Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/VXLllo0nHvr9YmXVBP9T7MUOcsU.roa
File:                     VXLllo0nHvr9YmXVBP9T7MUOcsU.roa (raw, json)
Hash identifier:          ndwRAGsYcjvwxR4G01Knu9zI02M+F35FGEQSBO08AIM=
Subject key identifier:   55:72:E5:96:8D:27:1E:FA:FD:62:65:D5:04:FF:53:EC:C5:0E:72:C5
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       58
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/VXLllo0nHvr9YmXVBP9T7MUOcsU.roa
Signing time:             Tue 25 May 2021 02:42:14 +0000
ROA not before:           Tue 25 May 2021 02:42:14 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9607
IP address blocks:        203.216.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May 25 02:42:14 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=5572E5968D271EFAFD6265D504FF53ECC50E72C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:fe:e4:05:f0:29:ce:7b:2d:1c:83:9d:7f:
                    96:a2:b0:c5:b0:71:73:01:9a:03:1c:b8:7b:0a:39:
                    07:2c:8b:81:61:9e:5e:bc:82:bf:a6:5e:99:9f:9f:
                    11:ef:83:dd:4f:73:10:f4:90:05:ec:3b:77:da:e0:
                    b7:00:7d:c2:64:92:f7:2e:b2:4b:e4:4a:0f:16:e7:
                    51:17:4d:a3:eb:91:56:63:f2:78:37:f7:d0:51:8e:
                    6a:46:a3:88:c0:2f:94:23:41:c0:1d:33:1a:a4:7a:
                    d3:92:75:a2:60:23:2d:33:36:82:75:ec:dc:4d:c7:
                    c7:ba:24:d5:d5:07:c7:47:40:4a:ab:96:d2:f7:7f:
                    5c:5c:0d:6b:d6:8b:c8:6f:f0:f9:43:fc:9f:5e:eb:
                    d2:df:ca:cb:ba:56:88:87:c0:31:82:20:a2:fa:1d:
                    59:e4:6e:45:01:4b:b7:b3:9c:5c:1d:01:e9:81:bd:
                    9b:d3:43:22:2c:98:e6:ca:c8:5e:ef:3c:d5:04:c8:
                    f4:e4:18:42:1b:4b:16:65:ad:7a:a9:0a:5e:2c:dd:
                    32:d5:1e:7b:7b:ad:08:1d:2e:8f:cb:6f:ff:7b:f1:
                    16:4c:79:fe:6c:89:e5:ae:e0:08:3b:d3:d0:97:90:
                    48:8a:8d:ca:fa:7e:e1:10:24:47:bc:b2:54:ec:2c:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:72:E5:96:8D:27:1E:FA:FD:62:65:D5:04:FF:53:EC:C5:0E:72:C5
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/VXLllo0nHvr9YmXVBP9T7MUOcsU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.216.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         aa:0e:37:05:f0:c3:31:df:ac:85:7f:7c:ef:78:ac:7b:43:96:
         21:c0:fd:b4:c6:2f:3a:c9:df:e7:f0:b5:f2:70:02:a0:16:60:
         1c:89:d8:fe:5b:93:71:60:25:30:fb:a1:52:31:48:fc:ae:35:
         9e:9c:2a:62:4d:48:dc:84:bf:3f:a8:30:d1:ac:ed:89:f4:28:
         d2:49:84:41:bc:5e:d8:3a:61:fd:8b:cb:ab:8a:e1:7a:11:93:
         c0:c3:3c:46:5a:c0:d8:1d:a9:ed:df:f2:2f:d7:24:bf:1d:d7:
         09:f7:5f:d8:30:85:f4:28:f3:cc:51:15:46:43:54:dd:78:e8:
         88:1d:75:c2:d2:7b:3f:eb:16:eb:eb:43:58:a5:24:01:fd:22:
         a7:72:dd:09:1b:10:d1:e7:7d:70:e4:aa:1c:cf:1e:39:c9:c1:
         a7:28:54:85:6b:a0:a0:d6:d7:21:dc:b1:7a:96:47:1b:7b:9f:
         79:52:42:5b:3d:5b:cd:6d:fa:85:d8:cf:09:14:8d:09:a8:28:
         91:60:33:84:3a:2c:58:a7:7a:10:50:8d:af:9c:1b:f6:d2:7f:
         05:fb:f1:d8:9a:a8:e0:93:4a:40:c1:41:93:14:9e:02:43:60:
         19:14:a2:d9:ea:25:f3:02:ac:97:7b:80:32:b1:f3:24:d1:5e:
         29:21:99:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----