Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/eiRD1zwK6HICFVe8AtTWPaW3UG0.roa
File:                     eiRD1zwK6HICFVe8AtTWPaW3UG0.roa (raw, json)
Hash identifier:          THSb9TYQX8tC/AAUcJ2Y/zelFhz7Cj6SY3zgcptZXMk=
Subject key identifier:   7A:24:43:D7:3C:0A:E8:72:02:15:57:BC:02:D4:D6:3D:A5:B7:50:6D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       031C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eiRD1zwK6HICFVe8AtTWPaW3UG0.roa
Signing time:             Tue 25 May 2021 02:42:49 +0000
ROA not before:           Tue 25 May 2021 02:42:49 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        219.96.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:49 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=7A2443D73C0AE872021557BC02D4D63DA5B7506D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:b2:9f:16:c9:64:91:73:10:48:3c:23:96:
                    81:f3:59:be:88:1e:b5:61:d4:20:06:74:1c:73:cf:
                    8e:6e:cf:f1:98:ad:c8:96:ad:aa:ae:d7:27:70:be:
                    6f:73:53:4d:64:76:07:b3:68:a5:9e:ff:3f:79:86:
                    71:da:8a:f5:16:3a:82:0f:2b:31:f6:7e:f8:85:89:
                    6d:a9:00:31:12:ab:9d:f6:1b:35:14:62:f0:5f:6d:
                    7d:2f:7f:62:da:66:16:2f:20:92:91:15:db:b8:ae:
                    d4:25:cb:12:b4:f3:83:7f:0f:a0:8d:8c:92:c2:58:
                    66:6d:d8:f4:c3:0f:75:55:10:75:a1:c0:9c:0b:ae:
                    35:e1:b1:7f:6f:d0:4b:83:11:48:6e:7c:a4:f6:c6:
                    c4:60:03:3b:04:eb:87:da:b3:e2:c4:55:d6:5e:48:
                    5d:6f:6d:dd:30:b0:09:ec:a7:ff:0d:a7:85:a8:cb:
                    3e:bd:6a:25:85:c3:ef:e2:db:ab:0a:19:68:df:3f:
                    05:2b:93:b3:e6:4e:2c:59:39:56:dc:65:d9:7d:f1:
                    82:6b:97:92:8a:38:2a:9d:c7:93:de:8c:21:69:8d:
                    ac:e8:3a:eb:9f:19:a9:52:ad:d3:58:8b:f3:94:ec:
                    fc:58:a5:14:45:d8:56:2f:8d:c3:7d:db:38:1c:2a:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:24:43:D7:3C:0A:E8:72:02:15:57:BC:02:D4:D6:3D:A5:B7:50:6D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eiRD1zwK6HICFVe8AtTWPaW3UG0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:5f:d9:6d:82:13:9c:37:9f:54:bf:ab:37:30:c3:cc:b8:f9:
         be:fe:f9:50:24:f9:2b:33:a2:2d:86:7a:48:c5:23:07:2d:c8:
         ac:0c:77:19:3a:05:38:69:49:bf:4a:bc:91:43:5f:05:48:e6:
         09:17:20:ea:18:a5:db:d5:28:36:22:36:56:33:ec:3d:45:b7:
         25:95:45:a3:d1:2e:23:aa:92:cb:1a:3c:92:f5:37:5d:05:c8:
         95:ab:94:2c:46:4d:57:68:d0:9f:4b:74:8c:4a:a7:53:09:be:
         a3:72:44:f5:f9:33:ea:8b:6c:47:fe:e0:e0:97:9f:76:f3:76:
         32:84:b6:7c:1f:f7:86:1a:44:46:7b:81:10:7e:81:97:f0:e2:
         cf:60:14:81:5a:a6:01:0e:1b:9b:03:ca:0c:15:1a:bb:2b:12:
         cf:31:99:11:bf:58:b4:f9:99:76:58:27:66:6e:da:1f:55:86:
         40:29:35:27:ef:30:ad:0f:67:4f:a3:e6:57:96:08:39:4e:1f:
         2e:c8:ba:62:70:c2:44:dd:ab:12:18:ae:36:93:b2:90:68:e3:
         df:fc:e6:2c:32:07:eb:84:57:29:10:8b:8a:f0:43:7e:a7:52:
         d1:2b:df:3e:c0:b0:88:1c:45:73:b8:de:eb:3b:f9:61:f2:1c:
         a6:1b:b9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----