Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/1pvZkg_xUYT9mWt45lzuMOPo5LY.roa
File:                     1pvZkg_xUYT9mWt45lzuMOPo5LY.roa (raw, json)
Hash identifier:          PAk3BapS3ccvE/Cq7D1t6idesqN1Q+9jN0IVnDIvtoU=
Subject key identifier:   D6:9B:D9:92:0F:F1:51:84:FD:99:6B:78:E6:5C:EE:30:E3:E8:E4:B6
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       035F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/1pvZkg_xUYT9mWt45lzuMOPo5LY.roa
Signing time:             Tue 25 May 2021 02:43:09 +0000
ROA not before:           Tue 25 May 2021 02:43:09 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.184.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863 (0x35f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:09 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=D69BD9920FF15184FD996B78E65CEE30E3E8E4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:24:1f:bf:bc:f5:94:fc:95:32:bc:55:62:84:
                    74:c1:7c:af:da:ed:60:bf:07:93:9a:cb:5c:be:e7:
                    9d:02:50:62:2a:5b:13:03:e7:87:57:42:57:59:82:
                    eb:f1:f7:62:07:71:e8:55:16:54:28:d5:d4:e0:07:
                    55:10:07:4b:78:cd:a5:b9:5e:ed:b6:d3:0f:01:1b:
                    88:2d:e1:20:19:c4:17:9d:68:6c:2f:d1:a6:5b:01:
                    d7:24:4c:0e:b4:46:a5:53:2c:59:53:d6:de:ad:12:
                    1b:eb:16:c5:58:71:fa:a9:d4:4a:4a:6c:d0:66:6c:
                    9f:12:73:fe:b4:79:22:da:33:61:6c:a2:54:e5:d7:
                    05:30:04:32:02:05:e5:07:ae:29:41:be:1d:2d:71:
                    db:e9:a0:5a:7d:71:38:11:14:83:f4:4a:39:0e:a6:
                    7c:75:ac:30:ea:12:85:0f:4c:90:5f:9d:4e:41:08:
                    d8:5b:16:c2:a5:88:0c:80:12:1e:a9:2f:c4:04:8c:
                    56:c2:0d:f0:89:c7:d7:57:81:f1:cb:3a:f8:48:fe:
                    1b:84:b2:5c:8a:b4:45:53:6a:5b:d4:57:c8:96:f0:
                    a2:21:1f:63:99:45:23:26:b5:59:0f:57:71:c0:3a:
                    16:e5:a2:bd:54:97:b4:9b:e3:dc:89:e9:41:60:b3:
                    0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9B:D9:92:0F:F1:51:84:FD:99:6B:78:E6:5C:EE:30:E3:E8:E4:B6
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/1pvZkg_xUYT9mWt45lzuMOPo5LY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:1e:cb:7b:54:e3:47:df:55:9b:f9:13:45:7b:eb:af:46:b8:
         65:a5:09:2d:e1:e5:db:b7:73:55:7c:d9:ba:d4:03:0d:7c:ad:
         e5:7a:92:f5:fa:8e:fa:10:90:71:93:bd:9e:6b:4e:b4:46:03:
         e4:1c:8b:39:62:9e:f3:6b:83:73:bf:4d:fa:37:cd:4f:a7:09:
         7b:c2:e4:a6:41:50:14:bc:d0:15:be:1c:41:1e:04:d7:6e:c7:
         f8:a7:2b:19:a5:ce:2e:ed:8c:1d:46:87:09:4b:24:f3:6d:42:
         ab:9e:b3:65:33:98:05:1e:60:5c:6c:2c:c4:d2:bc:20:02:3e:
         47:a8:d6:2c:06:74:24:98:76:df:79:15:6b:08:3c:8b:e3:fc:
         9e:c2:cc:f2:8a:74:66:03:33:87:57:b8:45:61:bb:3a:c6:04:
         64:88:cf:e1:a6:64:ea:6e:a4:a1:67:de:43:64:9b:3f:40:46:
         5b:cd:05:23:4f:53:db:a1:37:ed:2f:60:82:03:94:7e:29:61:
         74:e0:63:b4:0c:8d:0f:fa:23:ac:e0:2e:dd:8e:c2:4c:7b:e1:
         79:ab:ef:65:b8:31:f6:33:f2:76:62:50:5c:25:8b:e6:cd:14:
         fe:ea:1d:9f:71:a8:a0:33:7a:e2:fa:da:cd:4a:d2:58:39:c6:
         23:57:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----