Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/J4vqRYMFojgRHOmR9amelmiEhMU.roa
File:                     J4vqRYMFojgRHOmR9amelmiEhMU.roa (raw, json)
Hash identifier:          7OzKpmuwPYNhZtIfprfjMkjubtj3F4cUmCbQJSIn8gM=
Subject key identifier:   27:8B:EA:45:83:05:A2:38:11:1C:E9:91:F5:A9:9E:96:68:84:84:C5
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       45
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/J4vqRYMFojgRHOmR9amelmiEhMU.roa
Signing time:             Tue 25 May 2021 02:46:59 +0000
ROA not before:           Tue 25 May 2021 02:46:59 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     38631
IP address blocks:        203.104.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May 25 02:46:59 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=278BEA458305A238111CE991F5A99E96688484C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:7d:18:fd:2a:42:ad:64:9f:17:88:3b:fb:
                    cc:7f:94:0d:6c:57:8a:e8:09:68:42:cf:21:e8:3f:
                    d6:5d:95:27:e0:48:6d:15:46:9f:3d:60:63:b3:73:
                    c8:9c:0c:dd:b5:04:83:2c:56:2c:c0:eb:3d:4b:16:
                    4c:5e:d1:a0:2b:ec:b3:2e:d0:a0:81:2e:78:3d:ed:
                    39:37:24:fd:f5:40:b2:50:8f:8b:4a:23:5b:26:41:
                    16:6d:5e:36:47:be:dd:58:33:a6:9f:80:c4:b4:e9:
                    31:9b:90:3d:a4:8f:69:1c:b5:65:a7:d6:14:72:a7:
                    d5:54:a5:f0:79:3d:1c:16:e1:dc:7f:47:6f:e6:71:
                    ce:4c:bb:73:6e:b9:62:1e:89:6c:32:b9:a9:5b:c2:
                    a2:df:fd:51:eb:28:35:92:73:cb:a3:70:37:0b:57:
                    92:69:84:ea:73:77:91:cf:4c:d3:3a:8a:c7:36:a2:
                    02:47:6c:22:7d:1e:ec:e5:96:f1:65:83:53:e0:28:
                    87:98:0d:a5:11:7c:f5:82:ec:87:9b:25:6c:74:63:
                    de:b2:85:9e:74:ce:77:c2:d1:8a:16:b2:4e:ce:1c:
                    88:0d:51:10:7a:62:61:72:73:00:d3:1c:1f:0a:bf:
                    b1:ee:5c:42:c0:91:4f:29:a1:0a:34:cc:87:42:17:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8B:EA:45:83:05:A2:38:11:1C:E9:91:F5:A9:9E:96:68:84:84:C5
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/J4vqRYMFojgRHOmR9amelmiEhMU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:18:6c:b7:84:62:89:41:32:13:8c:e2:d0:11:27:b4:c8:e5:
         9b:1b:c1:0b:52:85:c2:89:98:03:c2:61:58:3b:0b:fa:4a:cd:
         b4:16:3d:6f:77:52:17:dd:42:b9:0a:32:21:5d:c3:da:9e:f0:
         38:f3:16:6f:1b:45:5a:b0:40:4c:a5:7d:5c:bd:08:fb:3e:67:
         05:30:a2:60:47:14:dc:3d:3c:38:47:0f:1b:a1:81:b4:6b:a5:
         a5:c0:4f:e6:a8:89:0b:a8:fc:82:4c:41:9e:a5:2e:78:3b:33:
         7b:4a:26:36:3a:f5:2e:ab:84:1b:65:62:ab:86:38:97:2b:e9:
         57:8d:5d:e6:6b:ec:94:36:f0:4a:1e:c1:4c:c5:fd:75:bb:a7:
         27:31:8f:87:cf:41:db:ea:2a:1a:5b:79:3e:8d:0b:d8:d1:9d:
         18:80:e4:e0:3a:2e:3c:db:1a:4c:78:2d:f9:d7:33:82:8b:6e:
         e0:ea:7f:f5:ed:8b:45:0b:ea:f3:5b:30:39:ff:11:fa:32:1b:
         cf:53:5e:64:97:65:4b:64:fb:08:bd:66:61:c7:a0:f1:22:c5:
         5d:72:11:20:62:51:f6:f1:43:dc:c0:d9:7d:3c:56:17:e8:b5:
         0b:a4:b0:dc:e2:12:25:e0:30:28:5f:c5:41:dd:f6:d3:07:26:
         08:74:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----