Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e39312e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e39312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          XKUfmYh56HxPvAOxgCHzWMew3ljss6FBsOeOYKXQmH4=
Subject key identifier:   44:60:D6:78:DF:07:EC:80:59:21:94:91:43:00:2F:15:97:3D:75:BF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       279F2091A39225C64F9509A6A2389AAE3D55464F
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e39312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:39 +0000
ROA not before:           Wed 29 Sep 2021 23:55:39 +0000
ROA not after:            Fri 30 Sep 2022 00:00:39 +0000
asID:                     17451
IP address blocks:        118.99.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9f:20:91:a3:92:25:c6:4f:95:09:a6:a2:38:9a:ae:3d:55:46:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:39 2021 GMT
            Not After : Sep 30 00:00:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:03:9b:d8:75:b6:8a:9f:1e:8c:8e:83:a2:
                    b2:e2:20:0e:f9:3f:bf:49:ef:59:ba:1b:5a:88:48:
                    21:0b:7c:70:2c:b9:99:23:86:db:a0:fb:3d:8e:02:
                    a9:fa:ff:28:83:ed:48:b7:fc:14:60:46:97:8a:e0:
                    11:0b:82:0d:fb:0a:bd:af:f3:eb:6c:80:8a:d9:bd:
                    d4:6f:c3:18:0d:f3:bf:40:16:c7:10:6f:10:98:9d:
                    74:6f:38:96:0a:f2:c7:f2:5e:9f:0e:f4:0d:54:45:
                    26:f1:79:85:5b:22:a3:dd:3f:6c:63:9e:60:4b:ad:
                    63:a8:be:80:37:3b:a7:d6:89:a3:b5:46:62:c5:0b:
                    4e:c8:e0:c4:6b:ec:0c:e0:e5:d9:87:35:5e:70:07:
                    92:0c:63:36:16:31:11:a1:db:67:bb:a1:9e:08:e0:
                    42:3b:95:ae:56:53:00:b0:14:29:06:78:84:f3:76:
                    11:c6:52:5a:aa:d3:1e:c8:a5:58:30:ff:1d:19:b7:
                    a2:f7:95:5c:26:e7:82:a0:27:0f:da:fe:5b:72:68:
                    3d:95:0e:98:a1:87:17:96:32:5b:e8:8b:9b:83:1c:
                    2b:23:e1:d2:2a:a3:6b:1c:66:77:25:40:28:dd:6c:
                    7f:0d:c5:25:92:a9:36:6d:bf:26:31:af:42:b2:e2:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:D6:78:DF:07:EC:80:59:21:94:91:43:00:2F:15:97:3D:75:BF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e39312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:e6:d0:54:0c:a6:35:73:05:2e:5a:0f:9b:18:44:fc:89:66:
         d0:23:04:d5:71:ee:07:e7:4b:79:2c:95:da:41:98:5c:f1:5e:
         1a:ec:e9:94:d1:be:dc:9b:dc:4c:9b:60:01:b4:b4:6c:70:8d:
         3f:28:08:0a:c7:f5:cc:3d:f8:f6:5e:df:0b:19:34:98:63:27:
         c2:e7:eb:4d:da:34:5b:50:f2:3e:81:89:64:6f:63:8f:96:4b:
         20:4b:29:f7:a2:92:0b:aa:a2:ef:e6:c1:a8:d1:d3:3d:8b:8d:
         52:fc:49:1e:f2:07:b4:9b:b3:7d:44:8d:46:17:17:21:b4:c7:
         c2:4d:f6:05:71:13:65:20:23:b7:59:b9:4b:8f:17:60:fb:66:
         b8:ff:b8:3d:de:ef:6a:07:50:74:af:c4:79:fd:d4:5a:d7:d7:
         05:59:ae:51:a7:14:ae:99:7c:e9:c6:9f:da:bf:14:3a:8a:5e:
         9c:df:89:43:c2:53:25:f9:a9:e3:96:94:68:95:63:8f:be:4b:
         9c:e2:c7:ae:a8:48:b0:29:cc:a2:56:32:1d:9e:f4:0e:82:df:
         bf:7c:d1:58:81:bd:91:a7:95:54:bb:b5:41:28:ad:0e:4c:cc:
         24:b9:a5:c1:dc:1f:ba:46:c7:e6:bb:e5:09:d0:94:81:5b:c7:
         a5:40:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----