Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3132352e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e3132352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          xjjRwgaWLWIR0n031T3wXdoFSrsvgQDEjyC0uiBKyi4=
Subject key identifier:   DA:2C:D2:0D:A1:F4:3F:6E:5A:CB:4C:1F:6B:38:39:13:84:56:4C:63
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6FF190C3B707C0A358BBA0F3B8B5A5B2352AEF13
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3132352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:17 +0000
ROA not before:           Wed 29 Sep 2021 23:55:17 +0000
ROA not after:            Fri 30 Sep 2022 00:00:17 +0000
asID:                     17451
IP address blocks:        118.99.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f1:90:c3:b7:07:c0:a3:58:bb:a0:f3:b8:b5:a5:b2:35:2a:ef:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:17 2021 GMT
            Not After : Sep 30 00:00:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:62:09:c5:ca:19:37:57:a0:dd:85:fd:1f:a7:
                    38:69:5c:1f:d4:a2:cf:d4:25:02:f9:1f:72:b2:1b:
                    8f:52:4a:22:c5:ff:ba:d2:14:5f:d2:be:ed:76:1e:
                    fe:0a:e3:92:25:cd:c2:c0:c7:ec:23:8f:69:8a:83:
                    f3:75:81:13:0b:a7:ab:37:37:9e:6d:fb:42:4c:a7:
                    6b:ba:ea:84:bb:fe:ca:18:fb:01:f4:9b:5c:d9:f7:
                    46:dc:72:7a:8f:aa:ad:2c:d2:46:76:c4:ee:45:c2:
                    9b:33:b5:aa:d0:f7:8b:84:77:a4:29:4d:3e:c2:e9:
                    6a:52:2b:a1:80:e0:82:40:7e:0c:40:aa:57:b1:87:
                    79:1b:85:33:9a:6c:9b:ab:e6:09:ba:c0:3a:79:ab:
                    c8:82:e3:de:96:9a:ce:f5:31:78:fe:ed:07:a8:89:
                    03:ff:62:42:64:9a:51:90:56:be:5f:67:b4:d6:a8:
                    9f:3f:f2:ee:8f:02:03:f0:c7:37:7d:6b:39:e8:6b:
                    69:45:d0:18:bd:11:e3:2f:7c:49:4a:bc:ad:fc:91:
                    c2:41:ee:9c:13:43:c1:6f:da:12:27:cb:1e:8e:d8:
                    22:4b:25:b9:48:0b:47:45:2e:66:b7:59:dc:6e:77:
                    97:9c:cd:13:8e:67:05:6c:8b:5e:25:21:df:b6:c9:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2C:D2:0D:A1:F4:3F:6E:5A:CB:4C:1F:6B:38:39:13:84:56:4C:63
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3132352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d2:71:ba:b1:71:3c:a2:e0:10:07:bc:69:b1:bd:4d:e3:94:
         cd:75:c8:f9:1b:bd:92:97:b5:62:4e:6e:6a:d2:a4:48:60:0c:
         95:fe:5f:c8:4c:82:95:ad:60:1d:ce:14:31:86:12:28:f2:89:
         0c:45:5a:4d:53:fb:a7:54:e3:79:aa:23:5a:a7:21:b6:63:12:
         b3:2f:53:16:85:d3:d5:a3:6b:ce:0f:98:e7:e3:df:13:c8:a8:
         76:12:ac:c8:4c:bd:be:8d:df:7a:91:89:55:a0:83:35:fc:e7:
         3a:53:51:45:5d:ce:7e:a0:75:3e:f5:c7:73:c0:4c:1f:cf:51:
         9d:10:e3:8e:60:8b:9d:89:a6:96:23:5a:2f:79:ce:ac:f4:51:
         a8:04:d3:78:cc:9c:90:1a:83:9c:3d:27:d0:fb:f7:12:ac:b0:
         cb:01:23:2f:e8:00:cb:29:38:ad:47:c8:f4:47:22:a4:6f:06:
         0e:60:ac:6d:8a:c7:fd:6c:62:33:fe:cc:57:f6:f5:97:e3:77:
         c0:e1:ab:96:8e:79:10:77:a8:41:8a:b4:ba:a9:a1:b0:0f:a5:
         2a:0d:83:6e:ab:29:a7:c3:06:c7:f8:ea:59:3f:d2:b2:89:47:
         35:1a:6d:81:5b:1d:4d:98:57:17:14:3d:f0:85:2e:89:43:f0:
         20:8b:26:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----