Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/l_OVwWtSJGM68iiHUnfg8bDI8AE.roa
File:                     l_OVwWtSJGM68iiHUnfg8bDI8AE.roa (raw, json)
Hash identifier:          SoGwPOuY+vfvmpeM+VMsGb74YfZjr6H0KM7m4LKzBmk=
Subject key identifier:   97:F3:95:C1:6B:52:24:63:3A:F2:28:87:52:77:E0:F1:B0:C8:F0:01
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       5D
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/l_OVwWtSJGM68iiHUnfg8bDI8AE.roa
Signing time:             Tue 23 Feb 2021 08:57:41 +0000
ROA not before:           Tue 23 Feb 2021 08:57:41 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        116.67.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:41 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=97F395C16B5224633AF228875277E0F1B0C8F001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:0b:0a:b2:13:c2:00:6b:5a:84:be:8d:b6:
                    8f:e5:ea:ac:29:b3:12:df:00:9f:39:c8:68:93:b1:
                    de:4b:10:74:4b:54:27:ed:88:6b:c2:de:15:c5:0c:
                    77:b9:09:3b:b0:7a:1f:49:98:5d:0d:15:04:3e:70:
                    e6:ff:9a:2e:46:dc:f7:07:fc:e3:47:b1:2d:ca:d3:
                    be:17:57:54:76:69:26:11:22:4b:d3:7c:d4:0d:f1:
                    ac:89:c2:3e:69:db:9c:dd:eb:0b:a7:f2:a3:08:7e:
                    ef:74:45:3b:f9:79:5b:24:c8:a3:2e:ca:6c:b3:30:
                    11:f4:a7:63:f1:27:43:7b:e4:cd:11:25:80:1a:4d:
                    c6:82:df:c2:1b:5e:0f:d9:08:5f:70:44:e3:a3:3f:
                    c7:cf:b2:76:06:bb:a6:1c:67:28:6b:2a:dd:23:dc:
                    64:48:79:95:a1:46:b4:17:b2:f2:73:88:c8:a4:5e:
                    69:98:3d:e5:70:07:61:13:6d:12:83:8f:6e:c2:6d:
                    c9:e3:3e:e3:10:44:59:de:a1:80:1d:66:f7:e1:d9:
                    3c:b1:7b:3b:4d:35:4c:3e:70:7d:e9:ca:3f:5e:c8:
                    ea:44:89:40:64:4f:3e:2e:1c:fe:2d:49:5d:f2:5e:
                    3c:dc:e4:9f:90:33:8a:77:84:8c:f7:09:bc:c4:cf:
                    60:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F3:95:C1:6B:52:24:63:3A:F2:28:87:52:77:E0:F1:B0:C8:F0:01
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/l_OVwWtSJGM68iiHUnfg8bDI8AE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.67.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5f:6a:5c:ce:e9:99:5b:88:f8:1c:a2:72:15:72:4b:18:2d:94:
         02:ae:94:d6:f8:94:b8:ea:b8:e3:da:12:3b:ff:05:80:02:41:
         23:97:c1:0e:9f:24:c4:1c:52:7d:a8:48:8d:80:15:82:d3:68:
         e5:16:ac:12:34:a0:18:8b:dc:fe:37:08:b7:cc:04:07:b7:dc:
         3c:e1:98:f9:c9:ff:56:93:3c:4c:6b:c9:ed:73:f2:a5:90:b8:
         bb:ef:d9:bb:0b:00:f0:3b:ad:27:32:8f:50:9a:cc:df:c4:41:
         92:87:75:f3:86:a0:21:a3:bc:85:a9:24:5c:e4:80:d0:73:0a:
         19:d0:c3:a9:39:89:8a:2b:06:dc:cc:5f:d0:57:37:20:19:8e:
         86:59:96:51:a0:ba:89:92:c6:b8:c4:84:9d:47:d5:57:92:9d:
         60:12:db:26:df:1e:4d:2e:12:b8:bc:47:32:ee:cf:ca:be:6c:
         60:ff:f1:40:31:aa:fb:68:be:16:01:f6:60:10:18:d8:b4:8e:
         05:18:da:72:c0:00:da:14:b0:a7:84:63:b9:4c:d8:2f:df:65:
         28:0a:75:cd:d1:06:c9:2b:c8:7f:43:a6:b7:7b:47:5b:fb:88:
         e2:9b:0e:1c:40:da:81:4a:21:d4:d2:79:da:82:80:e7:70:a7:
         55:86:a3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----