Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/YBexN_mCz_LOKHtDcsnHdt5LX7c.roa
File:                     YBexN_mCz_LOKHtDcsnHdt5LX7c.roa (raw, json)
Hash identifier:          oe+DeUP71YyMp4glyXItH8wSnjMD16oyJ1h8thopjrE=
Subject key identifier:   60:17:B1:37:F9:82:CF:F2:CE:28:7B:43:72:C9:C7:76:DE:4B:5F:B7
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0333
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YBexN_mCz_LOKHtDcsnHdt5LX7c.roa
Signing time:             Tue 25 May 2021 02:42:55 +0000
ROA not before:           Tue 25 May 2021 02:42:55 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        112.139.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:55 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=6017B137F982CFF2CE287B4372C9C776DE4B5FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c8:f6:b6:39:95:07:24:1b:61:21:68:ed:f3:
                    ff:43:16:63:63:e2:f4:bd:d0:bc:11:c3:a2:21:6a:
                    f7:a7:28:4d:86:51:ab:55:04:af:7d:74:57:6b:dc:
                    0c:c9:a8:16:fd:b0:24:98:4f:7e:08:c4:d3:3a:56:
                    38:23:2a:33:fc:e2:4e:5c:70:86:ae:11:b3:6f:99:
                    23:08:97:58:7e:26:4b:da:c4:67:56:3f:e6:e1:dc:
                    d9:a1:4e:c1:3c:cb:79:c4:41:58:34:76:83:ae:38:
                    59:fe:57:d1:a2:5c:d0:9f:41:a9:d9:3e:2e:8b:bc:
                    c0:26:11:4d:cc:5e:97:66:0d:59:91:02:cb:13:69:
                    a9:a4:7f:5c:f3:6b:28:0b:8d:75:c4:a3:a6:01:34:
                    ed:5c:76:55:47:73:f9:84:93:45:d5:cc:8c:0a:17:
                    f7:9e:86:09:72:ec:4b:32:c2:c0:47:4c:66:04:db:
                    d8:4e:ba:e4:64:8e:0b:ae:3c:0c:aa:fc:e6:00:1a:
                    c4:5a:a5:67:6b:67:49:83:76:b5:dd:ea:53:86:d2:
                    26:0a:48:de:27:38:a7:88:13:9d:4a:42:9e:79:93:
                    11:52:cb:67:c0:18:c6:9d:99:09:98:44:a9:32:87:
                    29:45:e8:83:9d:29:4e:3b:b6:05:bc:81:2f:16:69:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:17:B1:37:F9:82:CF:F2:CE:28:7B:43:72:C9:C7:76:DE:4B:5F:B7
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YBexN_mCz_LOKHtDcsnHdt5LX7c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.139.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         31:d3:71:cb:9f:8b:14:62:32:fd:51:46:e5:c6:c2:db:d4:5e:
         d2:23:ca:65:44:4d:bf:89:49:64:4a:9f:04:75:e6:1e:8f:00:
         6e:51:ba:ff:bc:35:ac:3c:21:e8:5c:bc:67:83:0a:42:df:75:
         46:d7:f7:db:2f:de:35:86:34:f2:09:93:36:5d:41:a4:5e:4a:
         b3:1c:69:c9:b2:e6:c2:7d:d6:6c:0a:e5:b6:46:c3:42:7e:ad:
         9e:e0:84:1f:e9:20:91:59:45:1c:c6:b9:20:ba:c4:be:d5:5e:
         7d:aa:b4:9f:4f:bb:e3:63:83:94:27:83:f7:f1:65:6f:0f:f0:
         9f:b0:c3:18:fd:05:2c:91:d6:52:6c:6e:34:23:8e:cf:fb:89:
         3d:32:07:f4:bf:43:d2:b5:cb:b0:f1:d2:71:4d:3a:74:d8:db:
         f3:ee:1b:4f:1a:fd:b7:a0:3c:32:d5:09:3d:cf:5d:44:43:75:
         ab:0a:f3:01:b5:b3:56:f2:a8:df:9e:8e:dd:06:02:c5:d7:6b:
         67:ec:e1:56:d0:ca:00:26:81:da:86:6f:d7:61:04:37:ef:70:
         2b:51:07:e6:98:9d:9c:c0:e2:f8:70:11:ba:cc:31:d9:21:d3:
         df:81:67:3d:0c:ed:01:e0:9d:d5:73:2e:ca:89:69:a2:c6:f9:
         e0:56:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----