Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30327/OwnjjIyuCHlNdL3xGyFsMP_c1Go.roa
File:                     OwnjjIyuCHlNdL3xGyFsMP_c1Go.roa (raw, json)
Hash identifier:          IShJEhbDrIM8vjAM87gwV29hIJnRjqzy6+CBm4PK6sQ=
Subject key identifier:   3B:09:E3:8C:8C:AE:08:79:4D:74:BD:F1:1B:21:6C:30:FF:DC:D4:6A
Certificate issuer:       /CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
Certificate serial:       0C
Authority key identifier: 62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/OwnjjIyuCHlNdL3xGyFsMP_c1Go.roa
Signing time:             Mon 10 May 2021 07:11:40 +0000
ROA not before:           Mon 10 May 2021 07:11:40 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     63786
IP address blocks:        2403:a640:200::/39 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
        Validity
            Not Before: May 10 07:11:40 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=3B09E38C8CAE08794D74BDF11B216C30FFDCD46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:6f:85:55:c9:ed:d1:9b:51:db:03:11:96:
                    eb:a2:4e:44:19:92:39:11:00:cd:8b:f6:3a:23:89:
                    63:75:d0:7e:18:5d:8c:71:90:b1:5e:62:b4:00:b7:
                    c6:0b:bb:43:8b:f5:05:cf:90:19:da:ce:06:9e:45:
                    db:46:3a:4e:f0:22:5d:1d:43:d0:6c:a9:30:a7:70:
                    bc:32:e6:0e:ee:40:9e:0b:53:96:d5:01:6d:55:62:
                    ea:9b:32:e5:53:a9:8e:34:65:48:b7:cd:bd:b6:a2:
                    d2:b4:2c:95:4b:c8:8e:18:86:66:4a:c7:2b:4b:6f:
                    40:ff:25:35:42:04:8a:f6:6b:34:bc:85:a7:33:a6:
                    98:a5:cc:61:41:26:0f:f7:b1:ef:02:17:1b:82:ad:
                    f5:69:0c:ca:28:71:2b:99:02:b3:04:64:df:f2:23:
                    72:96:7c:a3:5a:1a:fe:19:ee:7b:03:ce:e2:0c:2e:
                    c4:10:e7:79:06:5c:84:39:39:0d:de:87:2a:a0:77:
                    c8:f1:fb:ff:ab:bc:da:5b:9e:12:16:35:4e:e9:0f:
                    56:3e:4b:ab:b0:33:36:02:91:29:1a:07:34:3e:5a:
                    19:e6:fb:08:45:9f:59:cb:df:d7:86:d0:f8:6c:14:
                    e6:2d:01:d6:d4:f9:33:59:3c:50:06:d8:74:fa:3d:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:09:E3:8C:8C:AE:08:79:4D:74:BD:F1:1B:21:6C:30:FF:DC:D4:6A
            X509v3 Authority Key Identifier:
                keyid:62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/YiIdrY-QXGKTuQJh_l_svJiff6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/OwnjjIyuCHlNdL3xGyFsMP_c1Go.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a640:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         11:b5:36:db:0a:19:65:89:36:66:32:39:85:ba:c7:77:d6:8f:
         dd:2a:a5:25:53:15:1d:1e:17:2b:44:da:2c:47:39:80:fe:7f:
         75:4b:2a:21:00:aa:96:e9:6e:3c:de:1b:d2:ae:35:96:30:b4:
         a9:ef:86:72:6d:e3:c7:d0:4a:0d:aa:17:f9:da:57:06:67:ee:
         65:70:06:71:1e:96:4f:9d:f6:73:97:5e:2a:80:02:6a:aa:89:
         26:3e:49:12:97:5a:00:4a:67:d8:66:2f:9f:01:14:05:55:fe:
         5f:a6:30:e3:35:dc:90:c3:3c:c0:08:51:84:2a:f3:97:1e:e8:
         c4:93:a5:cf:e9:98:02:78:56:b2:b9:e0:4b:52:a4:42:40:29:
         df:bf:47:33:2c:89:68:27:6f:c1:28:57:4a:dc:1f:7c:f1:1d:
         ab:47:83:b7:30:a8:5d:06:d5:f2:6c:d8:31:e0:ec:9f:8e:66:
         5b:81:b1:5b:f4:e6:f5:36:5f:59:54:4e:32:e3:28:30:20:76:
         22:86:f3:de:d7:0a:8c:67:bd:44:c5:c2:ed:9c:29:2d:83:3a:
         18:54:75:1c:f5:4c:91:fd:dd:a2:73:7d:dd:10:46:6d:b6:1c:
         1b:27:46:1c:1d:89:78:ef:83:b6:ae:c2:e9:ad:58:29:1d:a7:
         17:c8:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----