Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e37342e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e37342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          vtlA6pf8pBgfPNlPBKmW7NKseQusRdRHlReowzqMx7Y=
Subject key identifier:   D7:9A:1C:06:0A:14:DD:12:D4:29:04:77:1A:09:A4:9F:89:5A:EA:58
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2814EFFF55ED608FB4369ECDBD3D7ADB3A6CA4A3
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e37342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:34 +0000
ROA not before:           Wed 29 Sep 2021 23:55:34 +0000
ROA not after:            Fri 30 Sep 2022 00:00:34 +0000
asID:                     17451
IP address blocks:        118.99.74.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:14:ef:ff:55:ed:60:8f:b4:36:9e:cd:bd:3d:7a:db:3a:6c:a4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:34 2021 GMT
            Not After : Sep 30 00:00:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:91:e8:5c:ee:33:a4:b2:da:32:df:a0:d8:
                    ee:bf:ba:6d:21:e2:30:11:45:e0:8b:02:04:b3:f3:
                    b8:a8:6e:3c:1c:10:b9:7b:74:19:dc:b0:80:ca:49:
                    78:5d:9c:9c:ea:32:30:e5:6e:c8:a9:2b:42:1a:f6:
                    6e:5d:fb:01:d1:bc:b1:7b:04:26:a8:87:e6:eb:82:
                    3a:bb:a9:95:9a:73:6d:13:6d:52:0b:ff:68:5b:42:
                    f8:ab:06:b0:d4:49:68:90:7e:b6:58:9b:e9:94:46:
                    f0:30:41:e2:cc:e6:de:88:01:d2:be:ff:d5:54:dc:
                    9d:1d:d8:7a:b2:63:b8:07:b9:64:c2:52:02:68:d7:
                    fe:82:d5:bc:24:37:b4:3e:bb:90:71:62:dc:cb:66:
                    e6:59:98:d6:ce:69:5a:4f:e9:cc:1f:41:dc:85:fd:
                    1e:2f:4f:5a:84:2c:a5:4e:0b:cd:82:17:7f:26:08:
                    f5:da:18:f4:ba:40:37:ce:bd:d4:a8:be:ca:3b:9f:
                    47:e1:32:5c:b2:50:44:23:74:cb:bb:dc:28:86:5b:
                    11:63:69:a8:47:ee:56:8f:b2:24:64:6f:36:31:ee:
                    94:86:f2:38:cf:31:7d:21:4b:3e:1d:13:ca:3b:79:
                    db:56:b5:25:59:90:a9:10:54:cf:5d:02:9c:e1:a2:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9A:1C:06:0A:14:DD:12:D4:29:04:77:1A:09:A4:9F:89:5A:EA:58
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e37342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a2:84:42:64:31:8d:a6:e4:8f:4d:63:5c:a2:75:87:e6:14:
         33:f9:87:5d:f5:07:56:4b:32:8c:8b:fb:bc:7e:03:98:55:34:
         c0:36:92:56:d0:e3:60:7b:83:1d:07:99:d9:a7:55:cf:61:d8:
         3d:b4:31:7d:3a:51:77:d6:c4:56:e3:85:9d:1a:cc:8c:0a:ec:
         29:c6:16:88:e0:d0:55:53:a8:19:d6:35:78:34:d2:62:73:44:
         eb:45:28:b3:4e:9e:50:4f:54:69:0b:9e:52:eb:0b:40:f0:3d:
         81:3f:c6:be:ca:99:3d:75:70:19:d2:3e:a6:19:82:60:b9:ba:
         41:6a:92:94:bf:71:a7:a7:8e:5a:54:81:78:49:76:b7:9b:53:
         a8:23:76:55:e7:21:b4:44:16:13:40:e6:c8:3e:b5:dc:c5:1d:
         06:8b:0b:da:2c:70:3d:e4:0f:32:02:29:31:e4:38:df:e7:ee:
         57:1e:22:0a:dd:8b:92:4e:91:28:ed:da:b4:f3:81:ce:99:dd:
         7f:16:17:9b:73:ce:fc:a2:81:af:41:15:7d:c0:46:62:7c:55:
         b7:d6:b7:dd:16:91:dc:1a:4b:82:40:18:d8:5a:00:26:6f:3d:
         54:f9:21:7a:06:6f:81:60:56:19:3f:ae:41:ba:2e:88:e5:51:
         61:26:78:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----