Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Ndn6X-Z_-B72uaokrycJt464ykc.roa
File:                     Ndn6X-Z_-B72uaokrycJt464ykc.roa (raw, json)
Hash identifier:          Qr+oyFbW4M3tm7Hs3aG3kI4NdRFm5pXY6MrGPSdKNPo=
Subject key identifier:   35:D9:FA:5F:E6:7F:F8:1E:F6:B9:AA:24:AF:27:09:B7:8E:B8:CA:47
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       030E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Ndn6X-Z_-B72uaokrycJt464ykc.roa
Signing time:             Tue 25 May 2021 02:42:03 +0000
ROA not before:           Tue 25 May 2021 02:42:03 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        59.85.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:03 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=35D9FA5FE67FF81EF6B9AA24AF2709B78EB8CA47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ca:2a:97:b0:cf:a2:a7:df:d6:d4:5f:b5:01:
                    5c:b4:e6:ef:0a:60:21:42:52:a2:ab:1e:fb:be:63:
                    13:d0:b3:c8:b1:3a:1a:6c:96:aa:44:2b:c5:7d:db:
                    22:8a:dc:ba:7c:1c:66:cd:a2:90:f5:62:08:b5:e8:
                    e2:34:21:31:26:d6:8e:15:c6:62:54:8f:5c:69:8c:
                    73:1b:6a:21:94:9f:b6:cd:28:9e:68:a2:e1:e6:8d:
                    7a:2c:8b:9d:f0:bf:92:c7:e9:2d:a6:66:7e:67:72:
                    89:79:16:5f:66:49:34:0a:27:f3:ae:a9:bb:ed:70:
                    c2:53:ef:b6:21:db:8e:35:00:7d:9a:08:d8:0e:2b:
                    d6:b6:65:8c:4f:4c:d4:75:fc:6c:75:79:42:2b:a1:
                    19:33:70:c8:eb:f9:03:1d:f7:f6:97:96:af:71:49:
                    7e:ee:bf:69:f4:c0:4b:c9:18:7f:8c:28:e6:cb:46:
                    63:c3:7b:12:be:cb:2b:c4:7c:0d:92:43:6a:85:c2:
                    54:60:1e:2e:f3:dc:63:9b:f7:30:09:25:e5:76:7d:
                    3a:4b:05:92:c4:aa:a4:e5:f5:60:1f:e8:43:6d:49:
                    84:bd:fa:34:af:3b:c8:2d:d9:c1:83:88:31:26:c3:
                    6e:f0:4b:4e:42:ac:48:7f:70:06:48:c2:21:5a:59:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D9:FA:5F:E6:7F:F8:1E:F6:B9:AA:24:AF:27:09:B7:8E:B8:CA:47
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Ndn6X-Z_-B72uaokrycJt464ykc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.85.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:4c:55:e8:38:c8:eb:79:83:ad:e3:05:ea:c2:f8:9f:04:f2:
         bf:36:72:ae:8c:d4:2f:ec:cc:cb:b5:df:f9:13:0b:ba:bc:85:
         12:90:d3:ef:eb:67:5c:2c:27:24:3d:5e:59:a7:bf:e6:ba:c5:
         5b:86:48:45:a3:f8:7d:81:dd:99:f7:96:77:92:c8:f8:03:4a:
         e1:dc:23:40:0d:ab:bf:56:9a:ce:7e:86:d4:c5:6a:31:59:6b:
         4b:c2:9b:9d:dc:0f:b1:aa:3a:be:3f:73:75:82:0e:4c:8d:3a:
         ee:8a:02:de:e5:9a:12:50:b1:a4:05:94:8f:e9:e4:28:d6:be:
         ee:3c:61:fe:87:33:5c:e3:a8:bd:44:ea:f2:85:59:36:70:d5:
         da:90:17:d5:7a:63:52:a1:dc:0b:1d:e0:e5:1e:8d:39:ba:47:
         94:6d:df:b2:2e:ec:2f:60:4f:0c:86:c1:55:b6:7c:9e:0b:9f:
         f7:88:e9:9a:fa:8e:2b:7e:3b:17:cb:25:a7:4a:80:7f:9e:8a:
         50:b7:e4:b2:fc:40:9b:92:f1:eb:92:ed:18:f5:71:5b:5f:ae:
         0d:1d:cb:91:7e:62:1b:7d:7b:73:2e:fe:5e:1c:1e:2a:ae:ee:
         17:ca:2c:52:58:c0:2f:85:46:1e:97:a8:3c:7b:eb:1d:5a:4b:
         4f:23:bb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----