Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/R8kQ_Y4q4hUPx5B2KCT4siGylyE.roa
File:                     R8kQ_Y4q4hUPx5B2KCT4siGylyE.roa (raw, json)
Hash identifier:          zSpY4I/v65F/2Rv3uMcqMRq2FCHEEFnxIYyMxxY22u8=
Subject key identifier:   47:C9:10:FD:8E:2A:E2:15:0F:C7:90:76:28:24:F8:B2:21:B2:97:21
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       034C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/R8kQ_Y4q4hUPx5B2KCT4siGylyE.roa
Signing time:             Tue 25 May 2021 02:43:02 +0000
ROA not before:           Tue 25 May 2021 02:43:02 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        120.137.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:02 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=47C910FD8E2AE2150FC790762824F8B221B29721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:05:21:cc:bf:2e:f8:89:71:ed:0a:81:3c:
                    80:96:12:bf:20:14:61:f3:d0:d7:4e:ec:9c:9a:fd:
                    01:1a:9e:b5:5a:c5:d5:27:89:e6:64:a5:93:71:3d:
                    12:50:fc:03:aa:23:a3:44:ce:ba:04:79:07:fe:f0:
                    b8:eb:20:65:f9:09:6c:70:17:04:b4:4d:23:08:68:
                    e1:be:da:89:63:e3:27:c2:fa:82:23:31:b5:86:65:
                    d5:82:c3:cb:f2:fe:67:91:b5:64:f1:8e:eb:1e:40:
                    92:e1:99:de:f7:b6:b0:7c:8d:d2:ff:83:bb:de:a8:
                    56:69:ee:0e:08:d5:f3:49:98:a4:84:3f:e5:99:e4:
                    4a:66:96:63:6d:58:bd:58:4b:66:4c:3e:e9:29:15:
                    e7:ec:6b:94:d6:55:d8:fa:3c:ed:33:88:18:dc:fb:
                    96:74:1f:d7:18:d8:0a:18:fa:29:8a:15:e8:21:f5:
                    70:33:71:19:23:d3:88:56:6e:b8:04:89:26:cb:9e:
                    55:4e:c0:a1:1d:06:72:77:b2:2a:42:8d:d5:df:8d:
                    40:d0:d4:65:a6:33:94:e6:a6:99:10:96:cc:b7:87:
                    cb:78:db:5c:23:d3:30:69:ad:98:7d:f4:ca:41:e2:
                    68:8f:d5:95:80:44:d1:7b:80:07:29:d3:ae:3b:64:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C9:10:FD:8E:2A:E2:15:0F:C7:90:76:28:24:F8:B2:21:B2:97:21
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/R8kQ_Y4q4hUPx5B2KCT4siGylyE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.137.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8b:82:9d:f7:0b:ea:1e:f4:86:6d:07:30:46:a0:84:8f:1e:bc:
         5e:30:3c:03:a3:17:d3:2a:03:40:be:e4:1d:8f:81:64:4b:ff:
         6d:7c:ab:0d:00:b7:ea:22:5b:6d:e2:b2:76:ed:33:bf:10:54:
         38:56:c7:e5:40:6b:4a:01:ba:f3:97:b9:1a:f8:a3:05:9d:b9:
         9b:5c:d3:f8:de:17:35:9c:2a:31:6b:e3:84:81:01:1d:33:65:
         e5:2f:e0:7e:39:a9:1c:89:64:16:af:4f:2b:7a:9d:61:e3:57:
         9f:a4:e8:ff:e0:45:f6:5f:12:8b:9e:cd:ff:b4:98:55:39:ea:
         11:04:b3:82:88:fb:ee:a2:2b:a4:c6:aa:e6:72:fc:b9:06:81:
         de:7c:ad:d7:25:51:64:b4:d8:50:e5:57:12:ed:cb:0f:e8:2c:
         85:99:62:b5:fb:c9:05:42:6b:4f:08:4a:e1:04:f9:3e:63:05:
         47:81:64:31:e2:49:bd:50:66:e5:f4:f9:8c:68:2a:f2:ad:32:
         81:31:4e:7e:76:ef:1c:d5:9c:f1:3d:6c:56:7b:ba:8a:9f:3f:
         0b:69:2c:54:c2:a0:53:86:d7:46:46:51:99:36:6c:0a:2e:42:
         9d:96:9e:72:ed:3d:21:c9:30:60:d6:00:6a:c0:46:b9:15:f2:
         10:24:73:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----