Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5444/vptdlxNA3zQJPI6TTnWs-aPhkXI.roa
File:                     vptdlxNA3zQJPI6TTnWs-aPhkXI.roa (raw, json)
Hash identifier:          xFWlPBG16EmT0/1HnZhnayyjK1y3V3ezqe+E7Jlq9eI=
Subject key identifier:   BE:9B:5D:97:13:40:DF:34:09:3C:8E:93:4E:75:AC:F9:A3:E1:91:72
Certificate issuer:       /CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
Certificate serial:       02
Authority key identifier: 3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/vptdlxNA3zQJPI6TTnWs-aPhkXI.roa
Signing time:             Mon 26 Apr 2021 08:33:01 +0000
ROA not before:           Mon 26 Apr 2021 08:33:01 +0000
ROA not after:            Tue 26 Apr 2022 08:26:52 +0000
asID:                     131984
IP address blocks:        103.162.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
        Validity
            Not Before: Apr 26 08:33:01 2021 GMT
            Not After : Apr 26 08:26:52 2022 GMT
        Subject: CN=BE9B5D971340DF34093C8E934E75ACF9A3E19172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:c4:90:86:50:6c:1c:18:a1:9a:96:f4:c5:
                    98:4d:1f:2d:43:94:4a:cc:94:48:1b:7b:2b:18:e2:
                    b1:10:e7:bd:a2:24:2b:4e:c1:36:46:b4:68:3d:55:
                    5d:4a:b4:0a:be:44:30:29:b1:15:08:57:26:f8:10:
                    5c:69:01:ba:6d:8f:8a:06:30:6e:84:f7:f9:76:1f:
                    4d:24:ec:9d:bc:ed:7c:a8:7b:1a:d0:c4:c4:fb:8e:
                    ac:e4:26:e1:6e:d9:e2:84:e1:b2:08:5d:a0:dd:49:
                    df:b3:70:90:f4:5b:ad:67:fb:6c:60:34:fe:92:64:
                    7b:21:44:51:a5:db:e1:b5:1b:44:5f:6b:41:90:61:
                    68:53:de:f0:6c:a0:be:c5:1a:e8:4a:6a:f5:69:ec:
                    d0:12:31:4e:a8:85:15:29:bf:47:ad:b1:89:f6:96:
                    a0:86:7e:39:b1:fb:a0:82:53:87:30:fc:5e:ea:dc:
                    4b:2d:1c:bc:36:98:79:ba:3e:1e:40:82:e8:a7:eb:
                    dc:e6:60:7d:6b:21:91:51:eb:7e:2f:40:13:38:1a:
                    24:09:22:4f:d0:12:b3:79:42:73:66:02:42:e3:9b:
                    1d:eb:a3:aa:77:98:ee:d7:0d:c3:9a:96:94:73:c4:
                    73:5d:db:e4:39:06:72:29:ff:91:6d:5e:e6:74:86:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9B:5D:97:13:40:DF:34:09:3C:8E:93:4E:75:AC:F9:A3:E1:91:72
            X509v3 Authority Key Identifier:
                keyid:3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/vptdlxNA3zQJPI6TTnWs-aPhkXI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:c3:a1:98:d7:76:9b:a6:dd:42:e6:22:91:1f:bb:d1:0e:3e:
         03:51:4f:42:29:00:d2:c2:51:f6:f9:e6:80:79:2c:a9:42:49:
         53:a5:22:6d:e0:40:6d:bc:65:8d:aa:85:e0:80:a4:a5:69:12:
         b0:ad:73:eb:64:cb:dc:9e:59:36:9f:c0:7e:b9:f0:96:e5:31:
         80:00:08:ce:50:7c:5e:e6:e4:67:c2:be:8e:2d:14:79:26:ba:
         c0:eb:9a:00:2e:f2:25:73:c7:c2:46:c5:88:8c:7a:6a:ad:6e:
         62:6b:2f:93:2f:58:17:f1:8c:7b:f8:f9:0b:54:eb:7d:e0:57:
         f1:d7:b1:22:bc:f8:eb:57:d6:7e:40:dd:c8:a1:4a:b7:0e:ce:
         1f:60:18:b4:b0:11:59:8f:19:26:cb:ac:25:22:45:50:1a:8c:
         00:d2:b6:ea:32:d5:aa:a2:54:ef:c7:fa:2d:58:55:cf:14:23:
         f1:e5:fd:93:b6:49:8e:76:22:15:6a:d2:16:b2:af:17:03:4d:
         8a:b2:96:73:25:95:80:49:ad:77:21:11:f3:22:d2:8f:e1:60:
         42:64:55:c9:11:f3:f5:9a:8c:ba:3f:f5:c1:e1:b7:fe:28:ee:
         db:5b:17:94:b5:4c:27:70:29:e2:4b:94:fe:95:39:b3:ca:17:
         d0:9e:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----