Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/TEDzMKIOMWWcjD6o8z1WutGP3f4.roa
File:                     TEDzMKIOMWWcjD6o8z1WutGP3f4.roa (raw, json)
Hash identifier:          H5lkYL+g/QtC5lxuROMjc0oGAVfFNe1gVWEiRrp+lv8=
Subject key identifier:   4C:40:F3:30:A2:0E:31:65:9C:8C:3E:A8:F3:3D:56:BA:D1:8F:DD:FE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0354
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TEDzMKIOMWWcjD6o8z1WutGP3f4.roa
Signing time:             Tue 25 May 2021 02:43:05 +0000
ROA not before:           Tue 25 May 2021 02:43:05 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        124.47.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:05 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=4C40F330A20E31659C8C3EA8F33D56BAD18FDDFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:8b:c4:96:57:ef:f7:e7:68:7b:fe:7a:f9:
                    1c:be:d6:3f:0a:21:ad:08:60:5e:db:61:2e:6f:cf:
                    9a:0d:3a:2d:77:18:1d:8b:36:d6:c3:1f:ac:7a:b5:
                    e0:8c:f7:e4:a6:c3:1d:90:00:21:69:6e:e5:0f:d1:
                    33:2e:4e:08:52:e0:1c:66:08:40:ab:2b:7e:49:67:
                    ac:f2:b2:b8:38:39:f5:31:5b:e3:b7:82:9c:00:b2:
                    e8:c6:9c:ba:24:00:f1:f2:47:9a:62:eb:d5:fa:3b:
                    51:4c:88:e3:2b:46:0d:84:06:a0:5e:e9:09:f2:88:
                    e0:74:c6:84:9f:bf:de:18:b0:4e:d8:c2:bf:0a:3b:
                    3f:f0:a4:b5:73:9a:9f:96:c5:fd:97:37:2a:8a:3c:
                    2a:0d:37:98:7f:bd:38:0a:7f:7e:72:ef:2c:8a:47:
                    5f:3e:d0:f4:e0:5e:55:93:78:df:50:91:83:de:25:
                    a3:f4:fd:eb:34:74:65:23:68:81:2a:ce:65:52:a6:
                    02:3f:33:f6:f6:dc:4e:47:31:7c:fb:e3:8e:3d:ca:
                    c6:9f:bd:13:cd:ae:63:49:d6:85:7f:ac:d0:17:06:
                    2a:ee:63:81:02:a3:13:44:f2:cf:77:a4:02:f5:27:
                    03:2b:7c:74:8c:67:b7:bf:09:ce:dd:4c:6c:c2:a6:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:40:F3:30:A2:0E:31:65:9C:8C:3E:A8:F3:3D:56:BA:D1:8F:DD:FE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TEDzMKIOMWWcjD6o8z1WutGP3f4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.47.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:de:73:42:08:e5:50:94:0c:c1:81:55:96:88:2e:33:5d:2b:
         39:10:04:64:eb:31:1f:3d:23:0c:04:09:0a:6c:34:3e:05:69:
         ae:b1:8d:79:e1:18:4e:a7:ad:cd:00:9f:eb:b7:9d:78:2b:6d:
         86:ae:c5:8e:f7:4f:bc:02:69:21:43:ab:37:50:90:a3:3f:2f:
         11:98:1f:0c:aa:54:f0:0f:46:63:dd:47:85:a1:93:f4:f1:c5:
         7a:ce:25:38:8c:cd:0c:fd:18:49:d4:f9:ab:8b:78:f0:e5:17:
         69:68:d1:c4:e2:bb:0b:d0:3e:fd:31:f5:78:55:d8:8d:23:60:
         d6:36:fb:99:ad:73:39:2c:15:35:4f:9a:d8:ef:7b:5d:aa:be:
         ab:c8:ff:5c:3b:08:35:6a:49:2b:f1:8e:d4:c2:b7:35:5d:37:
         6f:82:8e:f4:0b:78:ab:02:50:b9:73:08:be:9f:20:68:20:c6:
         a6:37:a1:6e:1c:a9:49:9a:97:9e:52:f9:58:71:08:21:0b:7a:
         b0:12:9d:ac:ca:2f:45:ff:8c:34:f1:cd:63:ca:6d:0e:f6:38:
         98:29:be:ed:de:70:b6:94:09:6d:4f:e5:de:2d:c4:ba:f2:05:
         7d:2a:9d:6c:d9:91:c9:1a:5e:49:5c:8e:65:fd:c9:0a:07:3c:
         a8:cf:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----