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:7e:2b:ce:68:3c:75:df:1a:8d:5b:3e:2f:
                    d8:d1:43:dd:ac:74:8b:37:35:ca:69:6b:7d:4a:6c:
                    96:76:44:2c:86:3f:ce:be:2f:2d:f6:76:c4:af:ea:
                    85:88:c9:f5:de:c9:ac:73:09:cc:33:44:a4:e5:f1:
                    bb:9d:a4:35:e9:36:61:6a:51:3b:83:4d:e2:5f:a4:
                    dc:0c:a3:5e:e5:9c:af:c9:2f:a2:24:53:86:03:69:
                    f5:84:ce:40:97:01:53:18:61:41:9c:0a:a9:83:bf:
                    0e:5c:5b:bf:65:c3:cd:0f:ef:5e:68:ab:51:48:72:
                    a0:c3:18:ac:79:e8:a7:7b:39:3e:97:31:a0:9c:13:
                    a8:84:d3:9a:da:90:f3:4a:b7:07:67:e2:28:74:49:
                    d7:12:d9:f8:23:53:0d:6b:0b:fc:b8:69:92:2f:be:
                    0b:6c:e5:58:55:9a:d2:d7:b6:e5:0e:2f:03:92:16:
                    d4:1a:d2:e1:fa:aa:95:11:54:fd:20:30:a9:9d:b2:
                    d2:56:22:37:e9:dd:3b:f1:88:d0:6e:94:58:3e:db:
                    07:c1:56:f8:7d:37:d1:86:de:24:59:f9:d0:7a:53:
                    41:ab:a6:02:2a:ed:98:ed:65:51:3d:d6:79:cc:d1:
                    31:c4:fb:75:b7:d5:95:78:65:09:9f:2d:0c:2e:47:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:60:12:3B:D1:2B:DC:02:5E:57:4E:C6:BF:4D:4D:33:32:BA:4F:49
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ZWASO9Er3AJeV07Gv01NMzK6T0k.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e40::/30

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:91:f8:d5:fd:de:84:b7:a2:9b:41:62:34:23:55:d1:3f:
         50:6c:36:d5:e0:52:53:eb:0b:44:24:99:bf:70:1a:46:28:12:
         b2:f7:e4:87:4a:54:ba:ab:25:30:80:ac:c1:5b:b9:bf:02:86:
         b6:bf:f8:8b:e6:0a:2a:63:a6:75:23:d0:7d:89:c9:20:e9:45:
         e4:b6:3a:bb:7b:69:d2:8e:d7:36:f3:86:bc:9c:22:bf:00:07:
         66:83:0b:8e:e8:f9:61:da:ee:ca:3f:e0:ca:ce:ce:8f:71:4d:
         5e:f6:c5:0d:ca:17:f3:dd:c1:7c:af:5e:02:ce:ce:5e:ad:08:
         11:e6:0d:4c:81:fc:6f:6b:dd:93:fa:94:4c:2d:6f:bd:d4:e7:
         8c:ed:19:de:5b:52:ad:2d:9c:2a:95:7a:5c:ed:f9:93:25:e1:
         fe:c9:1a:5e:8e:16:52:47:b0:05:99:a3:06:8d:7d:14:fd:cf:
         64:23:3b:c9:0a:bd:0e:33:8c:9f:b3:45:a5:5d:03:6d:86:3c:
         c2:50:a0:94:44:f9:3d:ff:8e:e6:aa:bd:c3:ec:97:2e:57:07:
         e0:28:26:de:4b:62:85:6c:53:06:0f:42:ac:3a:85:ea:9a:15:
         73:19:13:94:21:ba:a4:5c:0b:4c:c5:27:c6:d1:ed:9d:9f:c4:
         64:33:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----