Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ntvbdnDzv1sWdau5mQzIrgJ6yYU.roa
File:                     ntvbdnDzv1sWdau5mQzIrgJ6yYU.roa (raw, json)
Hash identifier:          XSQAAWnNnr2aPfdTLVvldhGOCrXs4jyVTHPtWc//PmI=
Subject key identifier:   9E:DB:DB:76:70:F3:BF:5B:16:75:AB:B9:99:0C:C8:AE:02:7A:C9:85
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       033A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ntvbdnDzv1sWdau5mQzIrgJ6yYU.roa
Signing time:             Tue 25 May 2021 02:42:58 +0000
ROA not before:           Tue 25 May 2021 02:42:58 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        42.126.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826 (0x33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:58 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=9EDBDB7670F3BF5B1675ABB9990CC8AE027AC985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:2a:25:8e:66:82:26:f1:08:78:ce:80:e5:
                    25:fd:16:99:64:88:1e:0e:6a:cf:6b:d0:a4:25:95:
                    98:ee:69:e0:a8:17:0b:b9:d5:a5:b0:7e:93:0e:b3:
                    a0:45:18:51:51:d8:1b:83:86:84:c0:57:5c:9f:7d:
                    60:95:54:91:18:1e:0f:b3:47:08:f8:b3:e5:47:5f:
                    6e:b0:f7:db:b9:63:4c:e4:28:2f:f6:35:75:e3:b8:
                    12:d7:a3:75:ea:eb:33:9a:ad:79:21:4a:54:ef:a2:
                    73:44:d7:56:cc:8a:0f:52:5b:24:e6:15:8d:96:43:
                    f5:5f:13:e8:71:83:14:3b:38:a7:38:bc:0f:a0:8e:
                    e1:1d:22:4f:bc:78:37:8e:a8:7f:43:c7:a5:30:ed:
                    a7:a0:39:5e:9e:36:32:05:3a:38:04:09:69:eb:fe:
                    df:67:47:b4:e8:33:f6:3b:7a:4a:65:04:f6:ad:78:
                    43:1a:ea:fc:7b:01:1c:93:f7:df:53:32:a5:d6:6a:
                    03:8c:40:4d:01:fc:2d:a2:9d:e1:2f:4c:25:84:3a:
                    df:8b:9a:1c:64:a3:9c:f3:4b:59:13:82:8c:f3:c2:
                    de:21:db:e4:a7:64:3c:ee:e4:6a:24:46:5a:3a:22:
                    67:d6:a7:e9:bc:8c:8a:5e:9f:57:32:a1:8d:1e:57:
                    4a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DB:DB:76:70:F3:BF:5B:16:75:AB:B9:99:0C:C8:AE:02:7A:C9:85
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ntvbdnDzv1sWdau5mQzIrgJ6yYU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.126.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:66:51:97:00:d9:9a:56:41:30:2d:21:4f:a4:e3:73:26:
         3d:80:c9:17:d0:9b:aa:0b:52:c9:f0:48:3a:45:9d:56:f8:7e:
         22:bf:19:af:0b:0e:30:ea:c3:82:29:c3:a8:29:b0:c7:2c:11:
         ec:de:2d:5d:4e:cb:09:bd:cd:98:d9:29:04:58:9f:e1:bf:fe:
         be:38:be:bb:1a:e0:8d:61:db:c8:31:a7:50:7e:03:1b:dd:79:
         2e:dc:af:37:f2:49:35:78:eb:78:50:82:e4:21:4c:ff:ed:95:
         dd:38:18:ec:46:ac:ef:58:64:19:40:2c:2a:a6:59:3d:ce:46:
         db:7c:bb:e3:1c:f2:26:73:15:72:b2:c7:bd:67:c1:f4:7e:34:
         33:2b:99:b6:c3:af:9c:60:1e:cd:12:30:37:3d:ca:a1:1f:1e:
         78:cb:ff:92:c2:1f:44:94:d5:5b:e6:59:a8:58:44:35:07:e2:
         9f:1f:a7:5e:62:e5:1e:da:7d:7a:f8:25:e5:bc:d2:00:23:ff:
         7f:66:2e:ef:59:ae:53:65:8d:36:55:73:0b:ba:ee:3e:5b:69:
         f7:cb:b8:5c:40:3a:fd:fe:8d:41:56:d0:43:f6:7a:45:3c:35:
         6e:8b:62:d8:03:b2:90:42:76:75:c5:70:c7:4b:ca:d6:44:1e:
         df:dd:68:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----