Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30099/_m7ASUrz3OguIgWWBVB9DRvPU5c.roa
File:                     _m7ASUrz3OguIgWWBVB9DRvPU5c.roa (raw, json)
Hash identifier:          A1vXMp/QXL2hzOSFLX1WqMS0bN3Zmun3mBmOSqzTAqw=
Subject key identifier:   FE:6E:C0:49:4A:F3:DC:E8:2E:22:05:96:05:50:7D:0D:1B:CF:53:97
Certificate issuer:       /CN=D6B98D9AE608D1E060709B960EEF133AF2B81351
Certificate serial:       12
Authority key identifier: D6:B9:8D:9A:E6:08:D1:E0:60:70:9B:96:0E:EF:13:3A:F2:B8:13:51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/_m7ASUrz3OguIgWWBVB9DRvPU5c.roa
Signing time:             Tue 25 May 2021 02:37:16 +0000
ROA not before:           Tue 25 May 2021 02:37:16 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10021
IP address blocks:        2400:1000::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6B98D9AE608D1E060709B960EEF133AF2B81351
        Validity
            Not Before: May 25 02:37:16 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=FE6EC0494AF3DCE82E22059605507D0D1BCF5397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:73:7f:2f:1e:6c:f1:0a:c9:8f:83:76:f5:
                    14:b4:d0:78:c9:3c:63:6f:54:63:e0:23:1e:8f:da:
                    ac:48:8a:57:74:10:db:1c:e2:4e:1f:e7:1e:35:04:
                    c3:fb:31:ce:e9:f5:18:97:ef:38:e4:a9:ab:a1:76:
                    fa:a7:81:37:3b:4d:6d:39:d1:76:ac:65:c3:e0:ae:
                    4b:89:bb:65:61:72:3b:16:57:10:ae:e8:44:ba:c6:
                    f2:51:f4:49:0a:55:61:21:80:fe:d1:df:49:8f:31:
                    33:40:a6:5b:57:32:be:4d:ae:63:4e:35:30:89:7e:
                    74:89:16:cd:af:8b:f4:e0:5c:f1:40:da:ec:86:1a:
                    0b:ba:8d:61:7b:b4:b6:62:2c:7e:0a:26:61:94:46:
                    da:be:82:ba:10:c0:10:b3:ab:3f:61:b1:86:a4:82:
                    26:91:36:4e:2f:60:ff:12:a2:80:17:6e:0b:53:17:
                    44:3e:b6:46:d5:d0:e6:d4:f5:8d:bd:78:8b:e3:8e:
                    db:ed:2e:09:f8:88:a0:ad:00:f7:b1:b5:70:01:c5:
                    f0:4b:b5:3d:c1:fc:86:12:83:32:6c:8f:88:d8:fe:
                    e7:7b:ef:a1:c6:00:f9:76:2d:f3:17:06:00:f3:97:
                    cd:dc:6d:d1:b1:78:72:68:56:d2:50:be:5a:8d:05:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6E:C0:49:4A:F3:DC:E8:2E:22:05:96:05:50:7D:0D:1B:CF:53:97
            X509v3 Authority Key Identifier:
                keyid:D6:B9:8D:9A:E6:08:D1:E0:60:70:9B:96:0E:EF:13:3A:F2:B8:13:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/_m7ASUrz3OguIgWWBVB9DRvPU5c.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:1000::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:ff:35:8a:f6:c7:da:2f:0c:7f:99:45:0d:64:b9:7b:15:56:
         ac:ac:ea:59:b6:55:46:cd:a8:0c:68:01:95:ab:53:79:08:28:
         69:62:9a:34:28:f1:73:0b:a2:36:ba:3d:e1:0e:2f:37:31:e9:
         f5:f5:f8:dd:21:b3:48:b6:0d:97:3a:6e:78:16:5d:9f:90:60:
         22:bf:93:a1:68:47:fe:d5:53:70:42:c6:51:af:77:aa:bc:3b:
         5d:b1:8a:66:6b:59:94:dd:9d:4c:99:52:43:12:8b:e7:5a:88:
         c4:55:22:3c:1c:70:96:3f:68:ab:7c:cf:6b:3f:c1:fa:e6:1f:
         97:c8:e4:86:19:6c:1f:5d:1b:8e:8e:10:3f:45:c0:5e:cf:bf:
         1d:34:0b:58:ed:40:bd:1b:fb:01:be:7a:db:b6:53:54:ce:70:
         5e:45:7e:43:99:61:c8:18:22:07:cd:79:97:d3:15:aa:e1:8f:
         e6:72:c3:85:a5:c3:2b:fa:51:7d:00:ab:28:c3:0b:39:a9:06:
         58:7e:bb:0c:2a:87:97:43:81:a8:74:d3:20:fb:7e:91:8d:a2:
         24:5e:d8:24:2c:c8:79:ba:15:93:bc:5c:56:a9:35:6f:48:73:
         a2:a4:3d:96:85:e1:18:0a:37:be:f9:0f:f8:38:ae:82:55:90:
         03:cc:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----