Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/l1joGPvyeEtT8c5gncBcFYwB9FI.roa
File:                     l1joGPvyeEtT8c5gncBcFYwB9FI.roa (raw, json)
Hash identifier:          fX/myodEQ7ogHQPL+mIbAppfQkekiU5z/fo4DM0bDtk=
Subject key identifier:   97:58:E8:18:FB:F2:78:4B:53:F1:CE:60:9D:C0:5C:15:8C:01:F4:52
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02E1
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/l1joGPvyeEtT8c5gncBcFYwB9FI.roa
Signing time:             Tue 25 May 2021 02:41:51 +0000
ROA not before:           Tue 25 May 2021 02:41:51 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.124.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:51 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=9758E818FBF2784B53F1CE609DC05C158C01F452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:7e:d7:51:1c:2a:40:36:b7:6c:39:c8:b1:
                    de:5d:e5:21:47:83:03:62:3a:83:7b:11:7a:17:f2:
                    9d:c0:35:3f:9a:68:7d:f2:b2:e7:77:8b:6d:0e:84:
                    b8:2a:f6:81:f1:c0:f5:60:93:9b:ab:87:14:30:6e:
                    29:75:f3:6e:02:1f:a6:d3:97:54:e9:e6:a8:f5:af:
                    d9:36:90:7d:f9:79:57:14:c0:3e:4b:24:03:da:4a:
                    55:4b:06:84:99:9d:43:71:a2:9b:1f:0d:fd:ff:5b:
                    56:31:95:23:70:08:30:57:93:e0:dd:78:25:9d:4d:
                    e8:5a:f2:33:b0:42:2c:7a:54:b9:71:94:5f:72:68:
                    1f:dc:df:85:d5:cd:1c:19:38:56:37:29:25:20:0d:
                    a3:a0:1f:10:39:fe:98:9c:de:5c:a0:58:d6:3b:39:
                    79:36:7b:3b:15:6b:8b:d4:1a:c8:b5:19:40:9f:c8:
                    b4:24:14:09:14:42:50:f3:d4:be:40:06:72:d0:0a:
                    6b:e3:b3:08:31:26:b6:0b:52:db:cc:7f:f8:cb:4a:
                    ac:e8:ee:fd:39:ea:21:b6:bc:c4:19:8b:99:73:0e:
                    16:3b:7a:ae:99:eb:9c:23:5b:2c:bd:ac:a7:ef:f2:
                    2e:dc:ed:40:d4:60:de:b6:47:e9:0b:84:74:a3:1e:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:58:E8:18:FB:F2:78:4B:53:F1:CE:60:9D:C0:5C:15:8C:01:F4:52
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/l1joGPvyeEtT8c5gncBcFYwB9FI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:1f:7c:eb:5a:b5:24:50:e3:8e:45:ea:bf:b8:c7:ae:6f:55:
         b6:43:1b:d7:80:a5:68:7f:87:0d:2d:8e:7c:2f:5f:0f:16:76:
         5c:f9:e5:95:68:89:79:5a:8e:3d:36:73:a3:3c:01:37:96:79:
         12:8a:6e:7a:f3:06:bc:25:71:b9:10:ce:0e:63:a8:27:cd:82:
         86:ce:af:05:f0:09:e1:fc:9c:c1:2b:cb:73:6d:04:4b:4d:b9:
         ac:d9:fc:d4:a4:00:66:be:80:98:5e:f3:fd:bd:85:08:ff:19:
         d9:4e:30:14:49:e2:fb:81:71:98:78:30:94:0e:1b:dd:4e:62:
         5d:b3:bb:39:be:14:18:6f:3f:66:5c:64:bf:91:90:a2:77:5e:
         b2:36:98:eb:a4:9a:2c:a6:e1:fd:30:26:da:50:c7:1d:46:bc:
         87:ba:b2:19:e8:60:ea:74:79:5e:12:aa:9a:ad:24:e3:97:a8:
         ca:7b:b2:fa:7b:e2:bd:15:b1:db:6c:20:78:b6:7b:d5:6a:df:
         5d:96:be:7e:77:71:c1:da:95:78:36:6a:7c:90:5b:3e:f2:e9:
         df:29:b6:a2:90:ee:ad:10:1c:84:a6:45:3d:21:34:06:4c:11:
         01:a9:26:81:ec:0e:bb:7b:3e:1f:89:56:8c:3f:cd:e5:1d:a9:
         ab:cc:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----