Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e39332e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e39332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          f4259oyq7sJl5UD8GMx2cTi/WKeWuGCGRJ9WP0UdZmQ=
Subject key identifier:   D0:FF:E6:D6:24:73:10:CE:05:55:8D:31:16:54:16:43:39:3B:28:AA
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       51BB4394F7DD48843E8C62B4B680A544C36F61D9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e39332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:02 +0000
ROA not before:           Wed 29 Sep 2021 23:55:02 +0000
ROA not after:            Fri 30 Sep 2022 00:00:02 +0000
asID:                     17451
IP address blocks:        118.99.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bb:43:94:f7:dd:48:84:3e:8c:62:b4:b6:80:a5:44:c3:6f:61:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:02 2021 GMT
            Not After : Sep 30 00:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:67:d5:9d:8c:41:33:ce:0b:92:2b:e4:6f:67:
                    cd:55:16:04:76:fc:7c:4e:8b:cf:2c:61:3b:24:50:
                    5b:de:c7:87:d5:84:91:68:5b:ec:66:12:6d:b2:85:
                    8e:47:fb:d9:48:69:36:14:ca:41:a4:4a:1d:f0:27:
                    1c:e9:18:1c:eb:b7:b2:21:ec:92:37:2f:1a:c5:36:
                    70:1d:4e:3d:fe:00:78:e2:53:f9:7a:40:93:98:7a:
                    e4:1c:8f:53:57:5b:d7:8a:ac:d7:48:00:1a:8d:d0:
                    a1:13:32:0e:a2:0c:e0:c5:f3:fc:50:c1:b3:9a:75:
                    d2:fb:ec:89:ca:00:a0:5c:e3:9d:47:09:6f:96:ac:
                    15:47:4b:84:b6:9f:d3:75:0d:5b:16:99:e2:c0:8a:
                    71:27:bf:62:68:47:51:f4:ec:46:98:2d:10:53:73:
                    1a:67:f2:a9:0d:df:aa:2c:42:de:f7:77:9c:17:03:
                    7c:36:4f:55:ff:16:7f:18:e7:22:f1:cf:2d:8f:9b:
                    97:48:a9:19:af:81:38:df:9b:fd:5a:51:28:40:2a:
                    29:41:cb:66:5f:6b:67:5e:19:27:a2:aa:f3:32:a9:
                    8b:98:13:30:e0:f9:2e:fe:64:8d:23:71:05:d4:70:
                    e6:5e:a0:70:7b:c8:d8:72:63:e6:e3:64:9e:88:cb:
                    03:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FF:E6:D6:24:73:10:CE:05:55:8D:31:16:54:16:43:39:3B:28:AA
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e39332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:17:45:46:ab:e9:7c:56:d5:29:6d:01:5c:fb:72:e8:87:69:
         81:58:dd:2b:18:04:24:4c:ca:a0:d1:5a:80:b7:f3:8d:25:43:
         b9:b8:9e:06:2b:d2:c0:a3:a8:34:2b:81:7b:db:3e:b0:31:91:
         a9:3f:39:61:e2:7d:5c:1b:72:26:28:41:de:f3:56:2d:ae:d1:
         84:b7:f0:ba:75:84:8f:aa:a6:3c:0d:94:32:e3:b4:d0:20:eb:
         12:23:ef:61:35:36:57:fb:d8:57:4d:ce:dc:eb:10:21:1d:9a:
         48:7e:4f:a6:52:f2:3a:26:15:f2:2d:e8:2b:9c:9b:a5:40:3e:
         b0:d5:c2:14:96:2c:2d:6c:f5:39:13:6b:b4:df:6c:12:4d:64:
         c2:e4:b5:1f:15:38:ff:93:46:63:55:46:04:49:4a:60:38:dd:
         d7:a7:f8:22:72:f9:96:6c:a7:e5:8b:16:47:a0:ef:db:e4:35:
         03:48:19:6e:e3:31:76:4d:c9:c5:be:20:52:12:8c:89:ff:ea:
         64:fc:b6:8a:c1:bc:7f:1b:8e:cc:08:4c:28:c3:ae:50:11:06:
         1f:32:47:d4:7c:ab:79:3b:22:60:9d:67:05:39:d5:6f:16:49:
         41:f3:aa:0b:30:55:35:5b:0c:28:f3:73:97:54:41:c2:6a:7e:
         41:59:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----