Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/Z0NHrFgzaDYoXtdXCXtIHUUCurk.roa
File:                     Z0NHrFgzaDYoXtdXCXtIHUUCurk.roa (raw, json)
Hash identifier:          4DEyCAZlUxTyE+9lyuz+Y8EIbA/APiXDIvEIpP/irVI=
Subject key identifier:   67:43:47:AC:58:33:68:36:28:5E:D7:57:09:7B:48:1D:45:02:BA:B9
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       41
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/Z0NHrFgzaDYoXtdXCXtIHUUCurk.roa
Signing time:             Tue 25 May 2021 02:46:58 +0000
ROA not before:           Tue 25 May 2021 02:46:58 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     38631
IP address blocks:        119.235.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May 25 02:46:58 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=674347AC58336836285ED757097B481D4502BAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:4f:18:eb:da:bc:72:3a:2f:89:8f:be:ab:
                    9b:bf:ed:a5:36:0e:6a:39:58:91:e3:ce:b2:80:26:
                    c9:5e:2d:2f:d6:86:f0:d0:27:e6:17:4f:64:2b:0b:
                    46:41:10:f7:fa:00:c5:64:ed:a8:4c:e5:05:e6:f4:
                    c1:7b:82:91:d0:14:e3:88:28:e1:22:77:68:02:25:
                    70:17:b7:03:c1:fe:e8:8b:47:ef:b6:e5:9c:0b:1a:
                    93:73:23:fe:6d:18:36:48:b9:a5:4f:82:4f:23:ab:
                    cd:bd:e8:11:2b:d1:7b:a8:f4:a6:46:21:90:c9:03:
                    3d:fe:15:ed:54:5f:21:0c:9e:3b:11:56:ff:f7:ab:
                    46:32:f6:c0:ed:c7:23:99:b3:80:13:68:03:2a:99:
                    0b:56:24:32:3d:33:4e:2e:94:19:4e:7f:c6:c2:22:
                    f3:40:5a:49:16:ee:c0:3a:4e:7d:84:30:0a:93:f7:
                    70:e4:bf:71:10:f8:ca:f7:1d:8e:8d:0a:27:3e:aa:
                    56:ba:ab:89:4d:83:ea:f9:8b:d1:71:9b:3e:eb:61:
                    e8:43:8c:a9:ff:81:4d:74:99:92:1f:a0:34:ef:30:
                    c0:94:06:43:5c:2b:11:63:3d:4b:f3:1d:2c:ee:9a:
                    67:e3:59:00:cd:6b:80:cd:4f:a2:9c:42:62:0b:06:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:43:47:AC:58:33:68:36:28:5E:D7:57:09:7B:48:1D:45:02:BA:B9
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/Z0NHrFgzaDYoXtdXCXtIHUUCurk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c4:70:47:fb:4f:2f:3d:a7:a2:30:c2:9f:f4:6e:12:e3:14:
         2b:f7:06:80:ce:87:b7:04:93:c4:1c:35:0e:65:7a:3b:d0:5b:
         d1:2f:04:a6:f9:4e:70:96:64:4a:34:d6:3c:03:92:83:0e:ac:
         b4:ab:00:b0:a2:2f:68:12:ad:12:8a:8f:05:bf:bb:22:48:d8:
         ed:d5:ba:78:b4:8c:7d:08:4a:ef:80:05:71:5f:ea:13:69:c9:
         00:a6:52:bc:ce:92:5f:9e:3e:15:51:8d:16:8b:72:ac:20:b8:
         30:f0:cb:d5:39:19:c9:a0:a2:9c:80:a3:43:0d:a7:b5:ea:70:
         f8:6f:99:32:22:0b:57:56:2c:45:ed:af:77:a1:e4:03:32:a2:
         7e:f0:f6:98:b9:00:57:1e:b0:c6:1f:2f:71:70:9f:42:d6:a2:
         c9:04:aa:fd:f5:a2:19:11:ea:d1:12:46:15:f9:d2:96:1e:48:
         7c:dc:85:46:51:3e:79:47:bf:2c:31:fd:06:a8:b8:fe:d1:40:
         df:55:1f:59:7d:8f:ec:d0:5d:eb:c0:fe:42:e9:cb:6c:6f:1d:
         ba:f3:b2:b6:a2:c2:68:52:14:eb:bb:a6:01:32:54:b7:98:84:
         19:56:2a:7f:de:ac:eb:c4:e3:0c:06:31:7e:c6:42:4f:fd:2e:
         3b:a3:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----