Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/xL_8ZrT92aonuNeRGYMUGRfGUN0.roa
File:                     xL_8ZrT92aonuNeRGYMUGRfGUN0.roa (raw, json)
Hash identifier:          LNHBA/monUcbAvnHbWdHosRYm/TR0IJI1N2HEJYJ3nU=
Subject key identifier:   C4:BF:FC:66:B4:FD:D9:AA:27:B8:D7:91:19:83:14:19:17:C6:50:DD
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       5A
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/xL_8ZrT92aonuNeRGYMUGRfGUN0.roa
Signing time:             Tue 25 May 2021 02:42:15 +0000
ROA not before:           Tue 25 May 2021 02:42:15 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9607
IP address blocks:        124.147.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May 25 02:42:15 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=C4BFFC66B4FDD9AA27B8D7911983141917C650DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:be:f0:59:8b:ba:3f:c2:c2:d5:f7:ea:56:
                    b2:46:71:d9:66:5d:e4:e0:bb:23:66:8a:e8:6e:c9:
                    eb:d3:8e:b1:39:dc:e1:80:72:34:1f:c8:7f:4f:64:
                    56:23:79:e7:43:d3:2f:1a:4c:33:a2:65:c7:c2:b8:
                    90:3c:f1:99:08:2e:25:9c:e8:5d:4f:0b:d7:cc:35:
                    8a:d9:56:90:ab:45:fe:2f:fe:f1:fe:21:88:48:50:
                    64:bf:9b:ca:8d:d4:e3:4e:d1:bc:36:ec:3f:b3:e5:
                    24:84:96:bc:42:11:e7:71:a5:7b:e2:34:48:14:a3:
                    82:5d:a2:64:81:2b:53:90:9c:10:64:ec:b1:f2:36:
                    4d:dd:83:be:18:be:f2:36:ee:67:34:e9:2e:d4:ab:
                    ec:10:33:4b:c6:19:9b:07:7d:d1:23:61:e3:aa:d1:
                    e0:8a:9c:22:0b:8b:a3:4b:7b:7a:8c:25:06:ef:2a:
                    65:52:8e:d3:25:bc:a1:e5:4a:dd:c1:6d:ac:ba:13:
                    44:a9:88:3e:ef:1c:66:0a:32:6e:41:7e:af:a8:40:
                    37:19:d7:76:b4:af:68:7d:5f:52:99:72:19:4d:dd:
                    40:a1:46:ce:04:b7:83:2d:e6:df:88:5c:64:d5:2f:
                    f7:31:e1:4d:95:f3:3f:0f:68:fc:c9:50:7c:a8:4c:
                    7b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BF:FC:66:B4:FD:D9:AA:27:B8:D7:91:19:83:14:19:17:C6:50:DD
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/xL_8ZrT92aonuNeRGYMUGRfGUN0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:5b:80:3f:c8:eb:88:9e:40:d0:50:c6:62:85:79:37:73:75:
         d2:4b:b7:7a:6a:66:fa:3d:99:d8:66:fb:94:41:47:ae:63:9b:
         fb:c2:5c:17:c4:bc:4e:f2:50:82:ac:c3:70:f5:7c:91:a3:a1:
         35:ad:21:a8:ea:70:e2:89:bf:73:ac:26:ec:fb:95:5e:c3:9e:
         08:6b:29:3d:86:cc:f1:be:73:ae:c8:cc:f5:be:7f:8c:5d:51:
         9b:25:a5:ee:b9:24:88:10:90:2e:48:10:d4:2f:a7:5b:2a:5d:
         a9:5e:61:50:d9:fd:bd:3e:75:03:75:f5:31:df:52:36:13:5a:
         49:28:41:4d:1f:14:5a:54:f6:f5:09:e1:81:ea:8e:eb:26:de:
         d9:b4:f9:66:ab:f6:f2:24:68:5f:49:35:93:f0:b4:3e:9b:b0:
         13:2c:29:29:ca:e9:fb:15:d1:d3:2c:9c:0a:d3:8f:ff:ee:04:
         95:0b:98:27:ea:96:ae:9c:1c:9e:f6:aa:a9:ad:58:f2:6e:c4:
         41:02:7c:00:71:49:cf:54:fb:a3:49:a5:25:4b:a8:d7:4d:b5:
         80:5b:06:60:26:33:2d:49:78:16:44:45:be:8b:de:91:df:51:
         43:a9:77:8b:82:bb:89:37:d4:38:2f:39:e1:7e:88:5f:5d:db:
         4c:29:65:72
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQTVB
Q0FDMjk5MEJEOEY4NjU1QzBDNzIxQkFDRkYwMzBBNTlEMUZDMB4XDTIxMDUyNTAy
NDIxNVoXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoQzRCRkZDNjZCNEZERDlB
QTI3QjhENzkxMTk4MzE0MTkxN0M2NTBERDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANclvvBZi7o/wsLV9+pWskZx2WZd5OC7I2aK6G7J69OOsTnc4YBy
NB/If09kViN550PTLxpMM6Jlx8K4kDzxmQguJZzoXU8L18w1itlWkKtF/i/+8f4h
iEhQZL+byo3U407RvDbsP7PlJISWvEIR53Gle+I0SBSjgl2iZIErU5CcEGTssfI2
Td2Dvhi+8jbuZzTpLtSr7BAzS8YZmwd90SNh46rR4IqcIguLo0t7eowlBu8qZVKO
0yW8oeVK3cFtrLoTRKmIPu8cZgoybkF+r6hANxnXdrSvaH1fUplyGU3dQKFGzgS3
gy3m34hcZNUv9zHhTZXzPw9o/MlQfKhMezECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTEv/xmtP3Zqie415EZgxQZF8ZQ3TAfBgNVHSMEGDAWgBQKWsrCmQvY+GVcDHIb
rP8DClnR/DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzU0L0Nsckt3cGtMMlBobFhBeHlHNnpfQXdwWjBmdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0Nsckt3cGtMMlBobFhBeHlHNnpfQXdw
WjBmdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zNTQveExfOFpyVDkyYW9udU5lUkdZTVVHUmZHVU4wLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXyTADANBgkqhkiG9w0BAQsFAAOCAQEA
tFuAP8jriJ5A0FDGYoV5N3N10ku3empm+j2Z2Gb7lEFHrmOb+8JcF8S8TvJQgqzD
cPV8kaOhNa0hqOpw4om/c6wm7PuVXsOeCGspPYbM8b5zrsjM9b5/jF1RmyWl7rkk
iBCQLkgQ1C+nWypdqV5hUNn9vT51A3X1Md9SNhNaSShBTR8UWlT29QnhgeqO6ybe
2bT5Zqv28iRoX0k1k/C0PpuwEywpKcrp+xXR0yycCtOP/+4ElQuYJ+qWrpwcnvaq
qa1Y8m7EQQJ8AHFJz1T7o0mlJUuo1021gFsGYCYzLUl4FkRFvovekd9RQ6l3i4K7
iTfUOC854X6IX13bTCllcg==
-----END CERTIFICATE-----