Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/m7voHIQFKf_kj6icKwNntHm7piA.roa
File:                     m7voHIQFKf_kj6icKwNntHm7piA.roa (raw, json)
Hash identifier:          BpNa3DUHRtbpy4bTsixYO/HoKZuDLVOuShwcqiW9YEs=
Subject key identifier:   9B:BB:E8:1C:84:05:29:FF:E4:8F:A8:9C:2B:03:67:B4:79:BB:A6:20
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02F7
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/m7voHIQFKf_kj6icKwNntHm7piA.roa
Signing time:             Tue 25 May 2021 02:41:58 +0000
ROA not before:           Tue 25 May 2021 02:41:58 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        59.86.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759 (0x2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:58 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=9BBBE81C840529FFE48FA89C2B0367B479BBA620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ad:95:f7:8f:a0:61:c9:af:86:cf:2f:fe:6f:
                    b9:ad:d1:3f:2e:14:af:49:29:dd:8b:e4:eb:b4:c4:
                    f5:14:3e:81:a8:27:69:68:fc:43:8e:cf:f0:a6:6e:
                    8f:8a:06:39:62:77:d7:08:87:49:60:cd:2a:60:ac:
                    ef:b5:77:1c:00:e8:87:65:a5:9b:96:b3:4c:64:c5:
                    7c:41:22:01:23:8b:2f:22:ba:59:1a:71:70:0e:12:
                    34:e0:c4:db:f6:19:ba:2b:84:0b:19:9e:61:50:6f:
                    b6:5c:9f:22:8f:9d:00:52:8f:2e:d9:d3:27:58:62:
                    e0:8a:66:de:b2:7c:68:e2:8f:3b:09:f5:93:b9:1d:
                    51:3d:4d:1f:2c:d7:63:64:60:61:11:02:55:97:ef:
                    87:73:d5:a1:94:2f:2e:99:35:41:74:32:6c:bf:a6:
                    ba:1d:69:7d:e2:4d:1e:17:9a:a4:a1:17:91:ad:b6:
                    99:ee:fb:aa:de:53:65:df:26:1f:bc:36:5f:4e:e2:
                    99:a1:6e:53:bd:a5:85:9f:d7:7b:c4:6a:19:ec:8b:
                    93:2f:ed:1a:f9:4b:46:cc:61:76:97:60:1c:7c:02:
                    cd:30:ab:82:e2:08:c6:6c:cd:9b:10:14:e1:4d:cf:
                    9a:cf:bb:a1:0d:c4:3b:cc:7e:88:42:73:56:93:a0:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BB:E8:1C:84:05:29:FF:E4:8F:A8:9C:2B:03:67:B4:79:BB:A6:20
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/m7voHIQFKf_kj6icKwNntHm7piA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:19:da:b3:e1:80:1d:91:07:03:53:21:e9:d8:0d:d2:bd:ec:
         d4:75:1c:f7:a0:85:1a:83:62:4c:48:db:e0:d9:cb:7d:92:88:
         b6:eb:4d:6e:59:63:3f:44:11:39:43:35:e6:18:1e:e8:5e:23:
         7a:2e:35:63:b8:d4:85:f0:61:60:f0:6d:af:8b:9d:13:99:19:
         8b:5a:51:53:14:a7:2a:33:5b:08:f1:61:aa:0f:3d:ba:03:89:
         2d:aa:7b:6e:21:22:77:49:d5:87:82:ae:fe:17:04:5f:73:eb:
         12:0a:6d:dd:dd:6a:bb:dd:c9:25:b5:52:af:a3:4d:9b:c8:49:
         99:3b:9c:4e:9d:55:84:66:bf:4a:49:5f:8c:33:0d:0c:da:a7:
         a6:56:7f:33:22:c6:b3:73:69:1c:28:e0:b8:61:85:78:b3:24:
         11:62:74:ba:d1:0a:80:e4:2a:d8:9c:29:69:11:4e:c9:c0:f0:
         38:d7:01:62:d0:2f:d9:5b:1f:1a:99:b5:4f:e5:84:a6:28:b1:
         93:0e:3d:9f:7f:78:86:cc:0d:c2:ee:12:61:c7:f3:e2:1e:80:
         e0:b0:62:ea:22:a1:34:d0:88:94:49:b2:af:3d:cd:06:ce:4c:
         f2:aa:a2:c6:e7:cf:b0:1e:9f:ec:54:67:e5:bb:b5:eb:57:c4:
         b8:13:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----