Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e3137302e302f32342d3234203d3e203536323432.roa
File:                     3130312e3235352e3137302e302f32342d3234203d3e203536323432.roa (raw, json)
Hash identifier:          FDUfdutYG/cgtx3Ds7hcqnhhD43uIgb+9cGfQQHitQE=
Subject key identifier:   8A:4A:6D:2F:75:55:B0:15:00:68:5E:42:70:8B:D9:4D:09:E0:C5:73
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       0E53D0BFBD502D1580F87BB3E8F3FD241FCED126
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e3137302e302f32342d3234203d3e203536323432.roa
Signing time:             Sat 25 Sep 2021 23:00:00 +0000
ROA not before:           Sat 25 Sep 2021 22:55:00 +0000
ROA not after:            Sun 25 Sep 2022 23:00:00 +0000
asID:                     56242
IP address blocks:        101.255.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:53:d0:bf:bd:50:2d:15:80:f8:7b:b3:e8:f3:fd:24:1f:ce:d1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Sep 25 22:55:00 2021 GMT
            Not After : Sep 25 23:00:00 2022 GMT
        Subject: CN=3082010A0282010100A3E56AF60306B38B453024DA8816E0ED0C937550087CBBCF14D70191F1A6163A8CD6C61F2661AD983453A6DECA6613CAA3020FC16A41AD9DD6061A7B2E9192E79A8B82D9A6B518E28AA1606D6C1A61CBAF27B735F92AD54103DF69C5B9556BC6631CC8FC3AA7D74FCDB461766B22569BC8293D8833164E1CCA23360C0B8E9D0023EA84092F73782CB5573C5A7E7207A3EF819E0D951C7054832865E9A870B7E18D17B62E6EE5FAE807DDF65CF05F15752E885E56471A5E0CDB76CA4044DED4D05711762CA1191D5D3B238652971D322BAF1C9FD036AAC35085992AE9B4A152B16A1F17A69768DB26CC6A304F4255E0C8F359B677EEF6BC3A3F8AB1F0201D0CE30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:6a:f6:03:06:b3:8b:45:30:24:da:88:16:
                    e0:ed:0c:93:75:50:08:7c:bb:cf:14:d7:01:91:f1:
                    a6:16:3a:8c:d6:c6:1f:26:61:ad:98:34:53:a6:de:
                    ca:66:13:ca:a3:02:0f:c1:6a:41:ad:9d:d6:06:1a:
                    7b:2e:91:92:e7:9a:8b:82:d9:a6:b5:18:e2:8a:a1:
                    60:6d:6c:1a:61:cb:af:27:b7:35:f9:2a:d5:41:03:
                    df:69:c5:b9:55:6b:c6:63:1c:c8:fc:3a:a7:d7:4f:
                    cd:b4:61:76:6b:22:56:9b:c8:29:3d:88:33:16:4e:
                    1c:ca:23:36:0c:0b:8e:9d:00:23:ea:84:09:2f:73:
                    78:2c:b5:57:3c:5a:7e:72:07:a3:ef:81:9e:0d:95:
                    1c:70:54:83:28:65:e9:a8:70:b7:e1:8d:17:b6:2e:
                    6e:e5:fa:e8:07:dd:f6:5c:f0:5f:15:75:2e:88:5e:
                    56:47:1a:5e:0c:db:76:ca:40:44:de:d4:d0:57:11:
                    76:2c:a1:19:1d:5d:3b:23:86:52:97:1d:32:2b:af:
                    1c:9f:d0:36:aa:c3:50:85:99:2a:e9:b4:a1:52:b1:
                    6a:1f:17:a6:97:68:db:26:cc:6a:30:4f:42:55:e0:
                    c8:f3:59:b6:77:ee:f6:bc:3a:3f:8a:b1:f0:20:1d:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4A:6D:2F:75:55:B0:15:00:68:5E:42:70:8B:D9:4D:09:E0:C5:73
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e3137302e302f32342d3234203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.255.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:dd:38:f5:6e:75:cd:ba:6e:97:e4:a6:48:d9:62:68:5d:13:
         f4:b0:79:fe:7f:80:bf:13:e2:53:24:c0:50:4a:9c:35:ad:22:
         2f:d9:9c:75:52:7f:fd:da:32:04:d7:67:4b:2f:79:a7:65:47:
         88:f9:d3:56:fa:fb:68:3f:42:9a:63:75:15:a7:46:74:ea:07:
         c7:0b:f5:f9:56:b1:bc:a6:fb:86:10:f4:bf:12:c8:ec:01:20:
         dc:44:20:9c:6a:f6:cf:a3:db:80:c0:7b:c2:4e:bf:e2:14:9b:
         89:0c:ca:48:71:2a:cc:92:49:5c:0f:b5:c2:eb:3e:2d:71:b1:
         4a:71:63:1d:9c:9f:f0:46:c9:1a:8d:e8:c3:64:fc:04:98:5d:
         7e:fc:7c:3e:52:e5:f1:c2:a2:ab:ca:dc:8e:82:ec:c6:73:41:
         b6:6d:e7:2b:eb:c4:de:3e:13:ca:0e:c3:43:fb:eb:9e:05:54:
         e0:90:3f:b4:16:a0:bf:41:65:c9:a4:1b:da:ec:28:36:6a:85:
         38:12:e4:82:19:30:7b:a7:99:21:f0:21:fc:1b:eb:bd:e7:e6:
         e5:06:c1:98:1b:ec:19:2f:5b:6b:30:20:38:7a:dd:98:cc:3f:
         54:2f:9e:46:3f:11:ab:16:01:ac:45:7d:c0:21:cb:ce:54:c6:
         b9:8c:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----