Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/rLaQ9QeQJjW8hvjBcFVBeeEbXCk.roa
File:                     rLaQ9QeQJjW8hvjBcFVBeeEbXCk.roa (raw, json)
Hash identifier:          E4S9ekt8dif74ThDDQSdiBzhYVtnrT9Ld/g6K11J7x8=
Subject key identifier:   AC:B6:90:F5:07:90:26:35:BC:86:F8:C1:70:55:41:79:E1:1B:5C:29
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       28
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/rLaQ9QeQJjW8hvjBcFVBeeEbXCk.roa
Signing time:             Fri 01 Oct 2021 01:28:26 +0000
ROA not before:           Fri 01 Oct 2021 01:28:26 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     55900
IP address blocks:        27.0.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Oct  1 01:28:26 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=ACB690F507902635BC86F8C170554179E11B5C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:de:1e:46:e3:0b:74:bb:d8:fb:27:32:31:
                    5e:a4:5c:29:ba:c8:17:4f:de:82:e8:5c:5d:20:0d:
                    04:e9:dc:20:fe:ce:6f:70:f9:45:c1:90:35:f4:8e:
                    75:74:e7:4d:53:60:00:aa:d9:5b:0b:b1:ed:6f:ea:
                    91:16:9a:9f:e1:7d:26:22:2c:aa:51:dc:55:34:b6:
                    4e:5c:20:a1:5e:ad:47:4a:d4:47:2b:3c:bc:2b:04:
                    b4:ca:a7:89:5d:d9:03:97:f7:f5:8a:2f:fb:f4:f4:
                    3b:8b:84:ae:43:f6:c6:59:43:1c:22:fc:65:1d:bb:
                    00:ae:46:7b:60:41:39:20:54:d8:1a:f9:15:76:e7:
                    1b:ab:40:b4:80:dc:07:f3:cc:56:72:a4:ca:be:ee:
                    7c:d7:bc:b6:f7:ad:15:24:fa:79:17:37:cd:7d:cc:
                    d2:16:5d:a9:60:17:37:fd:1e:61:0d:ee:33:34:86:
                    d3:89:b0:98:cc:0e:df:5a:c8:13:94:85:40:c0:da:
                    61:39:c2:d0:0e:3b:f5:5f:c8:f3:d8:fa:51:90:1b:
                    ed:b2:dc:1e:f9:1b:4a:58:72:3c:48:79:a0:39:a6:
                    c5:68:ef:dc:5c:e5:9c:fb:0a:71:5e:28:38:5f:ed:
                    c4:4e:2d:d5:4b:c7:4f:66:d0:5e:d4:cb:2c:f8:8f:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B6:90:F5:07:90:26:35:BC:86:F8:C1:70:55:41:79:E1:1B:5C:29
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/rLaQ9QeQJjW8hvjBcFVBeeEbXCk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b2:e8:59:05:87:c1:4f:0d:03:4e:28:00:5e:98:b7:25:74:9f:
         d9:17:66:71:cb:55:d2:4e:e5:c8:71:fc:60:38:77:26:39:fc:
         9f:17:95:cd:78:ce:b2:8c:c2:2a:56:50:8a:c1:90:0f:34:2e:
         cb:3c:ea:4c:b5:86:a5:68:16:8f:4f:0f:59:ed:ce:84:48:7b:
         f9:7a:01:3f:ae:eb:4a:a7:34:c7:20:5a:55:2e:02:e5:e7:8c:
         52:90:22:84:0c:e2:b3:d6:60:1b:ba:27:66:71:69:8b:22:8d:
         95:65:77:6d:18:5e:2e:59:21:dd:8d:cf:95:ac:ae:f2:85:07:
         e1:dc:01:72:be:b0:65:92:98:37:68:b3:97:59:00:7f:cc:f0:
         25:76:b3:fd:9d:23:61:49:1e:25:d4:24:de:b7:1a:cd:65:35:
         12:21:d7:c9:17:7f:57:9c:4e:86:2e:5b:fe:8c:96:a8:31:20:
         dc:0e:ee:fb:ff:e6:ac:30:7c:71:f6:ea:ca:c3:36:7c:64:99:
         1c:df:73:cd:ce:8d:26:34:3b:3c:44:bd:b9:f4:72:51:a1:c1:
         c6:2b:b8:c0:3c:09:85:c8:77:d2:35:c2:b7:02:60:1c:54:5f:
         d7:e7:5f:d7:ee:db:ab:98:9c:36:e6:3d:1d:3b:09:aa:bc:49:
         8f:8b:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----