Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/NYWuWKJiu4svYAdme3ihQJtqfcc.roa
File:                     NYWuWKJiu4svYAdme3ihQJtqfcc.roa (raw, json)
Hash identifier:          VVaTUqdHAAdIjFxhGaenr3qfj9nOEg+qEkmbpnIs2LQ=
Subject key identifier:   35:85:AE:58:A2:62:BB:8B:2F:60:07:66:7B:78:A1:40:9B:6A:7D:C7
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       20
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/NYWuWKJiu4svYAdme3ihQJtqfcc.roa
Signing time:             Fri 03 Sep 2021 11:46:44 +0000
ROA not before:           Fri 03 Sep 2021 11:46:44 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     9607
IP address blocks:        2001:370:a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: Sep  3 11:46:44 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=3585AE58A262BB8B2F6007667B78A1409B6A7DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:66:6f:37:27:15:dc:ed:f4:29:94:a8:d2:
                    c7:bd:7d:67:d1:d1:9f:72:a1:a6:89:09:02:7e:9f:
                    c8:ed:e1:dc:33:42:d5:10:ae:74:86:6d:25:59:f7:
                    8d:0a:79:77:fc:9b:81:a1:e5:12:66:a8:1f:9c:67:
                    d9:d8:ef:be:c8:ef:5b:d5:a6:f0:92:f1:5a:a8:d3:
                    83:d0:aa:3c:6f:36:50:11:ac:b5:e3:ee:65:0c:a0:
                    b8:d0:08:5f:29:d2:0f:91:7f:9c:b6:2d:68:6f:2a:
                    43:82:75:4f:8e:51:b5:db:b6:f9:0d:e5:05:a2:a3:
                    29:63:37:af:dc:a0:cc:55:f6:8d:88:f7:a1:ae:8c:
                    20:26:06:e9:1c:08:6b:90:92:98:70:4d:eb:c6:90:
                    fe:d3:19:8f:d6:80:06:2d:fc:61:ef:2e:bb:35:79:
                    8a:44:9d:fa:0b:fd:53:db:7f:60:2d:9f:33:33:03:
                    8f:cd:72:95:ac:40:14:41:98:d7:06:db:81:7a:15:
                    85:14:44:4d:d9:d1:ac:c2:81:b3:c8:b2:4d:1c:df:
                    6d:ae:fa:cf:d2:d8:ce:ef:f4:17:62:e0:44:d6:ea:
                    c7:a7:7b:2a:1b:46:ec:ce:e7:d7:c9:05:33:33:60:
                    ee:59:1f:95:44:a7:a7:d3:15:f5:fd:d0:ab:b1:f8:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:85:AE:58:A2:62:BB:8B:2F:60:07:66:7B:78:A1:40:9B:6A:7D:C7
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/NYWuWKJiu4svYAdme3ihQJtqfcc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:370:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:77:c6:e4:fb:48:36:60:02:10:21:89:04:ae:c0:d5:66:c7:
         47:ad:ec:e1:00:1d:f9:cb:32:67:58:45:cc:17:0d:ed:78:92:
         f9:28:09:e7:21:a5:0a:2a:96:24:66:06:06:6c:c4:1b:ff:ae:
         d9:2f:bf:84:de:60:8f:e3:2d:11:73:39:b7:8b:c9:89:ae:d4:
         a1:9b:02:51:e2:a6:7c:9d:c7:db:f3:d6:36:ac:93:d2:87:33:
         07:c1:23:b0:e1:44:07:b9:b3:de:99:80:57:ed:d8:c1:dd:73:
         e3:91:be:ff:57:00:55:ce:c8:73:46:d4:0b:8e:35:71:1a:83:
         6b:b6:98:f8:b3:0f:0d:e1:b2:8d:ca:80:b6:d8:cb:b9:9f:50:
         e9:d6:5f:00:3a:f1:8a:26:19:f0:4a:90:f5:eb:fb:f3:f7:96:
         1c:7f:7a:3f:cd:e0:77:81:7c:2d:23:71:81:5e:ef:bd:a6:c9:
         b2:8d:70:31:9c:34:4e:6f:c9:b3:6f:17:f3:93:23:09:20:0c:
         db:36:d9:f7:cc:15:13:9b:34:64:9e:bb:bd:47:48:c3:dc:e5:
         20:6d:3a:b1:33:62:ad:80:a7:f8:04:b3:eb:7d:85:dd:bc:4b:
         5d:5c:00:ac:9e:cf:d6:33:d4:1f:4e:09:3b:34:0c:0c:1e:ad:
         3e:e9:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----