Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e39342e302f32332d3233203d3e203137343531.roa
File:                     3131382e39392e39342e302f32332d3233203d3e203137343531.roa (raw, json)
Hash identifier:          WdElF/Eq4jHRQ8RhBcz7HASi8Z3O9Up2z2jp+0simtY=
Subject key identifier:   A1:DB:17:C8:04:E0:E6:30:40:45:D4:57:B8:37:27:99:90:4B:D3:8D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       33DE383793C750440C07F9A89FAFF982EE0CF6DF
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e39342e302f32332d3233203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:00 +0000
ROA not before:           Wed 29 Sep 2021 23:56:00 +0000
ROA not after:            Fri 30 Sep 2022 00:01:00 +0000
asID:                     17451
IP address blocks:        118.99.94.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:de:38:37:93:c7:50:44:0c:07:f9:a8:9f:af:f9:82:ee:0c:f6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:00 2021 GMT
            Not After : Sep 30 00:01:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:ff:03:63:80:01:3b:c6:25:2c:bf:67:13:
                    5a:31:10:49:33:90:c4:25:d9:b2:dc:45:d1:54:a0:
                    52:b5:a0:19:04:56:71:af:29:f3:87:19:f6:04:23:
                    95:68:05:08:db:be:1b:62:07:ba:59:90:1b:9e:ed:
                    fc:47:fb:a7:31:77:4a:6f:a8:63:b3:51:93:44:4a:
                    c1:65:b3:c7:8c:56:82:2b:e6:68:39:6d:9a:5d:84:
                    07:a5:17:79:58:b4:20:19:44:b0:a7:7f:56:62:f9:
                    f7:52:e8:9a:31:6b:67:11:16:7c:41:a6:59:07:3e:
                    c8:36:d8:64:c5:c5:65:93:39:08:98:70:18:ad:44:
                    cc:f8:48:3a:44:02:39:26:17:13:f8:e9:da:0e:b6:
                    36:3a:c8:76:27:6f:43:c8:80:2f:7f:f2:df:8f:08:
                    ce:c3:f5:1d:36:a6:59:d3:2b:a3:09:0d:e9:75:78:
                    83:e7:db:0b:3e:e7:b0:e7:73:bf:77:87:3f:1f:92:
                    03:26:78:e3:2e:4a:f4:7d:f7:d6:d5:f2:0a:94:d4:
                    59:5e:dd:b3:05:a2:94:44:7d:fc:4d:64:d8:fe:54:
                    50:96:fb:ba:56:c3:08:1e:1f:f2:81:52:34:6d:a2:
                    3a:42:b3:11:b5:12:be:23:a1:3e:80:b1:83:cc:45:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:17:C8:04:E0:E6:30:40:45:D4:57:B8:37:27:99:90:4B:D3:8D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e39342e302f32332d3233203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:d3:3f:cd:a1:48:75:87:f2:f8:fe:23:d5:61:37:06:23:e1:
         c7:44:fa:ba:27:d2:ad:2b:cc:b9:74:54:f9:33:e1:7d:45:d8:
         76:cd:9d:ed:0f:3b:6a:ed:cd:41:da:48:ce:0c:b3:b9:2f:2e:
         de:68:da:6a:ee:43:68:a1:07:ef:23:cc:d3:09:3c:b2:79:c5:
         1b:22:84:d8:8e:92:5a:be:1c:d2:1b:ca:aa:94:bd:0f:37:1e:
         01:ac:98:17:37:e6:02:85:0b:e1:db:16:ab:e0:37:d6:2d:be:
         63:b8:74:f2:a5:4a:81:41:56:68:ca:b8:45:87:71:a2:87:40:
         e1:ce:62:27:a7:4c:64:74:90:5b:99:6d:ac:71:88:be:d1:f9:
         62:98:91:b3:96:8e:23:17:c2:18:2c:8d:4a:40:f1:32:d7:98:
         7b:6f:87:c6:92:cf:cc:90:55:07:dc:1d:75:22:c2:41:97:a0:
         56:f7:5b:a6:2a:a8:8e:c5:ba:51:6b:ba:57:6c:db:19:d3:04:
         d2:0c:2d:3f:52:11:24:d6:93:d8:d5:72:ce:b7:bb:fd:9c:de:
         1e:db:d6:cd:1a:22:06:e0:91:96:2b:72:d1:93:f2:e8:56:fd:
         d4:93:14:fa:39:3c:93:ed:90:cc:56:fe:70:4e:36:da:ef:5e:
         01:dc:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----