Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/Zqoaqj1mm6-P3355nROGxxkAYkQ.roa
File:                     Zqoaqj1mm6-P3355nROGxxkAYkQ.roa (raw, json)
Hash identifier:          PstYDiHgEY7EAZptFHHg2VS/2VlXs0a4WeZRhVHNXWU=
Subject key identifier:   66:AA:1A:AA:3D:66:9B:AF:8F:DF:7E:79:9D:13:86:C7:19:00:62:44
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       66
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Zqoaqj1mm6-P3355nROGxxkAYkQ.roa
Signing time:             Sat 18 Sep 2021 06:37:55 +0000
ROA not before:           Sat 18 Sep 2021 06:37:55 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7530
IP address blocks:        210.231.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep 18 06:37:55 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=66AA1AAA3D669BAF8FDF7E799D1386C719006244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:f6:d4:00:1c:76:3c:c2:a0:a5:48:d2:dd:
                    94:19:00:8a:13:bd:c2:8c:02:4c:a4:e5:a5:65:33:
                    00:4d:49:b6:5e:44:ee:e4:a0:b1:78:1b:e4:2a:b9:
                    90:1a:4d:f1:37:52:dc:31:8d:82:fd:ef:4f:eb:7c:
                    eb:37:f4:27:16:54:56:ad:d1:78:99:79:28:21:e8:
                    13:a0:94:ff:86:59:cc:f9:67:0c:84:da:b2:d6:1c:
                    d2:a1:a5:6a:4a:a2:17:41:8b:b5:17:24:c6:0f:d7:
                    b3:85:e4:6c:f2:74:e4:10:3b:88:16:cf:28:22:e6:
                    88:29:ef:57:69:fe:7e:f2:1f:57:d1:2c:77:d7:7f:
                    56:37:af:19:4b:85:c5:1c:8c:5a:6d:fb:f6:85:fd:
                    40:67:c0:9a:df:d9:4d:70:0a:c5:7f:39:f9:bf:d0:
                    e2:11:b3:ea:c9:99:af:d6:5b:a7:71:4c:8d:13:e5:
                    93:c9:cd:15:c6:40:b7:d9:b4:37:56:90:f6:dc:06:
                    d6:da:de:69:40:5f:ae:21:80:ef:e5:d9:02:0f:fc:
                    c2:cb:36:36:41:04:e7:d5:74:24:7b:28:38:d5:9f:
                    4e:bc:f0:31:d7:ca:35:21:cc:ad:e3:61:a1:dd:0b:
                    71:ed:3d:fc:22:aa:f5:ee:3a:3f:bb:d0:53:44:c6:
                    3d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AA:1A:AA:3D:66:9B:AF:8F:DF:7E:79:9D:13:86:C7:19:00:62:44
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Zqoaqj1mm6-P3355nROGxxkAYkQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:06:71:bd:ec:52:98:68:f8:fb:51:5d:95:2b:a4:29:71:a7:
         23:5a:b6:98:b2:d7:cc:05:8e:bd:47:28:34:05:71:e6:e0:f3:
         d1:ce:f4:8a:72:45:59:3f:ea:aa:a7:76:ef:a8:ce:dc:2a:cd:
         6f:84:61:c9:d1:f8:0c:86:b7:c2:9c:fe:07:aa:e7:e5:85:65:
         9f:77:1e:db:30:17:81:50:73:a8:f4:3d:ff:06:f8:de:d0:10:
         34:cc:53:f1:e5:f3:88:c0:e1:3c:7d:84:6f:b3:5a:66:10:d3:
         eb:a1:82:62:25:7b:0e:5f:19:ed:b6:7b:8b:85:7c:8c:08:07:
         bf:f7:89:68:1b:db:1c:f4:39:e1:a3:5b:8a:b6:f1:d7:9c:ac:
         f2:61:5e:93:d3:71:43:32:59:66:1c:20:22:44:d2:7b:d7:87:
         ea:89:64:41:6c:91:6b:16:26:3f:74:a4:43:04:ad:6c:c9:fb:
         03:5f:e4:a6:02:48:4f:c2:4a:1e:7f:b6:f7:09:19:be:63:6e:
         98:cc:55:ee:ee:bc:9b:34:f0:43:3c:f9:05:c1:6c:f0:14:d8:
         5f:7a:7f:13:7c:db:98:13:2b:eb:47:b9:71:04:2c:00:a6:d4:
         6e:f8:88:08:7f:2a:c5:1d:79:c0:12:73:b7:41:de:bc:12:4c:
         67:e0:51:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----