Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/LPqOIXLDlV8woapVHEI1bxQu_Ok.roa
File:                     LPqOIXLDlV8woapVHEI1bxQu_Ok.roa (raw, json)
Hash identifier:          7hhnA9AaaXf+l1cx5zyTq0anhKfa+p8EiZkoNemBQJE=
Subject key identifier:   2C:FA:8E:21:72:C3:95:5F:30:A1:AA:55:1C:42:35:6F:14:2E:FC:E9
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       37
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/LPqOIXLDlV8woapVHEI1bxQu_Ok.roa
Signing time:             Wed 18 Aug 2021 07:54:27 +0000
ROA not before:           Wed 18 Aug 2021 07:54:27 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     2518
IP address blocks:        119.240.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug 18 07:54:27 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=2CFA8E2172C3955F30A1AA551C42356F142EFCE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:e9:e9:51:b1:af:15:f7:c9:99:50:a4:8f:
                    15:0c:7f:f9:ba:c8:94:61:3d:48:f0:85:62:cc:c3:
                    e4:2b:7f:b1:ae:3d:e2:f8:0a:10:ac:0e:45:cf:a7:
                    0e:5e:b0:d3:89:e7:c9:68:0e:06:d3:fa:da:b9:00:
                    3e:12:ed:73:d6:01:4a:5c:45:59:cb:89:cc:e5:02:
                    77:ff:38:d6:be:e3:e2:be:ae:44:19:61:f2:38:6a:
                    24:e6:5b:f6:0b:68:97:05:7d:c7:63:76:86:77:e9:
                    75:19:73:fe:94:37:43:21:b8:b1:f9:b0:bf:79:d5:
                    8d:e3:d9:ff:f0:3f:97:6e:78:25:4e:1a:7d:cc:c9:
                    8f:8b:85:d6:11:ab:3a:e7:80:60:15:07:31:26:68:
                    7b:09:43:c0:c7:55:bb:ef:08:05:71:a5:d9:a3:c9:
                    3f:fd:e5:70:8c:d6:8d:5e:01:72:fb:fa:1e:e7:74:
                    aa:f4:8e:be:43:40:23:08:54:f5:5d:d4:37:79:d3:
                    b0:0f:95:c0:b4:e2:f4:82:92:3a:86:86:d0:3f:19:
                    4e:ea:1e:4a:59:6a:c2:f4:ec:ff:77:4e:5b:c9:31:
                    c0:93:0b:a1:f0:99:5e:8d:49:0c:2a:41:25:80:27:
                    57:18:db:bd:08:72:ab:e8:d6:01:72:69:22:15:ad:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FA:8E:21:72:C3:95:5F:30:A1:AA:55:1C:42:35:6F:14:2E:FC:E9
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/LPqOIXLDlV8woapVHEI1bxQu_Ok.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.240.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         04:bb:93:b5:31:5a:34:da:09:b0:42:b7:65:57:cf:c8:1d:90:
         c8:0d:ea:07:09:15:23:3a:c9:a9:3c:30:14:70:bf:f7:e4:2d:
         62:4a:50:e5:3d:9b:78:f1:10:97:ca:77:66:d6:b3:56:93:38:
         1d:39:dd:92:4c:cb:6e:14:f5:99:2c:55:a9:f3:5b:d8:5a:9b:
         58:cb:37:79:15:4c:a0:4b:a3:5d:cd:93:2f:f7:ff:44:9f:03:
         0f:3c:49:21:3f:ab:2b:19:ea:3a:cd:7f:fc:b6:b8:5b:0f:f7:
         42:4d:f6:02:69:7a:44:8a:7c:0c:10:41:ce:fd:c7:33:0d:9c:
         a1:85:e5:b6:54:be:4d:6a:38:87:3e:5a:92:55:e9:50:69:b4:
         b5:c4:dc:62:e6:d1:a8:1f:a7:17:f3:f9:01:99:d7:03:7c:5c:
         c1:bf:ed:64:5c:e3:b0:e1:d4:0c:86:79:eb:14:7d:27:9c:0b:
         20:23:6e:fd:f0:2b:3e:88:f1:10:b3:5f:3f:a0:24:82:0e:75:
         88:d4:6f:8d:5f:96:8a:c5:84:26:b3:08:3e:a8:d3:ee:96:0e:
         12:91:25:38:c4:7c:af:96:3f:ab:13:d1:ad:68:e7:88:9c:ab:
         4f:dd:db:9e:f3:bc:10:df:c5:86:7d:d9:2a:3a:03:84:6f:b0:
         ab:c3:96:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----