Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/6ibMkWSvT1W8UO5lJ8VorplGDmY.roa
File:                     6ibMkWSvT1W8UO5lJ8VorplGDmY.roa (raw, json)
Hash identifier:          RVT09E4PluUzEMpC2zNGvN78RZW1EcNuoX+lfUSamR4=
Subject key identifier:   EA:26:CC:91:64:AF:4F:55:BC:50:EE:65:27:C5:68:AE:99:46:0E:66
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       67
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/6ibMkWSvT1W8UO5lJ8VorplGDmY.roa
Signing time:             Sat 18 Sep 2021 06:37:55 +0000
ROA not before:           Sat 18 Sep 2021 06:37:55 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7530
IP address blocks:        210.231.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep 18 06:37:55 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=EA26CC9164AF4F55BC50EE6527C568AE99460E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:af:3b:7f:dd:34:bc:7b:7b:2a:2c:27:ff:
                    4a:d2:81:d9:e4:e8:f9:98:42:5a:2e:0d:be:33:b4:
                    1d:35:68:25:41:99:48:b3:77:24:2a:37:99:d9:41:
                    b6:82:c6:5e:c9:94:a2:1d:84:12:e0:21:07:a3:13:
                    66:76:44:d4:76:6a:c7:0b:9c:95:d2:9b:2f:6b:4c:
                    16:fb:7e:88:0e:ae:5c:80:05:75:97:aa:80:68:a2:
                    3a:97:7f:5f:d5:a7:de:14:e2:3e:f6:09:74:98:31:
                    b5:70:bd:95:5b:b4:35:7c:f9:0c:1e:92:2b:81:bb:
                    e8:ac:4f:b0:19:cc:bd:b9:61:30:69:86:a4:8c:4e:
                    c5:60:59:4d:6b:05:66:d3:7b:fc:45:ce:c3:dd:fe:
                    35:f7:ff:97:76:9a:5a:c3:b3:5e:a3:a1:31:97:99:
                    ed:c6:33:f6:73:a2:8f:8f:2b:24:38:80:0f:e8:54:
                    5c:1a:1a:74:e1:a9:aa:a4:5b:3c:a6:36:65:38:d2:
                    8d:3e:a6:75:80:94:b7:7d:52:2a:08:d5:fa:28:79:
                    91:88:6b:71:32:9c:28:f7:5a:93:8d:d3:06:dd:5b:
                    08:07:79:44:c9:88:b2:2d:32:e5:d8:5a:3c:d1:9f:
                    fb:8e:7b:23:fc:1b:cc:00:33:cf:88:db:2b:cd:b0:
                    aa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:26:CC:91:64:AF:4F:55:BC:50:EE:65:27:C5:68:AE:99:46:0E:66
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/6ibMkWSvT1W8UO5lJ8VorplGDmY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:11:f9:db:46:b8:63:c0:4a:87:f4:38:f2:b1:b1:e1:41:33:
         7f:76:0c:ff:76:b4:15:49:9b:32:27:d2:8a:da:cc:fc:f9:5b:
         cd:0c:04:97:c0:4a:78:24:90:cb:96:24:cf:46:83:50:d9:fa:
         0e:62:bd:ed:b4:f3:6a:81:ca:2b:50:b6:72:ef:63:c4:c2:07:
         95:9c:4a:15:70:f4:a7:e9:31:85:5b:7a:ba:91:a3:5e:cb:e7:
         45:32:b6:5c:3d:b7:2d:94:31:61:97:cf:98:77:6c:4f:10:6e:
         49:92:13:f1:4a:7c:e4:d1:a3:c7:16:e6:a0:fb:33:05:6f:c4:
         c4:5f:2b:6d:3a:14:35:40:16:7d:a7:16:93:58:9e:26:38:d3:
         78:d6:c2:99:14:3e:51:cd:7c:c2:31:82:93:53:1d:99:7b:93:
         ee:3f:d6:30:86:d1:22:fd:e9:c1:27:49:9d:da:5d:d9:e0:ef:
         08:c2:ba:18:b1:7d:00:05:7d:11:9a:2f:80:dc:36:6f:b8:c3:
         be:fe:2c:0a:5f:30:f2:94:e4:86:bf:6e:4c:70:97:6c:2a:28:
         bb:03:93:c9:f2:ab:61:49:1c:16:93:cf:54:60:7f:35:3e:19:
         85:79:70:75:e7:35:7c:30:36:b8:ff:23:b0:12:bf:08:28:0f:
         94:79:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----