Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30106/IJpLJ7BvlFugFWL-5VTG90FDwQ4.roa
File:                     IJpLJ7BvlFugFWL-5VTG90FDwQ4.roa (raw, json)
Hash identifier:          k+cdijESMb0p9+llifFFrgkntAdRXcyYeQWFJEUYf+Y=
Subject key identifier:   20:9A:4B:27:B0:6F:94:5B:A0:15:62:FE:E5:54:C6:F7:41:43:C1:0E
Certificate issuer:       /CN=4C59DFB8820120EE459B07034008992439D4E7B3
Certificate serial:       02
Authority key identifier: 4C:59:DF:B8:82:01:20:EE:45:9B:07:03:40:08:99:24:39:D4:E7:B3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFnfuIIBIO5FmwcDQAiZJDnU57M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/IJpLJ7BvlFugFWL-5VTG90FDwQ4.roa
Signing time:             Thu 21 Oct 2021 06:54:22 +0000
ROA not before:           Thu 21 Oct 2021 06:54:22 +0000
ROA not after:            Fri 21 Oct 2022 06:43:39 +0000
asID:                     17675
IP address blocks:        2405:e800::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C59DFB8820120EE459B07034008992439D4E7B3
        Validity
            Not Before: Oct 21 06:54:22 2021 GMT
            Not After : Oct 21 06:43:39 2022 GMT
        Subject: CN=209A4B27B06F945BA01562FEE554C6F74143C10E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f2:32:dc:7d:19:e4:60:41:11:20:1d:42:48:
                    42:9f:c5:0d:70:d1:97:42:ab:70:99:fb:77:87:e2:
                    15:b8:a2:46:5d:36:b8:78:6c:3f:87:ac:fe:e9:f0:
                    3d:97:ef:aa:4b:a8:24:7c:64:aa:f6:ce:bb:47:a1:
                    34:98:07:1f:0e:5e:f7:71:f3:3b:4b:d3:c4:b1:3b:
                    31:06:fb:23:c4:d0:d9:58:18:16:15:a2:22:ba:a5:
                    d7:1d:4b:e3:41:95:63:cf:2b:3f:5f:e4:1b:c3:09:
                    1f:f3:ed:5d:ca:36:56:54:27:90:97:26:a6:ba:16:
                    72:f5:c2:4a:90:32:94:54:c1:14:95:02:5d:4f:e0:
                    6f:e3:62:62:c0:a8:1c:f4:e1:e2:b6:9f:09:32:41:
                    4a:d5:1f:18:45:e4:f1:e9:67:dc:c2:c1:51:70:75:
                    81:13:b1:f6:0e:ee:06:24:4a:5d:68:36:b3:2b:f1:
                    dc:c6:72:de:1e:ce:d2:13:6d:f6:59:46:76:f0:56:
                    1d:d6:59:65:5f:bc:d2:0a:7c:a6:83:0d:1e:8b:96:
                    d4:9e:09:5e:4e:b9:58:79:b4:e9:6e:4b:a1:89:70:
                    02:2f:17:d5:96:56:66:ed:60:a5:d0:c1:1e:ce:c8:
                    62:79:38:ae:91:b7:0c:01:2f:a9:86:95:8e:fd:2f:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9A:4B:27:B0:6F:94:5B:A0:15:62:FE:E5:54:C6:F7:41:43:C1:0E
            X509v3 Authority Key Identifier:
                keyid:4C:59:DF:B8:82:01:20:EE:45:9B:07:03:40:08:99:24:39:D4:E7:B3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/TFnfuIIBIO5FmwcDQAiZJDnU57M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFnfuIIBIO5FmwcDQAiZJDnU57M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30106/IJpLJ7BvlFugFWL-5VTG90FDwQ4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:e800::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:10:d2:62:df:2e:2b:7c:c7:9c:4f:6d:45:d9:31:a5:db:
         63:21:ed:9b:86:d0:5a:e5:b7:eb:e8:eb:33:dd:6c:61:7b:60:
         63:fc:b8:3f:eb:bb:5c:15:4a:71:05:2c:db:56:8e:93:62:29:
         a8:cb:09:ab:5b:6a:aa:2c:1f:f1:7f:20:2d:0c:0d:6f:64:4d:
         b9:b0:ca:4b:06:4c:55:b7:8f:52:87:fa:6e:0e:44:10:4b:44:
         bf:39:52:b7:aa:5b:0b:c8:ee:5a:88:36:92:43:c8:4c:e2:7f:
         4f:4e:53:86:34:be:38:85:01:a1:d4:de:f0:56:26:65:f3:55:
         86:ea:43:c4:2b:83:0d:5b:16:93:5f:30:32:f3:09:c8:ec:66:
         77:cf:f4:a5:36:33:12:d9:b6:7d:9a:72:f6:bc:70:c6:f4:c2:
         c2:a5:b9:c9:de:9f:cc:13:88:10:5d:9a:bf:79:13:a1:cd:89:
         1b:71:ef:5f:8e:9e:5f:32:cf:d9:b4:4c:64:77:a1:3c:96:c1:
         a5:23:89:56:43:5c:99:5d:c2:63:16:22:5b:86:85:53:00:81:
         71:78:b0:ab:12:2f:6a:fb:ec:35:da:59:bc:d0:81:2b:2d:14:
         e3:37:63:57:34:39:71:9e:38:7d:ca:12:67:64:b2:69:a1:e2:
         d1:d7:c5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----