Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/cCN1FFCh07I32dn1SaOaIbBL0vU.roa
File:                     cCN1FFCh07I32dn1SaOaIbBL0vU.roa (raw, json)
Hash identifier:          o2WStuen3OOeve7S3aeN/QOes8AydI/u2aKoXEUjdQ4=
Subject key identifier:   70:23:75:14:50:A1:D3:B2:37:D9:D9:F5:49:A3:9A:21:B0:4B:D2:F5
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       51
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/cCN1FFCh07I32dn1SaOaIbBL0vU.roa
Signing time:             Tue 25 May 2021 02:42:12 +0000
ROA not before:           Tue 25 May 2021 02:42:12 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9607
IP address blocks:        211.14.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May 25 02:42:12 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=7023751450A1D3B237D9D9F549A39A21B04BD2F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:e7:58:9a:c8:b1:d3:1b:79:75:a9:da:ef:
                    89:1d:e5:dc:fb:26:68:2c:84:89:90:25:f9:e9:b5:
                    72:30:59:82:9e:bb:f2:1b:89:fb:e2:54:f1:49:58:
                    85:70:dc:8f:a8:e0:ab:43:9f:43:13:be:75:09:3f:
                    71:9e:e5:6f:a5:49:5d:20:ff:ed:55:7b:bf:78:42:
                    b4:83:8d:cc:aa:7d:dc:6f:f7:38:f8:aa:91:7e:85:
                    42:34:a1:b7:1b:96:71:16:7a:ed:a7:e2:35:6e:3e:
                    ef:50:5e:ca:ec:69:f2:80:11:f8:61:a9:f2:13:f3:
                    c3:b1:5c:84:3e:e3:f5:46:2f:7d:ac:2b:e0:6a:5a:
                    fb:ef:93:2d:b4:37:c1:de:0f:50:32:31:21:5b:fe:
                    7f:3c:de:5f:47:d5:33:6e:4a:ea:a3:8c:4e:30:38:
                    db:1a:55:cf:36:73:b8:b2:21:b6:a9:a4:c0:88:43:
                    3a:67:76:a5:15:52:74:18:0c:09:96:dc:51:ab:cd:
                    b7:47:b2:bb:52:10:50:b6:a9:d2:83:1e:b1:e4:af:
                    46:0b:38:dd:7f:1f:48:00:c7:9c:e8:72:b6:de:2f:
                    77:3c:a6:09:3f:a3:2e:a7:c5:a3:95:f1:70:b1:00:
                    2a:80:b1:97:6d:5c:72:bf:15:f4:53:df:4c:7c:6e:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:23:75:14:50:A1:D3:B2:37:D9:D9:F5:49:A3:9A:21:B0:4B:D2:F5
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/cCN1FFCh07I32dn1SaOaIbBL0vU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:f7:a8:79:9a:a9:33:72:90:8e:e5:37:03:3d:cb:42:50:86:
         de:d4:96:e0:b0:9d:9b:cc:ed:bb:32:1f:9c:d2:f2:d9:28:2d:
         f7:9a:23:11:c5:dc:11:ff:04:c5:3e:e9:ab:21:4d:2d:97:93:
         9b:60:e7:49:ac:b1:e5:e4:00:66:6c:28:cb:15:22:32:94:2c:
         75:a4:4a:5f:ed:a5:3f:98:6f:b9:a0:ba:48:3f:11:d3:6f:37:
         4b:8f:52:be:ab:14:bb:fb:67:c1:93:54:bd:df:97:84:43:4b:
         dc:39:45:81:c2:5a:fc:9a:58:f4:26:cc:80:69:82:62:03:92:
         da:63:5c:a8:71:34:c4:ca:73:77:73:0f:d1:f7:e5:db:42:86:
         87:be:84:bb:ac:eb:55:a8:9a:c6:7f:68:13:18:80:1c:56:85:
         00:21:ba:0e:e9:eb:31:5b:92:d2:7a:9e:4b:ba:14:06:c9:98:
         ef:4f:0a:8d:c1:2a:8e:df:de:0a:74:b3:fd:ba:ab:39:7e:d6:
         36:f1:c1:1a:56:d8:9b:ae:f4:55:1d:10:ea:57:20:08:12:98:
         13:a9:ae:16:c7:b3:84:d8:f7:48:9c:4f:5a:c5:4b:df:23:a0:
         0c:14:95:84:b6:88:b5:4e:d7:39:eb:c7:8d:3f:08:a8:9d:af:
         51:b7:d6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----