Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30376/V-oKKgEA69OHnmtpiCf3gxGHO_E.roa
File:                     V-oKKgEA69OHnmtpiCf3gxGHO_E.roa (raw, json)
Hash identifier:          jgfSvUtVXoJJLpwdnQOqAHLdF9PvHLEE4msCJl1Q1EU=
Subject key identifier:   57:EA:0A:2A:01:00:EB:D3:87:9E:6B:69:88:27:F7:83:11:87:3B:F1
Certificate issuer:       /CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
Certificate serial:       03
Authority key identifier: E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/V-oKKgEA69OHnmtpiCf3gxGHO_E.roa
Signing time:             Mon 15 Nov 2021 11:46:10 +0000
ROA not before:           Mon 15 Nov 2021 11:46:10 +0000
ROA not after:            Tue 15 Nov 2022 01:30:01 +0000
asID:                     24277
IP address blocks:        2407:58c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C
        Validity
            Not Before: Nov 15 11:46:10 2021 GMT
            Not After : Nov 15 01:30:01 2022 GMT
        Subject: CN=57EA0A2A0100EBD3879E6B698827F78311873BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6e:bc:a0:1c:a3:36:0c:f2:79:19:55:84:64:
                    28:fe:56:50:98:28:ad:e6:a7:39:17:06:6a:ed:37:
                    32:4f:7f:b4:e8:52:89:a6:b3:eb:d9:7d:94:61:fa:
                    f4:42:40:f8:a2:e7:d8:b8:f0:11:3f:ea:67:94:62:
                    b1:61:3e:38:99:d9:78:ca:fd:a5:2c:96:16:fa:69:
                    81:4e:c6:39:85:49:b9:cf:00:73:32:eb:60:0c:eb:
                    ae:e4:48:3e:5d:ef:eb:87:59:43:b3:f6:c0:dd:0f:
                    5e:03:b9:61:1c:b0:3b:a1:dc:1f:92:f3:15:47:ae:
                    9a:21:16:98:4d:bc:3c:b2:06:b5:d9:54:ca:74:83:
                    df:fc:2a:bc:bf:83:83:db:19:e6:c0:1e:35:3d:0f:
                    e6:9f:0a:99:e4:f1:53:e6:37:8d:6e:35:08:53:dd:
                    7c:c6:c8:72:e5:80:86:34:bc:15:b4:db:ef:56:70:
                    9e:47:6e:46:5a:03:19:aa:b3:2b:87:f4:64:fe:c7:
                    da:fa:62:55:57:55:53:6b:a7:be:93:e4:aa:06:8b:
                    68:1c:b2:97:64:45:18:8a:d7:50:7b:41:3a:f2:ff:
                    16:68:3e:9c:47:f2:74:6e:44:10:37:ed:cc:7b:43:
                    29:ae:93:86:a7:86:ea:67:93:dc:23:99:db:cf:10:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EA:0A:2A:01:00:EB:D3:87:9E:6B:69:88:27:F7:83:11:87:3B:F1
            X509v3 Authority Key Identifier:
                keyid:E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/V-oKKgEA69OHnmtpiCf3gxGHO_E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:0f:eb:b7:ca:9e:77:bb:10:3b:d2:16:b3:f8:dd:57:a1:db:
         fd:26:5d:f8:32:f2:f1:ca:90:9f:6e:f0:f9:47:9f:31:74:3f:
         9a:3e:c4:72:bb:88:35:52:c9:03:b3:a0:2a:13:54:35:29:74:
         58:80:fc:6e:ed:8f:65:0a:93:81:26:b5:86:6b:bc:cb:5e:51:
         e6:c9:a5:4c:df:05:cd:42:d5:3b:46:c2:ac:43:d5:46:4d:57:
         b5:c0:c8:14:ce:42:bc:53:f1:81:c0:52:95:79:f9:2d:6c:78:
         c7:e2:6f:8e:1a:70:6f:ad:54:c5:81:1b:4d:6e:7d:fc:9b:48:
         3c:e6:28:76:13:63:bb:69:12:a9:f8:b4:24:c8:fa:e4:05:92:
         06:12:d5:6b:fa:45:82:0a:06:a3:2d:c3:56:3a:0f:3b:53:d2:
         21:76:94:3e:27:44:4e:3e:6d:1d:80:7c:a6:4a:b5:a7:4a:1b:
         a2:4c:0c:46:4e:c4:a4:5b:ad:af:61:42:f1:ee:5a:6a:0f:f1:
         1e:81:6c:03:90:7b:26:d5:28:86:71:26:3e:8f:83:17:59:7d:
         93:da:ab:28:66:bf:ad:df:ce:c5:7f:a0:a0:ce:7f:0e:cb:84:
         e2:96:ee:81:2f:97:99:bf:62:45:5e:38:ee:e8:8d:25:4e:94:
         79:70:e0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----