Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/5U0E2sj89Az9IKKyzQwSnqQMGsY.roa
File:                     5U0E2sj89Az9IKKyzQwSnqQMGsY.roa (raw, json)
Hash identifier:          L1E1Bq8J9mDHLZ7GL0jHBbgUqPQN22y/Kd8M7ipgFpE=
Subject key identifier:   E5:4D:04:DA:C8:FC:F4:0C:FD:20:A2:B2:CD:0C:12:9E:A4:0C:1A:C6
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       47
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/5U0E2sj89Az9IKKyzQwSnqQMGsY.roa
Signing time:             Tue 25 May 2021 02:47:00 +0000
ROA not before:           Tue 25 May 2021 02:47:00 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     38631
IP address blocks:        103.2.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May 25 02:47:00 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=E54D04DAC8FCF40CFD20A2B2CD0C129EA40C1AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:f3:49:f7:ff:21:39:b6:a0:6f:b8:1d:00:
                    ff:dd:d2:25:ec:10:36:18:40:13:24:01:75:3f:ec:
                    11:04:0d:c7:cf:fb:d7:9a:2e:e8:c0:28:e0:c3:ca:
                    a4:76:63:a5:e2:33:90:af:15:df:e6:f3:67:2b:ff:
                    97:e5:10:ac:06:35:d4:9c:e6:f5:95:2a:a4:07:17:
                    c5:95:46:0b:3c:9f:f3:48:f8:bc:8b:8f:de:25:2d:
                    6e:58:b9:c7:45:e1:28:b3:dd:e0:eb:cc:2a:a3:b1:
                    eb:bd:84:05:a2:0f:f9:c9:0d:91:7b:30:a5:da:b2:
                    c5:04:57:0b:b7:7e:bc:52:b2:ed:21:cc:3f:26:7c:
                    72:1e:8d:e3:9b:8c:10:56:7b:e4:bc:cc:5e:75:b2:
                    63:bd:27:26:eb:ab:68:d8:fa:4a:c1:86:98:30:8c:
                    64:84:78:76:61:59:fa:fe:37:df:9f:2d:26:fb:99:
                    63:5d:09:c1:f5:81:e0:89:42:fa:eb:5f:ee:1b:8e:
                    72:e4:b4:8f:df:de:c3:34:a9:d5:35:2c:1c:3d:a4:
                    d6:18:09:d5:5e:13:34:ce:59:73:ef:58:f0:67:5c:
                    73:01:29:87:c3:92:65:a4:86:1f:fc:3a:42:d6:a4:
                    61:93:8b:e2:92:f6:54:5e:dc:ef:c1:e2:44:20:3d:
                    4a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4D:04:DA:C8:FC:F4:0C:FD:20:A2:B2:CD:0C:12:9E:A4:0C:1A:C6
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/5U0E2sj89Az9IKKyzQwSnqQMGsY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9b:ce:a4:48:2c:1a:f6:eb:10:26:ad:91:43:97:07:fc:0a:
         9c:cb:72:a5:a5:54:07:5a:0a:49:00:c4:c4:9d:1b:b4:10:ae:
         b8:c7:80:19:14:9f:86:69:22:cc:53:14:cb:9f:19:75:0d:3b:
         2f:ea:78:9e:6e:e7:2c:d1:bd:57:ed:75:ca:f3:01:c5:f8:19:
         d4:ab:6d:5c:36:7f:24:6e:f1:b2:97:ff:24:6c:10:0e:02:0c:
         23:3c:e3:e5:07:86:fb:48:6b:6c:bf:35:43:ac:7b:17:dd:e1:
         b1:30:fa:be:d5:75:0a:fd:10:06:76:6a:bd:8b:fb:2b:36:1e:
         75:59:66:ba:e7:6b:a0:da:9f:b1:74:58:0f:31:ab:bb:1e:39:
         dc:2c:d2:3a:95:4b:cd:20:8f:0f:77:a5:18:c8:a1:0d:80:d1:
         6d:5e:a5:a7:99:2a:a4:13:0c:7e:e2:1b:78:22:03:3a:88:a8:
         94:12:ed:07:44:10:90:27:96:5e:76:d4:59:13:dd:85:5f:31:
         39:c1:b3:fb:cb:49:27:c6:44:64:97:e1:da:8a:41:be:e5:4c:
         a4:36:d3:72:ee:64:42:64:f0:0d:0f:51:ed:16:91:bf:67:23:
         2c:a8:d0:b1:e1:fa:36:ae:0f:ba:8b:2f:9f:f3:74:c5:55:74:
         ea:99:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----