Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/QAZPJJUCW2Ca1xcsZ_sBiWK_UXg.roa
File:                     QAZPJJUCW2Ca1xcsZ_sBiWK_UXg.roa (raw, json)
Hash identifier:          xa0KPymt5g7AyrhFmiVfR6Gx4Kji0yHEKzbZ+nq6Qy0=
Subject key identifier:   40:06:4F:24:95:02:5B:60:9A:D7:17:2C:67:FB:01:89:62:BF:51:78
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       43
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/QAZPJJUCW2Ca1xcsZ_sBiWK_UXg.roa
Signing time:             Tue 25 May 2021 02:46:58 +0000
ROA not before:           Tue 25 May 2021 02:46:58 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     38631
IP address blocks:        203.104.144.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May 25 02:46:58 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=40064F2495025B609AD7172C67FB018962BF5178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:12:34:a1:0a:63:07:1e:f2:b9:ed:c9:3f:7d:
                    c4:bb:24:67:1b:01:63:b7:cd:c3:a6:d6:96:33:91:
                    dd:7c:e0:c4:c6:a5:3b:29:e8:f3:a3:a0:bf:f6:6b:
                    13:f9:fd:9f:5e:6b:5f:ed:09:01:00:e6:e6:3a:8f:
                    be:05:03:4e:95:7c:95:30:33:95:68:9e:05:2a:7a:
                    52:ca:ab:8c:2d:ab:b5:01:38:68:6d:e0:77:bd:bb:
                    38:46:40:55:db:79:45:c2:cf:12:9a:2b:f2:10:ed:
                    2a:34:4f:58:86:58:2a:36:79:a7:ee:59:4d:59:e4:
                    fc:18:ef:08:86:f8:22:1f:3d:21:6c:7a:f8:11:39:
                    88:2a:70:16:40:38:8a:d9:10:39:55:7b:bf:f5:6c:
                    ee:76:a1:0b:eb:35:d8:54:89:cf:98:c8:92:d6:0f:
                    67:4e:15:bc:6f:4e:fc:06:cd:9a:73:bd:7c:71:09:
                    d8:6a:10:03:69:d6:b7:84:f3:1d:a0:0b:93:c5:0a:
                    b3:86:2d:47:28:46:e7:ba:6e:0f:51:26:eb:72:0e:
                    1c:d9:0c:ef:24:73:82:fb:23:3a:1b:65:18:03:e1:
                    b3:f6:f6:ae:92:9e:95:5a:8b:3f:10:93:5e:94:a2:
                    24:dc:99:fc:c3:94:82:43:76:8a:e6:fc:74:a0:9d:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:4F:24:95:02:5B:60:9A:D7:17:2C:67:FB:01:89:62:BF:51:78
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/QAZPJJUCW2Ca1xcsZ_sBiWK_UXg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:98:e9:6d:c8:30:2a:86:02:84:b5:41:3f:d5:cd:e2:0c:6f:
         1c:dc:75:a5:29:67:46:4f:cf:43:b0:22:2c:0f:ff:3d:67:ad:
         98:67:9a:d8:0a:67:61:90:3a:59:59:cf:a6:03:8f:c0:cf:a0:
         c3:91:a9:8f:9d:3e:cf:93:11:71:71:7a:29:1c:fe:93:15:99:
         a3:b3:3d:17:36:95:a6:be:8e:72:33:6a:e6:2a:60:c9:c9:a6:
         b0:64:34:12:44:ee:1a:5c:fd:22:36:90:c1:a3:85:c1:5f:09:
         db:46:4f:a7:e3:a0:e7:96:f2:d1:c8:73:c4:b8:64:4a:95:eb:
         1e:1c:74:85:74:ad:d4:ce:92:31:ba:48:59:b1:27:68:f8:0f:
         d4:5e:41:e2:f7:cb:8c:af:ff:6e:f9:16:6f:ad:09:77:69:70:
         f6:aa:df:6e:aa:ca:14:22:96:40:ef:31:00:30:1f:57:f9:cc:
         12:8d:cb:22:33:6d:70:6f:89:2b:f8:a5:2b:88:68:7a:6d:21:
         c1:fb:c2:b4:a1:a1:9c:ac:24:7f:1b:84:c3:a8:f5:1c:c9:66:
         2f:75:37:84:df:d5:c7:d0:43:47:00:11:e0:2c:55:ca:03:8f:
         5a:d4:c5:a4:0c:4f:fb:f0:ca:bb:08:2b:7a:bf:ed:4b:0f:2c:
         1d:3d:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----