Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/S-GQqfTohriYLRvgvnC8RT73cDs.roa
File:                     S-GQqfTohriYLRvgvnC8RT73cDs.roa (raw, json)
Hash identifier:          +GmUhJ1YhJwtFQI1hVq8KhAr58sl+Me2FvyULTh/roI=
Subject key identifier:   4B:E1:90:A9:F4:E8:86:B8:98:2D:1B:E0:BE:70:BC:45:3E:F7:70:3B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02F0
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/S-GQqfTohriYLRvgvnC8RT73cDs.roa
Signing time:             Tue 25 May 2021 02:41:55 +0000
ROA not before:           Tue 25 May 2021 02:41:55 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        120.136.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:55 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=4BE190A9F4E886B8982D1BE0BE70BC453EF7703B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:f8:d6:8f:c8:77:f5:84:85:23:03:e2:52:
                    eb:09:4d:6d:6b:6f:30:d4:fa:75:e3:9e:a6:01:9a:
                    e5:e7:94:16:2c:b7:fb:0e:af:c6:8d:94:c7:e9:d2:
                    9e:20:e4:65:95:28:fa:52:8e:2f:55:4d:e1:84:62:
                    d6:97:23:8b:26:1d:17:64:77:8e:06:dc:79:07:45:
                    e7:be:95:6f:2e:23:e3:e1:4b:6b:e9:a2:d1:dc:fd:
                    24:7d:bc:93:dc:0c:22:09:0d:17:b5:62:d3:85:af:
                    75:cd:b1:37:65:2e:08:f1:5f:4d:73:12:0b:c7:6c:
                    31:d1:0e:61:55:67:51:0b:56:b1:f6:fe:d0:12:13:
                    47:46:53:ab:46:5a:e2:8c:b2:4e:c2:d3:61:c8:61:
                    43:ce:d1:ce:58:2f:85:0d:74:6e:a5:96:79:14:8d:
                    e0:ce:01:96:29:5e:ef:25:f2:8e:6d:c5:e2:cb:3a:
                    b0:ad:1d:89:a1:d6:bd:53:fa:1c:e0:5b:22:f0:e7:
                    4e:b4:83:c2:f6:57:64:b3:c3:d3:16:97:35:c3:d2:
                    4c:e6:29:b0:14:0e:52:98:05:1d:61:d0:a1:62:51:
                    d7:17:9e:c4:ab:31:f6:69:c6:fb:a6:ce:13:19:4f:
                    81:e6:83:3f:f7:f8:7a:f7:1b:fa:b2:43:54:bc:c3:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E1:90:A9:F4:E8:86:B8:98:2D:1B:E0:BE:70:BC:45:3E:F7:70:3B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/S-GQqfTohriYLRvgvnC8RT73cDs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.136.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a3:53:ad:73:58:cb:b8:f2:f2:e6:d3:1c:0d:3c:3a:36:b2:50:
         c8:f7:6d:60:db:04:b8:d6:e4:cd:e5:ef:5b:62:7e:46:15:f1:
         21:b3:ce:f7:a3:e3:7d:2e:e9:b7:59:1f:c8:a8:c1:c6:c2:c3:
         00:52:24:f7:45:d8:b4:5d:65:02:e3:d8:0b:98:d2:8a:71:f4:
         f4:56:81:27:71:56:86:c4:61:91:c8:e5:53:aa:ac:18:90:8e:
         e7:8e:49:4d:58:8d:e1:5c:c9:11:d2:4a:e1:83:53:8f:ec:76:
         88:04:24:1c:fe:39:76:a9:52:65:d7:d5:1a:ae:05:5f:d3:bc:
         97:47:22:bf:83:15:1b:e8:89:ed:a0:0b:35:01:e3:d9:b3:1b:
         96:09:96:28:1e:ea:9f:d2:bc:99:47:f0:37:bd:04:87:31:b8:
         f1:91:91:bc:75:9e:48:19:93:74:f0:9e:29:0b:23:db:83:46:
         50:ad:ec:98:0e:40:0c:43:5f:09:32:0c:6b:25:4a:be:dd:a7:
         dc:8c:db:e3:1d:b0:8c:16:d5:f9:dd:4a:fc:9a:a1:5d:ce:1e:
         36:77:a4:9f:f0:bd:cc:4b:d7:64:e8:ba:1f:64:67:e2:d9:c2:
         1f:76:b0:33:af:2e:27:d2:7f:3a:74:18:2b:af:53:04:de:15:
         d7:a4:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----