Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/0t2inJt8-JO_W9Q8CpXoRSvPUJw.roa
File:                     0t2inJt8-JO_W9Q8CpXoRSvPUJw.roa (raw, json)
Hash identifier:          Wyr+5as0VE0b6PSfIUpIzda+yrKOZ/johRu7dtbb5xU=
Subject key identifier:   D2:DD:A2:9C:9B:7C:F8:93:BF:5B:D4:3C:0A:95:E8:45:2B:CF:50:9C
Certificate issuer:       /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Certificate serial:       11
Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/0t2inJt8-JO_W9Q8CpXoRSvPUJw.roa
Signing time:             Sat 20 Feb 2021 08:03:56 +0000
ROA not before:           Sat 20 Feb 2021 08:03:56 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     9621
IP address blocks:        157.120.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
        Validity
            Not Before: Feb 20 08:03:56 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=D2DDA29C9B7CF893BF5BD43C0A95E8452BCF509C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b1:e1:75:ae:4b:35:25:c0:61:fe:af:8f:72:
                    b5:f1:bd:94:6d:2b:e0:c3:91:1a:25:47:c2:3d:67:
                    63:4b:ed:0c:7d:1a:a0:81:81:ed:65:27:9f:48:de:
                    ea:89:94:c5:f4:43:a0:09:3e:05:27:5d:43:45:72:
                    6c:8c:5c:93:53:77:13:db:4f:fe:eb:9f:7a:13:19:
                    49:15:fb:8f:6e:8b:52:b4:c8:69:73:4d:76:78:d4:
                    bc:85:26:49:5e:77:d7:4a:ed:73:b0:3b:59:fb:47:
                    e6:fd:25:80:9b:d0:c7:48:dd:fd:cc:3d:97:d5:5f:
                    8e:c6:97:72:26:3d:c0:d7:38:82:fd:55:b8:b2:ba:
                    5c:67:38:e9:51:b5:67:f7:8c:87:0d:62:8f:81:2f:
                    bc:11:60:e7:67:f1:78:fa:a8:bd:5d:b8:6d:5f:6f:
                    f1:f7:2c:2f:91:ac:c2:f6:c8:ca:e1:4a:e6:bf:af:
                    1e:5e:b0:93:75:1d:ea:0d:9a:61:eb:43:d8:bb:36:
                    6b:c1:60:ab:84:33:a2:58:1e:73:42:a4:bb:4a:20:
                    c1:44:d6:ad:97:f2:dc:6c:7d:19:97:bb:e5:8f:c8:
                    7c:52:4a:cc:58:ed:8c:31:a3:18:77:f6:a7:4a:7b:
                    39:37:fd:10:6f:07:a4:42:1a:10:31:9d:b0:5c:e9:
                    7b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DD:A2:9C:9B:7C:F8:93:BF:5B:D4:3C:0A:95:E8:45:2B:CF:50:9C
            X509v3 Authority Key Identifier:
                keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/0t2inJt8-JO_W9Q8CpXoRSvPUJw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:e9:9e:e3:86:cf:ab:1c:ff:2d:ec:77:f6:c5:8d:51:07:6d:
         61:7b:98:99:35:c7:c3:b5:d1:51:f6:30:d7:09:84:84:23:29:
         57:71:98:ed:1d:7c:b2:47:11:69:75:66:39:8f:36:85:6c:29:
         99:42:0a:77:88:fd:34:5d:2e:9c:ae:56:89:98:49:2c:de:16:
         66:05:16:5f:af:d3:79:2f:f2:6a:9a:80:09:59:fd:d8:4b:89:
         b9:f8:86:33:59:73:aa:3b:2e:6c:52:3e:32:12:5e:02:08:e8:
         6d:c2:b5:3a:5d:2a:a6:2f:d0:69:bc:cc:3a:31:3d:11:84:58:
         3b:93:f4:8c:b3:84:2c:b4:e5:5a:08:ef:4b:e8:98:1a:06:30:
         3a:81:88:64:21:38:83:62:25:d9:63:d1:8e:32:45:77:a4:7d:
         b3:e0:22:fd:45:df:ca:98:2d:1e:b7:2e:f8:18:93:f2:ba:4a:
         2a:03:81:ce:b7:03:29:11:68:9e:c8:8f:d7:24:35:5d:ed:67:
         fb:2a:70:98:46:14:1b:a4:ad:4e:c4:33:97:c1:d7:6e:62:65:
         16:14:47:32:80:de:8e:e4:2d:54:5e:f4:78:87:cd:5b:51:b2:
         34:ef:d9:b4:f7:cf:2f:25:00:19:68:0a:d3:2f:73:9d:e5:de:
         85:70:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----