Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/KP3jgZV0KLzqwiBMdvTrkn37N-8.roa
File:                     KP3jgZV0KLzqwiBMdvTrkn37N-8.roa (raw, json)
Hash identifier:          zcBf4VpXfQicbkS2eMZSqLpgwtJ1vowvvwj6yhPymlE=
Subject key identifier:   28:FD:E3:81:95:74:28:BC:EA:C2:20:4C:76:F4:EB:92:7D:FB:37:EF
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02F3
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/KP3jgZV0KLzqwiBMdvTrkn37N-8.roa
Signing time:             Tue 25 May 2021 02:41:56 +0000
ROA not before:           Tue 25 May 2021 02:41:56 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:56 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=28FDE381957428BCEAC2204C76F4EB927DFB37EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:44:1b:ed:22:5f:bd:93:50:80:c8:da:cd:
                    33:a5:57:20:7f:b3:58:59:ba:b1:ca:87:eb:6f:65:
                    61:e2:8e:15:39:99:cb:99:83:f2:6c:41:31:bc:8f:
                    01:80:13:01:68:fc:a8:84:2a:91:c3:bc:7e:4d:60:
                    f8:78:2f:22:db:54:f9:26:bb:40:c2:e4:e0:cb:d3:
                    14:65:de:7f:c3:26:dc:7d:d7:97:7a:8b:2e:5c:7e:
                    08:ac:e4:6b:28:1d:76:e0:74:9c:aa:cb:20:12:45:
                    54:ce:b4:2b:20:bd:66:0a:c6:1c:e7:99:d7:9b:5e:
                    41:0f:54:00:8e:c5:9b:16:95:34:96:9a:fc:cf:dc:
                    b7:44:af:a5:c4:91:04:f2:ab:83:af:40:5d:86:f6:
                    39:39:e1:c6:93:f3:5f:39:6c:a7:f3:c9:75:5e:2f:
                    58:b0:9e:b9:96:8e:b7:04:b2:81:8d:e3:7e:77:f9:
                    2f:62:d4:a5:c9:27:30:7b:1f:c1:4f:ec:3d:58:cc:
                    dc:a0:62:3e:28:d2:00:51:3d:de:38:82:6f:bb:3b:
                    5f:33:1e:d3:08:9b:0d:9b:e0:0e:9b:cf:99:c1:59:
                    aa:ab:fd:6f:13:ec:df:e2:3a:cb:2b:80:4c:08:72:
                    be:90:a4:ed:cb:05:88:76:d4:83:35:09:73:5a:23:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FD:E3:81:95:74:28:BC:EA:C2:20:4C:76:F4:EB:92:7D:FB:37:EF
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/KP3jgZV0KLzqwiBMdvTrkn37N-8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:aa:1f:27:67:9e:fe:a1:18:d6:e9:b7:bf:32:2a:93:88:1d:
         c4:36:93:1f:d1:34:71:ec:7a:89:ed:bf:3f:d6:58:ed:fe:8c:
         f3:54:95:f8:cd:0a:63:07:10:ab:35:6a:a6:de:22:32:a5:f7:
         a9:66:9b:60:4d:5e:47:ce:a9:72:73:21:69:1b:40:ea:08:eb:
         b1:a0:1f:3a:94:22:53:16:93:d7:92:b0:71:a3:fc:08:c4:cb:
         68:0a:7f:57:60:46:60:4f:40:a2:b0:9d:28:53:d7:c4:22:fb:
         3e:14:9f:14:e2:ff:ea:f9:d6:c5:e8:d8:79:cc:db:22:2b:f8:
         db:14:e8:91:eb:7a:a0:ab:6a:6d:3c:13:79:db:a4:4e:38:d6:
         69:0a:79:e0:86:34:26:1d:ee:8f:55:86:e2:50:94:c8:ca:b0:
         da:b1:e1:26:e5:eb:8a:51:d6:a8:8c:b1:1e:49:cc:c4:60:fb:
         52:b7:5d:7c:a7:70:2f:f9:99:d8:76:18:69:79:32:cb:41:2b:
         48:4b:45:19:47:d8:19:38:94:35:8c:5d:2a:22:72:7a:69:23:
         78:14:9d:02:43:cb:d0:4e:11:7e:a4:ed:d5:d5:d8:65:5b:c3:
         05:3b:f9:50:b5:68:78:db:6f:ad:9e:53:e2:0f:4e:3a:7a:dd:
         c5:11:e3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----