Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Hf9T3WLLtWRgDWUL5D0owzhMJj0.roa
File:                     Hf9T3WLLtWRgDWUL5D0owzhMJj0.roa (raw, json)
Hash identifier:          5l6Wcap+5y9iEvM+LJDvsXwsAefTfvRHyr3mFgJYYTU=
Subject key identifier:   1D:FF:53:DD:62:CB:B5:64:60:0D:65:0B:E4:3D:28:C3:38:4C:26:3D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       035C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Hf9T3WLLtWRgDWUL5D0owzhMJj0.roa
Signing time:             Tue 25 May 2021 02:43:07 +0000
ROA not before:           Tue 25 May 2021 02:43:07 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.96.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:07 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=1DFF53DD62CBB564600D650BE43D28C3384C263D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:5e:c5:5d:4c:2c:2a:cd:80:bd:ef:b6:86:
                    30:61:6b:16:58:af:2a:d3:7c:74:9c:1c:01:cc:dc:
                    f4:09:8f:2a:54:f1:43:aa:95:85:38:12:fa:9a:b6:
                    d2:49:93:2f:34:f0:5c:7b:37:42:8a:97:0c:4f:2d:
                    31:3d:4a:d7:74:c1:e3:91:2d:fe:0a:47:c6:4f:e5:
                    f1:0a:39:4f:0e:1c:33:7e:7e:89:32:e6:6e:19:7c:
                    31:05:29:4b:14:d9:7a:cd:a2:74:33:14:cf:a9:f6:
                    fe:c3:18:e1:3a:bd:e0:99:32:64:e5:f5:6d:ff:9f:
                    9e:0b:72:18:bb:36:99:df:95:6b:62:51:87:0c:5f:
                    92:65:a4:1e:0e:2c:7c:e0:9f:ec:99:0e:c7:aa:dd:
                    e5:94:78:7d:4b:3e:55:4a:bc:bf:80:1c:04:de:47:
                    b9:8b:f4:42:c5:14:cc:a6:59:07:f2:76:3d:20:05:
                    9f:bb:72:c7:bd:cf:fd:80:83:17:57:20:d3:25:64:
                    6c:b5:08:35:67:10:ba:9c:72:a6:18:1f:c5:4a:09:
                    1a:a5:7d:5f:00:e4:25:f0:11:c3:d5:d7:6f:2a:9f:
                    86:48:e5:a4:7e:7d:30:18:d3:6f:3e:2c:24:f0:89:
                    24:25:12:73:75:9a:ef:d3:d9:23:15:e4:c9:3b:ab:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FF:53:DD:62:CB:B5:64:60:0D:65:0B:E4:3D:28:C3:38:4C:26:3D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Hf9T3WLLtWRgDWUL5D0owzhMJj0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:ee:e3:df:28:f0:8a:d5:36:16:ff:e8:67:5c:86:d2:aa:e6:
         1b:db:4d:97:c7:54:4d:cd:1e:9a:50:ca:cb:0f:96:19:e4:1a:
         2c:15:a8:37:c6:6c:26:06:1f:11:82:9d:3c:42:f1:fa:b2:7c:
         51:6d:58:1e:b8:24:65:23:72:d9:ba:f4:f2:97:b3:ff:ea:2a:
         25:f4:8e:ba:fa:38:26:be:86:2d:8b:ae:d0:52:c6:36:fc:4c:
         0f:f8:23:0e:36:12:61:5e:ce:65:b5:7a:46:1f:e3:7e:fb:9f:
         25:57:ba:41:9c:64:31:03:01:c9:c6:90:a3:ca:c0:d2:84:35:
         64:e6:63:a1:e3:69:53:52:90:e5:99:6b:c3:e6:e5:1e:9b:79:
         ed:14:f6:e4:5d:38:4a:81:87:70:83:26:7a:77:06:26:1c:36:
         93:17:62:83:6f:fc:be:87:86:3f:bd:87:5f:58:93:59:a9:bd:
         63:37:ea:67:10:a3:f9:c6:02:d9:46:fa:a4:b2:09:2e:67:39:
         ae:31:c9:ee:f1:4b:7f:16:df:29:0d:37:28:1a:b2:91:68:67:
         24:ad:74:e2:7e:3e:e5:0b:be:16:ae:e6:29:10:5a:98:51:ce:
         52:03:e4:03:ff:d8:6c:c0:b1:56:33:a7:79:a7:5c:f9:86:ca:
         b6:a1:74:a1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMTA1MjUw
MjQzMDdaFw0yMjA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFERkY1M0RENjJDQkI1
NjQ2MDBENjUwQkU0M0QyOEMzMzg0QzI2M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDM417FXUwsKs2Ave+2hjBhaxZYryrTfHScHAHM3PQJjypU8UOq
lYU4EvqattJJky808Fx7N0KKlwxPLTE9Std0weORLf4KR8ZP5fEKOU8OHDN+foky
5m4ZfDEFKUsU2XrNonQzFM+p9v7DGOE6veCZMmTl9W3/n54Lchi7NpnflWtiUYcM
X5JlpB4OLHzgn+yZDseq3eWUeH1LPlVKvL+AHATeR7mL9ELFFMymWQfydj0gBZ+7
cse9z/2AgxdXINMlZGy1CDVnELqccqYYH8VKCRqlfV8A5CXwEcPV128qn4ZI5aR+
fTAY028+LCTwiSQlEnN1mu/T2SMV5Mk7q+3/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUHf9T3WLLtWRgDWUL5D0owzhMJj0wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L0hmOVQzV0xMdFdSZ0RXVUw1RDBvd3poTUpqMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPclGAwDQYJKoZIhvcNAQELBQADggEB
ACDu498o8IrVNhb/6GdchtKq5hvbTZfHVE3NHppQyssPlhnkGiwVqDfGbCYGHxGC
nTxC8fqyfFFtWB64JGUjctm69PKXs//qKiX0jrr6OCa+hi2LrtBSxjb8TA/4Iw42
EmFezmW1ekYf4377nyVXukGcZDEDAcnGkKPKwNKENWTmY6HjaVNSkOWZa8Pm5R6b
ee0U9uRdOEqBh3CDJnp3BiYcNpMXYoNv/L6Hhj+9h19Yk1mpvWM36mcQo/nGAtlG
+qSyCS5nOa4xye7xS38W3ykNNygaspFoZyStdOJ+PuULvhau5ikQWphRzlID5AP/
2GzAsVYzp3mnXPmGyrahdKE=
-----END CERTIFICATE-----