Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/IQgvy4Oco0TjtQ5CH-qMw-tumeM.roa
File:                     IQgvy4Oco0TjtQ5CH-qMw-tumeM.roa (raw, json)
Hash identifier:          rLm6gi0n6m60Qzx8QI3ThOxeln/OrpJaTh11OYuVWhU=
Subject key identifier:   21:08:2F:CB:83:9C:A3:44:E3:B5:0E:42:1F:EA:8C:C3:EB:6E:99:E3
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       1C
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/IQgvy4Oco0TjtQ5CH-qMw-tumeM.roa
Signing time:             Tue 25 May 2021 02:42:18 +0000
ROA not before:           Tue 25 May 2021 02:42:18 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9607
IP address blocks:        2001:370::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: May 25 02:42:18 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=21082FCB839CA344E3B50E421FEA8CC3EB6E99E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:ac:13:0c:d6:3c:f8:fb:5e:20:65:34:74:
                    f2:33:b2:25:8d:d2:7c:59:7a:84:d6:01:7e:cf:ca:
                    89:97:23:1b:bc:7e:0a:ee:49:05:3a:a3:89:3e:ea:
                    4c:9a:c8:56:18:f2:f4:88:43:68:39:0d:d7:bf:72:
                    1d:ba:50:87:38:74:a0:2e:bd:43:7a:f4:d2:72:3f:
                    3e:07:90:e5:9c:56:fb:93:38:f4:a1:23:c2:55:a4:
                    26:95:a9:ca:95:67:e3:e7:29:31:75:82:7a:69:02:
                    76:f4:18:2d:64:01:56:e7:e3:ee:3f:48:59:eb:2c:
                    63:c4:84:39:4b:6a:96:72:0d:8d:a2:0c:71:d3:c5:
                    54:fe:88:b0:cc:f1:1b:d6:1d:73:e5:76:37:63:f0:
                    bb:d5:b7:0b:07:2b:7b:75:4f:03:03:df:90:de:3d:
                    94:85:a8:73:71:8e:50:8b:d3:e7:24:74:a2:ec:34:
                    f7:46:73:03:81:a4:bc:55:58:77:53:79:3e:ad:57:
                    56:ca:00:56:0d:e6:da:d2:5c:4a:93:9b:d8:be:8d:
                    6c:6f:25:6a:c7:34:31:7f:2e:0e:33:71:41:70:f6:
                    a0:00:17:7f:e1:d3:72:72:5d:38:5e:a1:13:3b:ff:
                    22:45:90:2e:10:f4:13:62:75:8b:2e:d4:8b:39:41:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:08:2F:CB:83:9C:A3:44:E3:B5:0E:42:1F:EA:8C:C3:EB:6E:99:E3
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/IQgvy4Oco0TjtQ5CH-qMw-tumeM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:370::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:6f:60:74:64:e6:d6:a2:89:3e:55:10:63:11:c8:67:7b:67:
         10:cc:0b:23:49:0a:d6:46:a8:15:0b:45:53:4b:06:95:73:39:
         ee:12:e0:41:a3:a4:b2:21:6d:f3:98:fd:a2:7b:96:c5:81:be:
         15:7e:21:b4:c1:50:cd:bf:09:37:bc:eb:44:29:0c:57:38:86:
         c8:f4:d0:2b:ba:4c:fc:ef:b8:f9:ee:11:25:7b:15:fb:6a:4b:
         6b:b8:82:c4:3e:df:6a:3d:c3:97:1c:06:8f:6b:04:65:27:5f:
         65:1d:7c:63:5b:fc:2e:3d:58:f2:d1:9a:7b:06:a1:39:df:29:
         2d:df:cf:6b:11:06:f8:ad:8c:98:8c:a1:41:10:0a:7d:a0:33:
         19:02:c4:36:de:82:d2:77:32:58:df:ee:11:f0:50:4b:db:2b:
         20:e0:08:c3:83:48:8b:ca:f1:15:43:14:c9:68:31:53:6f:39:
         5f:4b:02:cf:98:dc:6e:ae:da:e2:36:79:84:60:52:9b:84:4f:
         db:03:e8:28:b2:db:4d:a3:d7:79:f5:22:f1:21:db:ba:e0:a7:
         06:fd:4a:0d:57:3c:1d:cd:d5:db:27:fe:0e:f9:c8:42:7c:23:
         16:89:db:59:d5:5c:8c:35:4b:c9:0b:21:95:eb:ac:2e:2e:fe:
         03:76:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----