Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/lNVUj0H4B0xjVHU9ZlKZMS5MM40.roa
File:                     lNVUj0H4B0xjVHU9ZlKZMS5MM40.roa (raw, json)
Hash identifier:          /ZyYCvL0I5q/WvgwmYeOoo4vgcVsr4caj21vKbkohX4=
Subject key identifier:   94:D5:54:8F:41:F8:07:4C:63:54:75:3D:66:52:99:31:2E:4C:33:8D
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       50
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/lNVUj0H4B0xjVHU9ZlKZMS5MM40.roa
Signing time:             Tue 25 May 2021 02:42:12 +0000
ROA not before:           Tue 25 May 2021 02:42:12 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9607
IP address blocks:        203.141.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May 25 02:42:12 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=94D5548F41F8074C6354753D665299312E4C338D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:bd:65:d0:fc:2b:ed:d4:e4:33:8d:d3:16:
                    a5:28:c6:6b:e3:ae:90:87:44:d8:b1:43:be:fe:cb:
                    2a:21:2c:af:65:1c:b9:a0:6f:06:86:d5:ca:c0:60:
                    06:33:d3:52:e3:e8:56:3d:2b:13:b3:46:12:21:7b:
                    fe:21:d9:c2:4d:f1:1b:28:71:83:a3:07:0b:58:02:
                    e5:44:8e:5e:ac:4a:84:f7:59:3f:1b:d5:28:59:2b:
                    50:7f:61:fb:d3:a9:3b:83:19:0d:c3:6a:b7:b2:e3:
                    6b:bc:41:e8:42:d3:34:e8:57:dd:65:61:d3:e6:16:
                    2d:3a:a7:61:86:57:48:5d:01:81:e4:94:ed:48:66:
                    3f:a8:b9:5a:3f:9a:18:e6:f7:6a:50:32:0e:fd:c3:
                    d6:e9:55:c2:e9:ca:52:e8:11:57:cd:4e:17:e6:78:
                    d0:56:10:5b:e1:60:06:42:90:5d:62:ef:7c:18:b9:
                    b1:0d:b7:32:0c:0a:3f:06:7d:47:b2:f9:38:d0:e6:
                    3f:48:b2:32:4c:cd:30:cd:82:a8:78:d1:f8:29:32:
                    61:ec:7f:c2:a1:e0:9d:d2:15:1a:36:b3:58:dd:86:
                    ff:2c:dc:10:20:70:73:e8:f2:b8:a1:10:58:d6:07:
                    b8:5e:f3:99:06:09:49:16:e2:a0:fe:ed:d1:93:12:
                    65:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D5:54:8F:41:F8:07:4C:63:54:75:3D:66:52:99:31:2E:4C:33:8D
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/lNVUj0H4B0xjVHU9ZlKZMS5MM40.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:96:c2:4c:c2:82:8e:dd:b5:46:4e:6c:2a:3a:0d:7e:0a:47:
         ff:ea:02:19:e2:b7:a2:87:98:62:d7:22:74:92:30:fd:fe:88:
         ba:6c:df:cb:e6:26:fe:27:06:70:d5:9d:9e:4d:b2:a5:03:2c:
         e8:ed:16:a7:b1:1b:16:26:ab:22:51:99:fb:1c:6c:c8:52:d9:
         f6:a5:ee:a0:75:c0:a2:56:80:69:55:16:20:11:59:b2:2d:79:
         e3:32:57:7e:e9:19:d8:e6:d1:e7:e3:09:39:b9:77:d8:b2:9a:
         64:6b:7b:bd:8b:11:05:09:12:a1:66:3c:cc:50:0f:1b:22:7f:
         9f:dc:3e:e6:bd:37:23:f6:b8:c4:24:24:45:8c:3d:3b:ec:12:
         dd:ee:37:d3:2e:d0:5e:c4:60:c2:a5:93:54:07:a7:94:54:ab:
         55:50:ec:64:55:72:f6:1c:91:f4:6d:ab:b3:25:4d:eb:94:e2:
         e4:1f:c5:43:84:e9:58:bd:50:d5:44:e8:70:f5:db:14:ed:59:
         07:3d:ec:64:b7:f3:70:9d:36:e3:77:43:33:a6:1e:ae:5c:85:
         aa:66:08:2a:9d:ca:b7:0f:e3:55:25:7c:25:21:a7:52:a0:64:
         d1:b3:23:e9:f3:8d:bb:78:c2:e2:92:f6:6f:2a:74:6f:2d:cd:
         20:b4:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----