Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/z12nREt-jgVOnJWuygk6BDpir_U.roa
File:                     z12nREt-jgVOnJWuygk6BDpir_U.roa (raw, json)
Hash identifier:          bCZmkQcK8O1ZMvaz2otiWAAhgubrdmcc0ocJ/5GBCWQ=
Subject key identifier:   CF:5D:A7:44:4B:7E:8E:05:4E:9C:95:AE:CA:09:3A:04:3A:62:AF:F5
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       63
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/z12nREt-jgVOnJWuygk6BDpir_U.roa
Signing time:             Sat 18 Sep 2021 06:37:54 +0000
ROA not before:           Sat 18 Sep 2021 06:37:54 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7530
IP address blocks:        210.231.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep 18 06:37:54 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=CF5DA7444B7E8E054E9C95AECA093A043A62AFF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:be:3a:27:1c:14:c3:70:ea:fe:80:b7:6d:
                    d0:b6:ef:ff:cf:c0:75:2c:08:9a:28:a3:01:8d:38:
                    fe:61:31:b7:63:85:f1:65:30:1b:8d:83:3f:77:ce:
                    72:07:7b:07:dc:e0:c4:cb:ee:f6:19:1c:c6:c5:25:
                    4d:77:53:fe:92:96:d4:9c:d1:9d:a6:32:0b:f5:45:
                    75:13:c0:c5:ac:9d:21:0a:1a:aa:8f:7f:f6:56:e0:
                    2c:b4:5c:27:86:7f:db:43:3c:ea:07:30:2e:14:ad:
                    49:eb:df:4b:d4:1d:72:22:97:9a:25:79:63:18:b5:
                    99:06:60:73:cf:cb:ca:85:6a:f3:94:2a:9a:6d:66:
                    5d:6a:88:74:df:ad:4c:fd:8b:4e:53:cd:3f:ed:2d:
                    07:ee:c2:bd:d3:90:db:d2:43:76:73:76:c3:43:22:
                    d5:27:64:44:c8:60:ca:6e:fd:b2:4b:ca:72:e0:13:
                    ee:31:b3:a4:cb:08:2c:e4:f0:ce:2a:a5:fa:99:76:
                    fb:48:a1:b4:1c:d5:80:a4:ea:6c:42:87:1e:2d:04:
                    33:2e:f7:15:64:07:02:17:28:4a:e8:1d:f1:31:19:
                    d5:63:d2:5e:bf:5f:de:b0:d1:24:b9:78:51:37:e5:
                    95:ff:93:e5:10:1e:d7:bc:16:c5:57:ed:31:bc:ec:
                    fa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5D:A7:44:4B:7E:8E:05:4E:9C:95:AE:CA:09:3A:04:3A:62:AF:F5
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/z12nREt-jgVOnJWuygk6BDpir_U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:5a:1a:9d:45:4b:8f:75:2e:67:c8:fa:90:fc:b3:ab:db:32:
         31:06:68:89:06:9d:7e:65:83:ba:69:0e:08:4e:f8:36:de:e4:
         78:b1:0d:dd:d6:e2:f4:a9:ca:2b:f8:53:cd:a3:c0:e5:51:64:
         6e:f8:cb:88:2e:63:17:5f:5c:1b:e5:78:ec:9c:21:13:a5:ff:
         9d:35:0f:d3:1e:85:6c:43:ae:46:13:22:8d:ba:54:b1:2d:81:
         ef:ed:b2:90:02:e3:af:a2:54:59:4f:b7:d9:1b:1b:ad:1b:a6:
         a5:34:21:3f:40:6b:86:6c:f7:40:6a:31:97:71:b6:7c:24:89:
         c1:fa:77:4b:d4:9f:1a:80:5b:a4:13:7e:4c:41:c8:41:3f:cb:
         de:31:31:4a:6d:4a:c8:9f:97:cd:ce:4d:65:8a:2f:03:53:83:
         80:8e:20:e9:ad:90:43:2c:a6:fb:14:0b:86:50:97:89:ea:fa:
         d1:6b:67:67:d1:9d:46:1f:36:37:27:5b:0c:a3:6a:89:66:cc:
         14:c3:b8:2c:b1:d3:82:bd:4f:88:d8:a4:9a:e3:43:fd:f3:49:
         a5:3e:28:c9:9f:9d:db:c8:a3:d6:77:45:94:f6:4d:42:48:c8:
         78:4d:c4:42:fa:7e:67:b9:69:04:f6:a5:eb:e2:e5:a0:77:c2:
         df:b6:49:a9
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQTVB
Q0FDMjk5MEJEOEY4NjU1QzBDNzIxQkFDRkYwMzBBNTlEMUZDMB4XDTIxMDkxODA2
Mzc1NFoXDTIyMDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0Y1REE3NDQ0QjdFOEUw
NTRFOUM5NUFFQ0EwOTNBMDQzQTYyQUZGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALvfvjonHBTDcOr+gLdt0Lbv/8/AdSwImiijAY04/mExt2OF8WUw
G42DP3fOcgd7B9zgxMvu9hkcxsUlTXdT/pKW1JzRnaYyC/VFdRPAxaydIQoaqo9/
9lbgLLRcJ4Z/20M86gcwLhStSevfS9QdciKXmiV5Yxi1mQZgc8/LyoVq85Qqmm1m
XWqIdN+tTP2LTlPNP+0tB+7CvdOQ29JDdnN2w0Mi1SdkRMhgym79skvKcuAT7jGz
pMsILOTwziql+pl2+0ihtBzVgKTqbEKHHi0EMy73FWQHAhcoSugd8TEZ1WPSXr9f
3rDRJLl4UTfllf+T5RAe17wWxVftMbzs+nECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTPXadES36OBU6cla7KCToEOmKv9TAfBgNVHSMEGDAWgBQKWsrCmQvY+GVcDHIb
rP8DClnR/DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzU0L0Nsckt3cGtMMlBobFhBeHlHNnpfQXdwWjBmdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0Nsckt3cGtMMlBobFhBeHlHNnpfQXdw
WjBmdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zNTQvejEyblJFdC1qZ1ZPbkpXdXlnazZCRHBpcl9VLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtLn1DANBgkqhkiG9w0BAQsFAAOCAQEA
bloanUVLj3UuZ8j6kPyzq9syMQZoiQadfmWDumkOCE74Nt7keLEN3dbi9KnKK/hT
zaPA5VFkbvjLiC5jF19cG+V47JwhE6X/nTUP0x6FbEOuRhMijbpUsS2B7+2ykALj
r6JUWU+32RsbrRumpTQhP0Brhmz3QGoxl3G2fCSJwfp3S9SfGoBbpBN+TEHIQT/L
3jExSm1KyJ+Xzc5NZYovA1ODgI4g6a2QQyym+xQLhlCXier60WtnZ9GdRh82Nydb
DKNqiWbMFMO4LLHTgr1PiNikmuND/fNJpT4oyZ+d28ij1ndFlPZNQkjIeE3EQvp+
Z7lpBPal6+LloHfC37ZJqQ==
-----END CERTIFICATE-----