Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e36342e302f31382d3138203d3e203137343531.roa
File:                     3131382e39392e36342e302f31382d3138203d3e203137343531.roa (raw, json)
Hash identifier:          Py9o4OD4zf6aDusgqxopPUJmzzxFu09ct1DXiHtZ8hs=
Subject key identifier:   44:C8:C8:D1:F1:84:F1:18:A8:73:8C:8C:D2:3A:62:F6:F2:06:2E:E3
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       150EFD0C0AB4E0AAECD79299CCEC6FBAA5A86D69
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e36342e302f31382d3138203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:17 +0000
ROA not before:           Wed 29 Sep 2021 23:55:17 +0000
ROA not after:            Fri 30 Sep 2022 00:00:17 +0000
asID:                     17451
IP address blocks:        118.99.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0e:fd:0c:0a:b4:e0:aa:ec:d7:92:99:cc:ec:6f:ba:a5:a8:6d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:17 2021 GMT
            Not After : Sep 30 00:00:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:40:fb:f2:e1:14:5e:da:1c:a7:46:ab:81:
                    ef:37:c5:61:0c:e5:84:60:b2:a3:57:98:be:e2:46:
                    ef:01:97:67:b8:41:5b:e3:b9:74:bb:63:2e:fc:df:
                    28:71:f1:bc:c4:20:99:86:2b:df:9f:ab:54:24:a7:
                    ba:d1:0a:2e:bd:5d:7f:1b:39:92:97:03:c9:c4:ca:
                    de:e3:d4:41:4e:13:53:b6:bc:35:3f:e2:f9:a0:06:
                    a9:16:1b:ab:13:26:27:aa:6e:ad:82:0d:15:64:01:
                    63:c0:21:48:01:8c:27:18:9d:47:4d:55:3e:bb:33:
                    34:c3:ee:21:b6:6e:7d:9f:b2:57:da:f0:17:4b:00:
                    be:ae:b9:e7:67:12:16:58:ad:20:50:89:3c:7f:c2:
                    21:03:23:c2:8d:11:41:9d:ea:9f:fd:48:e7:81:85:
                    6c:a6:a1:2a:93:53:70:72:b3:b8:1c:81:ed:2d:19:
                    4f:24:90:20:ea:88:4e:fe:62:2c:77:98:a5:95:16:
                    98:78:ba:79:20:53:57:dc:c8:66:9a:fb:fc:7c:2c:
                    1e:08:6b:c7:89:59:92:6b:6b:53:d6:53:9c:83:bb:
                    f2:21:c8:5d:6f:8b:b6:dc:2f:26:7a:64:b6:d3:ad:
                    58:e7:15:90:f7:19:90:32:41:bc:29:fc:06:ab:89:
                    80:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C8:C8:D1:F1:84:F1:18:A8:73:8C:8C:D2:3A:62:F6:F2:06:2E:E3
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e36342e302f31382d3138203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:22:e3:3c:43:38:ae:ef:f0:2e:8c:93:0f:3c:b3:dd:07:
         07:89:43:e8:41:78:11:fc:33:34:10:8b:dc:76:4c:d1:f2:1e:
         88:26:3a:0c:e6:db:a7:c4:76:66:5c:5f:68:16:5b:e2:bc:fd:
         ac:9e:ad:68:54:0f:94:03:18:98:66:ad:d8:ac:e2:15:58:2c:
         40:c0:31:33:0a:cc:47:96:30:66:51:3f:75:77:b1:ea:1d:99:
         41:df:13:ed:66:c9:02:31:c7:df:60:c7:23:bf:b6:be:c1:9d:
         40:11:c6:42:2a:f7:a5:81:ea:df:c3:a6:a7:6f:19:2b:e7:ed:
         21:83:c4:66:c2:1b:18:52:e7:9a:38:a4:f4:bb:6c:2f:00:7d:
         e9:6a:50:7f:dd:fd:5e:8e:08:d2:18:2f:16:00:96:61:76:ac:
         d0:39:a8:98:ca:45:5e:ef:85:4c:5c:72:c1:a9:48:86:68:f9:
         1e:d1:41:58:91:ec:3b:47:b7:3d:92:f7:6d:85:56:f2:6a:f2:
         70:6d:7c:db:84:3d:26:cc:e2:35:ee:46:52:b3:9a:6c:4d:a8:
         90:ba:ae:f8:ec:80:f9:ed:02:19:9e:cf:9c:c7:df:d9:4b:45:
         c4:9f:55:e4:0c:00:fd:da:b0:e3:e3:04:d6:bb:3f:92:dc:21:
         ba:22:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----