Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/LxhsZEIRY1ivEYuElZ6U4ZG3n18.roa
File:                     LxhsZEIRY1ivEYuElZ6U4ZG3n18.roa (raw, json)
Hash identifier:          xI0rodszZOGlHCOBzlrVyWqioZAbv1G9q0eJby+woQI=
Subject key identifier:   2F:18:6C:64:42:11:63:58:AF:11:8B:84:95:9E:94:E1:91:B7:9F:5F
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       26
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/LxhsZEIRY1ivEYuElZ6U4ZG3n18.roa
Signing time:             Tue 25 May 2021 02:47:08 +0000
ROA not before:           Tue 25 May 2021 02:47:08 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     37892
IP address blocks:        124.247.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: May 25 02:47:08 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=2F186C6442116358AF118B84959E94E191B79F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:f7:48:08:0e:0b:50:f3:3a:18:59:73:da:
                    c1:b2:02:d5:fd:ac:3d:2a:f2:84:54:3c:bf:62:ba:
                    d0:42:fb:26:4b:9d:cc:42:cf:80:15:1c:66:b8:3c:
                    2a:a5:0c:2a:c8:db:d7:5f:1f:cf:ec:0e:fa:97:79:
                    74:a2:89:2d:fc:e7:73:35:68:82:af:e3:a4:e6:5d:
                    a8:58:af:15:d4:e7:8f:94:65:39:09:22:42:54:68:
                    5c:fa:46:2c:04:7a:96:cb:92:3d:d0:bf:d0:86:eb:
                    7a:22:2c:3a:93:56:27:d3:e2:ff:22:74:4b:c4:63:
                    9c:ff:b8:02:39:bb:45:e1:eb:32:f7:11:39:b6:71:
                    ae:3a:cf:64:45:2f:d2:10:62:7b:e3:29:28:57:90:
                    88:c5:b9:92:24:a9:d4:fd:f6:6a:df:8d:94:08:7f:
                    e6:ee:7e:31:e4:e4:ed:f9:ad:13:e2:3b:62:1e:15:
                    25:83:3a:c4:30:bd:46:7d:a0:bc:51:19:58:06:bb:
                    ca:b2:a5:67:b8:7b:fc:e2:05:73:8d:26:22:c3:e0:
                    08:3f:48:1f:24:93:d6:fd:d0:26:e5:18:6a:3c:e4:
                    f4:af:9f:e2:27:88:af:4c:04:d4:8c:8b:e3:5e:37:
                    d2:64:19:fb:1c:77:20:80:9a:2c:cc:32:ab:36:51:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:18:6C:64:42:11:63:58:AF:11:8B:84:95:9E:94:E1:91:B7:9F:5F
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/LxhsZEIRY1ivEYuElZ6U4ZG3n18.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8e:c9:e3:71:f8:c8:2d:4b:bb:48:08:a3:5c:a2:31:8c:a7:72:
         b1:79:b7:ad:6d:fe:fe:ba:ff:65:1f:42:d2:e6:3e:8f:41:c1:
         f0:67:5f:1d:53:83:8e:92:b1:5c:40:6c:b1:0f:66:78:b7:ec:
         c4:3e:cb:8b:e4:61:78:7a:b1:b2:9b:b8:c6:40:df:3e:49:29:
         8c:14:cc:fe:97:39:4f:53:d2:12:ad:6f:ff:55:ff:2f:11:46:
         e9:98:94:52:ad:4e:f3:0d:0b:6e:c5:5a:8a:89:c8:16:13:39:
         8b:29:b8:00:40:37:5d:a5:1c:a3:48:cd:20:d9:8e:35:3c:23:
         02:f9:70:6c:58:1e:42:b5:08:9f:e5:d6:a9:35:f9:f3:00:49:
         1d:2c:b3:6c:c0:55:ac:cb:3e:47:23:dd:d3:20:25:a7:d6:15:
         12:c9:9f:d1:d0:70:02:cc:6f:5f:ad:3d:0a:c2:9f:ef:d4:60:
         1b:19:70:eb:e3:2f:59:c6:9e:f9:2e:af:f9:e8:04:4d:b2:5d:
         5e:10:96:12:58:8d:b5:d9:69:49:d7:28:8b:85:4f:4a:9b:40:
         dd:b0:df:73:d2:23:aa:a8:18:bf:e3:ef:0d:ee:34:f3:db:ec:
         c0:0d:55:b5:44:17:76:56:bc:a7:74:9a:fa:ef:7f:dc:68:25:
         67:fc:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----