Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/pMlKZTtE0dvyjr96taN-ImGXLeM.roa
File:                     pMlKZTtE0dvyjr96taN-ImGXLeM.roa (raw, json)
Hash identifier:          7xoNyEY2MvZsVPOL6Ax0WGEgwnQBFoV0MQPW+Pa9bG0=
Subject key identifier:   A4:C9:4A:65:3B:44:D1:DB:F2:8E:BF:7A:B5:A3:7E:22:61:97:2D:E3
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       21
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/pMlKZTtE0dvyjr96taN-ImGXLeM.roa
Signing time:             Tue 25 May 2021 02:37:15 +0000
ROA not before:           Tue 25 May 2021 02:37:15 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9370
IP address blocks:        2001:e44::/31 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: May 25 02:37:15 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=A4C94A653B44D1DBF28EBF7AB5A37E2261972DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:fd:c9:f9:6a:34:bf:9b:32:e8:5f:f2:0d:
                    7e:7f:4e:7e:0b:5a:fe:da:c6:ae:c2:20:79:54:97:
                    01:37:90:f3:81:9c:89:15:6b:69:95:62:2f:89:0d:
                    7b:a6:84:50:32:7b:b8:34:b4:70:74:88:0e:e0:a9:
                    31:1a:f5:49:65:55:ab:cb:02:57:53:65:53:cd:61:
                    90:1b:d0:88:d8:87:d6:f9:5b:13:c6:45:6b:16:bb:
                    07:42:dd:03:59:4d:b8:21:94:47:6f:d8:08:a9:5a:
                    e0:9a:4f:8b:f4:17:c1:70:aa:55:35:ec:4f:c5:2e:
                    61:57:d9:70:86:04:59:b5:58:b6:73:26:59:cc:51:
                    d0:2d:cd:18:5a:f2:58:41:35:f6:68:26:8b:c8:6b:
                    77:89:15:c2:54:2a:31:22:dd:a2:ba:ee:2d:2c:71:
                    6d:59:0e:33:86:82:dd:d1:4e:3f:3b:ee:23:f2:01:
                    9e:82:08:66:08:f9:2e:d5:0e:2a:88:5d:39:3c:81:
                    27:88:c9:ee:06:3c:a0:f7:65:a4:bb:5a:23:33:84:
                    e3:bd:4e:0c:04:84:4f:76:2e:f3:ba:80:e4:22:ed:
                    1a:a6:30:f7:37:ac:d4:5f:f3:f9:3b:e8:13:14:19:
                    e3:3d:a1:ab:c5:9b:2a:d4:6d:0d:8e:9f:ae:5f:5e:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:4A:65:3B:44:D1:DB:F2:8E:BF:7A:B5:A3:7E:22:61:97:2D:E3
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/pMlKZTtE0dvyjr96taN-ImGXLeM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e44::/31

    Signature Algorithm: sha256WithRSAEncryption
         7f:d6:1e:d9:84:ca:52:d7:73:0f:19:a4:09:77:2d:d1:8f:1a:
         ba:2a:a2:be:b0:17:bd:d9:03:cf:64:9c:49:a0:22:f9:a4:3d:
         1e:20:94:18:0f:9a:fd:2f:84:72:16:cd:f5:92:f1:6f:e8:02:
         36:2a:43:55:3a:3b:0c:9e:d9:03:6c:91:09:65:49:98:fe:39:
         12:c8:b7:fe:e1:ff:d0:bf:63:e2:f4:ba:48:af:32:ac:2a:74:
         18:df:bc:d8:31:3c:83:57:27:41:6d:3c:85:51:6d:54:f0:40:
         2b:1d:77:d3:ec:92:74:c1:17:8c:b9:e4:7e:d3:e8:23:cf:0b:
         e0:4e:66:fa:fa:7a:a8:68:44:4e:2f:61:5f:02:cb:42:6d:77:
         5d:b6:f9:74:54:d9:38:ae:3a:a3:f6:9f:e5:2a:73:a5:b1:33:
         4c:aa:4a:62:52:7e:1f:82:fe:67:b7:1b:f9:ca:77:13:65:52:
         08:6d:b9:5d:3c:ca:f1:2c:8b:fb:fa:66:36:55:a3:3c:88:33:
         29:22:52:df:a1:18:d4:05:8f:52:8e:51:26:30:d6:68:bc:d2:
         05:ea:8b:dc:08:4d:ed:6b:e6:80:cb:aa:f4:bb:d5:73:3f:ed:
         fd:16:66:43:cc:65:4b:84:fb:90:e5:21:6d:f1:ea:d3:ab:31:
         68:0c:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----