Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/9r_94kqviwTglYi0EjmrPNKv918.roa
File:                     9r_94kqviwTglYi0EjmrPNKv918.roa (raw, json)
Hash identifier:          wHUSqm8n7vkueQU49P1+b/ZRGTnLICELi/Hy732nXkM=
Subject key identifier:   F6:BF:FD:E2:4A:AF:8B:04:E0:95:88:B4:12:39:AB:3C:D2:AF:F7:5F
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       19
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/9r_94kqviwTglYi0EjmrPNKv918.roa
Signing time:             Wed 18 Aug 2021 07:54:16 +0000
ROA not before:           Wed 18 Aug 2021 07:54:16 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     17675
IP address blocks:        210.193.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Aug 18 07:54:16 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=F6BFFDE24AAF8B04E09588B41239AB3CD2AFF75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7a:03:e9:ac:9f:3a:d4:6e:c5:87:7b:0b:ce:
                    81:49:e4:8c:04:4b:90:3b:79:a0:b6:a1:d1:5d:e3:
                    2d:83:d4:9c:91:bc:45:d8:ba:33:4b:bf:5c:0d:39:
                    59:89:02:78:69:a2:51:f9:a9:b4:d3:0a:12:d8:6a:
                    22:8f:40:af:72:f1:89:cf:bb:36:8a:ba:6a:75:fe:
                    03:f3:6c:ca:8d:a5:d1:40:ad:db:c3:3f:af:50:d6:
                    45:59:06:40:12:77:8d:d2:91:97:9e:e8:52:ec:09:
                    07:2e:29:be:6a:6b:2d:e9:0e:f5:4f:e1:48:4b:06:
                    15:8b:2e:39:d7:c8:9f:a2:0a:5f:8d:e1:61:8b:56:
                    41:4d:ec:75:ff:00:d5:7f:94:da:ab:df:a1:1f:65:
                    8c:31:2f:83:16:74:bc:4a:df:f6:b8:42:f1:e4:29:
                    0e:bf:5d:df:f0:c4:7a:ed:0d:04:7b:28:e8:ac:0a:
                    7b:86:70:b0:20:58:0f:7f:22:00:a5:17:f9:41:b1:
                    50:5c:8c:b7:eb:b2:ca:5e:d5:4e:af:e1:23:be:54:
                    c7:d0:34:7e:b4:52:6f:d1:79:3d:f1:1c:9e:8b:05:
                    ef:24:8f:22:ce:47:17:07:3c:10:58:b5:ee:5f:6f:
                    a6:2f:66:68:3c:ba:e0:83:70:70:01:b8:13:7b:a3:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BF:FD:E2:4A:AF:8B:04:E0:95:88:B4:12:39:AB:3C:D2:AF:F7:5F
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/9r_94kqviwTglYi0EjmrPNKv918.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ce:e1:25:3b:85:70:85:ed:3b:ac:75:f2:21:4e:b7:6a:98:0b:
         df:b7:0b:72:79:ac:bf:74:de:93:42:82:d3:7b:a3:a5:33:ce:
         2e:6c:eb:99:2f:b7:12:00:34:82:e6:db:31:e6:de:03:70:65:
         eb:74:03:f1:a3:2c:00:19:26:83:a2:27:98:cb:aa:31:2f:4f:
         64:3e:a2:20:af:91:87:f6:6b:ac:e6:c8:2a:4f:7e:eb:6a:01:
         87:0d:aa:65:a6:53:cc:89:92:18:a7:0c:20:8d:a5:16:e7:09:
         82:c6:f4:e2:87:be:9a:de:14:0c:80:cb:e1:3a:63:b4:21:52:
         d3:21:22:50:e7:87:81:ab:f3:d9:cb:7d:81:f5:12:69:21:5a:
         90:c3:ec:57:b7:0c:43:8a:1e:30:c0:5b:93:a6:30:f3:58:69:
         7d:ff:75:e8:0d:75:4f:9f:66:36:e3:b7:7d:47:6d:16:de:6b:
         c2:68:50:b1:13:fb:74:0f:d3:a3:f5:4e:a1:33:97:83:4c:17:
         70:d6:12:ef:e2:3e:4e:ac:97:db:f2:1c:f4:a2:1b:b0:61:26:
         76:6a:00:da:16:76:c9:59:e6:72:09:29:9f:0e:35:c2:38:d2:
         8d:d1:7e:e8:e5:a5:5a:8c:fa:51:3c:22:72:70:fc:de:2c:79:
         19:32:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----