Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/G7u_cCWYO9RTqwYCPiS8NIj73VE.roa
File:                     G7u_cCWYO9RTqwYCPiS8NIj73VE.roa (raw, json)
Hash identifier:          f4VCKH+8bp9XLu2uu3D16CmpFBZGK7ASsqaZQKYVHTE=
Subject key identifier:   1B:BB:BF:70:25:98:3B:D4:53:AB:06:02:3E:24:BC:34:88:FB:DD:51
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       16
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/G7u_cCWYO9RTqwYCPiS8NIj73VE.roa
Signing time:             Tue 25 May 2021 02:42:23 +0000
ROA not before:           Tue 25 May 2021 02:42:23 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     59125
IP address blocks:        103.246.80.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: May 25 02:42:23 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=1BBBBF7025983BD453AB06023E24BC3488FBDD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:58:d3:71:3b:c5:d3:33:59:ce:5c:2d:c0:
                    08:dd:ef:f2:0b:9f:31:6b:f2:2f:30:73:2b:e9:02:
                    9f:57:b6:70:37:af:fe:21:7a:c3:be:62:1e:0b:65:
                    5d:3a:80:ba:f7:2a:23:f2:40:85:d1:7b:67:47:c1:
                    ab:b0:43:44:77:ad:58:49:8a:b9:f4:10:33:34:f4:
                    b1:5d:4f:2c:0e:e9:d8:5f:0f:c5:d6:74:d1:f1:28:
                    49:39:39:34:9a:0d:64:8d:a8:2d:65:16:52:19:96:
                    18:aa:a5:eb:f8:f5:3d:fc:35:c5:b5:c6:6d:1e:de:
                    05:1d:f9:4d:3a:71:e1:57:01:bd:6a:1e:69:3e:13:
                    a2:38:52:df:f9:ea:c9:12:37:ae:87:35:17:c2:11:
                    5d:3b:a6:2d:58:11:bd:f2:8a:33:64:38:c5:a7:de:
                    1d:23:b4:00:39:8f:bb:0b:12:7d:fd:30:10:e5:13:
                    5b:b1:36:cf:76:46:57:26:3f:0c:5b:fe:5d:e4:64:
                    11:c0:f9:b8:a3:28:7f:59:43:52:9b:e0:d1:7d:40:
                    aa:09:6b:aa:f8:df:8c:f6:0f:63:68:1b:24:a7:3c:
                    f5:60:ef:85:5c:be:a4:8c:24:57:1b:16:a5:73:84:
                    9d:d4:14:30:dc:e2:ed:5e:45:52:14:35:5e:c4:6f:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:BF:70:25:98:3B:D4:53:AB:06:02:3E:24:BC:34:88:FB:DD:51
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/G7u_cCWYO9RTqwYCPiS8NIj73VE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:43:35:0d:bd:03:3a:bc:5a:77:50:d0:c8:96:b1:28:ff:1b:
         c5:12:78:ca:8a:be:3d:8a:88:e5:a8:a6:b3:7f:7a:c5:d2:0f:
         61:53:4e:62:b2:9a:73:3b:4b:9f:c7:ab:d6:f2:c1:55:88:e0:
         8d:a5:01:ba:38:b4:d4:38:43:85:7c:d6:45:33:7d:43:be:4b:
         83:03:26:91:fc:32:8d:b9:8f:a4:83:2e:21:69:1b:0d:5a:73:
         2e:07:37:a7:18:c8:e3:31:36:47:4d:f6:ba:65:d0:56:51:fd:
         48:99:cd:fb:97:ad:67:14:48:84:85:65:37:06:93:5b:10:40:
         f4:32:6c:5a:c0:c5:aa:45:33:b5:aa:38:7e:00:d1:67:9f:8c:
         97:eb:ad:b0:7a:a2:75:65:4b:71:77:43:89:df:aa:a3:39:ed:
         73:ad:da:ee:51:9c:b0:20:58:b5:4d:c2:02:f2:b3:8e:7f:29:
         77:af:a8:87:e7:71:8b:19:93:43:fe:24:96:12:b3:8d:65:53:
         fa:30:21:81:89:5d:6e:be:f1:97:e1:88:8c:3a:88:29:2c:01:
         60:de:ef:6b:8f:a9:f6:31:3a:7b:39:2e:64:2b:57:b5:e6:08:
         23:f5:30:4c:1e:8a:ae:d4:88:a6:2f:0d:0a:4e:c6:86:d7:4a:
         d8:d6:09:50
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjIw
QTA2QTIxMjA1ODIwQjI4RkQwNkNFMEE4NEYwM0ZDREFFQkM1MB4XDTIxMDUyNTAy
NDIyM1oXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoMUJCQkJGNzAyNTk4M0JE
NDUzQUIwNjAyM0UyNEJDMzQ4OEZCREQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM8nWNNxO8XTM1nOXC3ACN3v8gufMWvyLzBzK+kCn1e2cDev/iF6
w75iHgtlXTqAuvcqI/JAhdF7Z0fBq7BDRHetWEmKufQQMzT0sV1PLA7p2F8PxdZ0
0fEoSTk5NJoNZI2oLWUWUhmWGKql6/j1Pfw1xbXGbR7eBR35TTpx4VcBvWoeaT4T
ojhS3/nqyRI3roc1F8IRXTumLVgRvfKKM2Q4xafeHSO0ADmPuwsSff0wEOUTW7E2
z3ZGVyY/DFv+XeRkEcD5uKMof1lDUpvg0X1AqglrqvjfjPYPY2gbJKc89WDvhVy+
pIwkVxsWpXOEndQUMNzi7V5FUhQ1XsRvxS8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQbu79wJZg71FOrBgI+JLw0iPvdUTAfBgNVHSMEGDAWgBQbIKBqISBYILKP0Gzg
qE8D/NrrxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96
YTY4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MzAvRzd1X2NDV1lPOVJUcXdZQ1BpUzhOSWo3M1ZFLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmf2UDANBgkqhkiG9w0BAQsFAAOCAQEA
GkM1Db0DOrxad1DQyJaxKP8bxRJ4yoq+PYqI5aims396xdIPYVNOYrKacztLn8er
1vLBVYjgjaUBuji01DhDhXzWRTN9Q75LgwMmkfwyjbmPpIMuIWkbDVpzLgc3pxjI
4zE2R032umXQVlH9SJnN+5etZxRIhIVlNwaTWxBA9DJsWsDFqkUztao4fgDRZ5+M
l+utsHqidWVLcXdDid+qozntc63a7lGcsCBYtU3CAvKzjn8pd6+oh+dxixmTQ/4k
lhKzjWVT+jAhgYldbr7xl+GIjDqIKSwBYN7va4+p9jE6ezkuZCtXteYII/UwTB6K
rtSIpi8NCk7GhtdK2NYJUA==
-----END CERTIFICATE-----