Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/6JZbNrd1-NOaDnIqQjHGA9tWHog.roa
File:                     6JZbNrd1-NOaDnIqQjHGA9tWHog.roa (raw, json)
Hash identifier:          9lhzab+0ki5Z7x7qgWKH2jpq0rmZPBf2axIZx43BgOQ=
Subject key identifier:   E8:96:5B:36:B7:75:F8:D3:9A:0E:72:2A:42:31:C6:03:DB:56:1E:88
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       2B
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/6JZbNrd1-NOaDnIqQjHGA9tWHog.roa
Signing time:             Tue 25 May 2021 02:26:53 +0000
ROA not before:           Tue 25 May 2021 02:26:53 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     45680
IP address blocks:        183.81.176.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: May 25 02:26:53 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=E8965B36B775F8D39A0E722A4231C603DB561E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:96:1d:27:f8:dc:a2:33:ba:50:75:81:3e:
                    3f:d8:82:71:c7:32:35:ba:67:7c:c4:8b:c3:c4:f1:
                    c1:1c:03:68:f5:c2:2f:0e:db:c7:4d:e8:11:cf:a3:
                    8d:b5:69:1e:b3:0b:02:4f:6f:37:d9:09:22:3f:e1:
                    fc:76:67:e1:2b:30:9d:f7:dd:db:af:95:af:38:5c:
                    8c:99:66:5e:eb:8a:c4:80:04:2d:34:7d:53:41:72:
                    78:ed:9c:f6:10:4e:e2:7a:77:1e:7b:53:e1:e9:81:
                    86:30:96:62:98:83:5f:9f:2c:7f:a7:6c:03:36:a2:
                    a5:ad:86:35:8f:ea:25:22:bc:0f:48:68:48:a6:34:
                    7e:81:3d:06:08:7f:9e:d3:26:0d:07:c1:72:ec:e2:
                    c2:94:ed:b2:b2:1c:b9:ac:cc:c8:cf:cf:43:ad:f7:
                    d8:b7:a9:91:da:1e:6b:1c:4c:71:c0:1d:39:ef:3e:
                    9a:58:e1:d1:80:9d:0e:ea:0d:ff:48:f0:00:06:37:
                    86:17:23:83:70:f7:8a:d5:56:4a:da:cc:63:3a:ac:
                    c7:fd:3b:b6:1e:5b:bb:ad:62:04:79:14:2e:eb:63:
                    8f:0a:cf:c6:af:f9:90:f7:ef:ee:dd:7c:4c:7e:74:
                    1a:3d:bd:5d:54:10:68:13:c7:1c:0a:1d:dc:6e:b1:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:96:5B:36:B7:75:F8:D3:9A:0E:72:2A:42:31:C6:03:DB:56:1E:88
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/6JZbNrd1-NOaDnIqQjHGA9tWHog.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.81.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:fc:eb:b5:c1:53:9e:e7:9f:3c:22:12:13:e2:1a:23:4c:be:
         ce:35:cc:dd:b1:48:56:09:b8:fb:06:a9:7e:df:f8:0d:01:d4:
         54:1f:5f:75:c7:9d:7f:cd:10:09:b9:db:ed:a4:39:b8:c2:2e:
         8c:1c:33:34:c6:44:38:8b:1e:d6:0f:06:93:07:1d:43:01:97:
         cd:49:b7:f4:0e:43:d4:9b:73:0f:ba:68:f9:89:68:1b:90:a1:
         d4:50:0c:f9:37:7e:2d:1f:d4:c2:a6:b8:38:99:00:8a:91:13:
         37:f6:0d:27:77:99:c3:ec:92:e5:10:a8:ea:9c:82:83:a0:54:
         0c:b5:98:ad:47:b0:a7:6c:38:2a:7a:e6:73:5c:12:c6:55:36:
         3a:03:d9:38:b8:e0:0b:74:3e:25:a4:70:02:65:7d:72:56:db:
         11:71:b2:77:d4:65:04:86:79:07:cd:25:58:55:4e:97:bd:b7:
         c5:ca:bb:20:74:01:f3:4f:68:61:ba:cf:c9:52:30:18:ab:8f:
         86:9f:86:26:6a:42:1d:47:d6:bd:cd:1c:a3:78:b3:4f:cd:53:
         0e:49:97:07:96:02:f7:c0:db:37:7a:36:4b:cb:5f:ae:f4:c4:
         1e:b1:94:40:84:10:a0:7a:c0:15:56:34:bf:d5:ab:75:b8:c4:
         80:e8:39:d5
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDI2
RTBEMTdFMzBEOEJGNTcxNEY0QkE5MkVFRUIwRDIyREREQjFEMB4XDTIxMDUyNTAy
MjY1M1oXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoRTg5NjVCMzZCNzc1RjhE
MzlBMEU3MjJBNDIzMUM2MDNEQjU2MUU4ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAML3lh0n+NyiM7pQdYE+P9iCcccyNbpnfMSLw8TxwRwDaPXCLw7b
x03oEc+jjbVpHrMLAk9vN9kJIj/h/HZn4Sswnffd26+VrzhcjJlmXuuKxIAELTR9
U0FyeO2c9hBO4np3HntT4emBhjCWYpiDX58sf6dsAzaipa2GNY/qJSK8D0hoSKY0
foE9Bgh/ntMmDQfBcuziwpTtsrIcuazMyM/PQ6332LepkdoeaxxMccAdOe8+mljh
0YCdDuoN/0jwAAY3hhcjg3D3itVWStrMYzqsx/07th5bu61iBHkULutjjwrPxq/5
kPfv7t18TH50Gj29XVQQaBPHHAod3G6x/9kCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTolls2t3X405oOcipCMcYD21YeiDAfBgNVHSMEGDAWgBSNJuDRfjDYv1cU9LqS
7usNIt3bHTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg5L2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNMZDJ4MC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNM
ZDJ4MC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85ODkvNkpaYk5yZDEtTk9hRG5JcVFqSEdBOXRXSG9nLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArdRsDANBgkqhkiG9w0BAQsFAAOCAQEA
OPzrtcFTnuefPCISE+IaI0y+zjXM3bFIVgm4+wapft/4DQHUVB9fdcedf80QCbnb
7aQ5uMIujBwzNMZEOIse1g8GkwcdQwGXzUm39A5D1JtzD7po+YloG5Ch1FAM+Td+
LR/Uwqa4OJkAipETN/YNJ3eZw+yS5RCo6pyCg6BUDLWYrUewp2w4Knrmc1wSxlU2
OgPZOLjgC3Q+JaRwAmV9clbbEXGyd9RlBIZ5B80lWFVOl723xcq7IHQB809oYbrP
yVIwGKuPhp+GJmpCHUfWvc0co3izT81TDkmXB5YC98DbN3o2S8tfrvTEHrGUQIQQ
oHrAFVY0v9WrdbjEgOg51Q==
-----END CERTIFICATE-----