Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/ZAIu9BvgQlzFZQUyIRmulB85Rgg.roa
File:                     ZAIu9BvgQlzFZQUyIRmulB85Rgg.roa (raw, json)
Hash identifier:          PUEza8TmIRce39SgtIGc9O73ho5N9Jp3AHhPa2njOHw=
Subject key identifier:   64:02:2E:F4:1B:E0:42:5C:C5:65:05:32:21:19:AE:94:1F:39:46:08
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       57
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ZAIu9BvgQlzFZQUyIRmulB85Rgg.roa
Signing time:             Tue 25 May 2021 02:42:14 +0000
ROA not before:           Tue 25 May 2021 02:42:14 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9607
IP address blocks:        203.141.52.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May 25 02:42:14 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=64022EF41BE0425CC56505322119AE941F394608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:e8:5b:87:c3:11:7c:b6:7a:fd:f1:87:48:
                    69:66:78:e4:48:b6:d2:93:4a:09:2d:7c:6a:d4:db:
                    0a:e5:95:dc:2a:f3:72:15:5c:28:96:17:e9:7b:ca:
                    f6:8f:93:bf:a3:d8:42:d3:ee:16:6f:ed:40:ea:dd:
                    11:94:c9:59:ec:16:b0:88:ce:75:a4:7b:de:39:21:
                    6d:be:c1:38:c2:74:33:37:35:ba:93:cf:74:a2:18:
                    1c:85:01:0a:1b:ec:01:3b:6a:fa:4c:8e:45:a0:82:
                    4f:4f:21:85:c6:c9:9e:c6:10:31:f9:b6:8c:38:da:
                    80:63:cc:64:8d:59:6d:8b:c6:cd:f6:05:0e:98:62:
                    51:5a:47:49:da:9c:f1:94:9c:91:e3:aa:b9:d5:e8:
                    b1:93:a4:19:60:59:e6:33:4c:da:2c:57:f1:cd:af:
                    5f:94:8b:a7:ce:48:3d:32:8b:e4:ed:93:aa:7d:9d:
                    59:06:9c:86:87:03:96:77:ed:6d:a2:f4:87:e0:58:
                    f5:c2:27:6f:82:72:cf:cc:a6:0b:e5:fd:ec:0b:a7:
                    ff:78:fb:f0:e1:b3:aa:5f:2c:93:ef:1e:2d:5a:00:
                    83:f0:3b:74:31:9f:15:49:f4:54:b6:34:e2:0c:8d:
                    94:42:fa:79:bb:31:09:ba:80:7b:8e:08:34:3d:9f:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:02:2E:F4:1B:E0:42:5C:C5:65:05:32:21:19:AE:94:1F:39:46:08
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ZAIu9BvgQlzFZQUyIRmulB85Rgg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:c0:2f:62:cb:b5:30:d8:2d:e7:1f:7b:29:53:10:2f:26:1a:
         6c:81:02:e8:61:a7:4a:ae:84:90:0c:bc:d8:eb:06:dc:af:84:
         1d:50:7b:20:41:b9:7c:72:6d:5a:5f:77:76:d1:bb:da:92:f1:
         bf:1a:bb:60:88:61:a7:74:af:07:c4:c1:ad:47:2a:b6:31:1c:
         d3:bb:4c:e4:f6:dc:46:01:75:cb:28:1d:8b:10:54:d4:b4:0d:
         e2:c7:de:d7:2e:79:e4:c3:66:94:a2:a4:3d:13:f4:55:4b:77:
         10:e6:ee:a5:19:36:d4:e8:db:1a:ab:a7:bc:c9:cc:7d:55:7e:
         10:8f:1d:6b:e0:2e:84:52:45:39:dc:db:1e:59:7f:96:b8:f4:
         d6:e5:9e:7d:71:c7:26:22:be:cb:7a:2b:65:8d:9d:5a:1f:85:
         3f:7d:7e:40:ec:da:3c:a6:47:52:a5:05:59:45:3d:37:7b:e9:
         55:73:62:59:33:98:eb:79:11:ea:eb:8f:65:a2:3c:10:aa:f4:
         76:48:65:10:ad:b6:c6:42:9f:ce:8e:fb:20:5f:f1:65:f5:c2:
         37:4c:07:3f:de:24:87:ac:f9:bd:bb:99:8c:a9:c1:c4:4a:e3:
         5d:6b:e9:19:22:98:3b:97:f0:ec:ae:e3:41:44:8f:5a:af:de:
         6e:6b:e4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----