Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37302e302f32332d3233203d3e203536323432.roa
File:                     3131352e3132342e37302e302f32332d3233203d3e203536323432.roa (raw, json)
Hash identifier:          zlw4cgKqpWnA6/cfyjZkGSPnvlvemmhB3y4BFS5vPLc=
Subject key identifier:   B8:3A:CF:3B:0C:F2:0B:F7:12:A9:FA:0C:5D:D6:7E:47:B8:80:1A:D5
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       216569E0DC0F632B36BFDEDA8DDD62B3277DE7F0
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37302e302f32332d3233203d3e203536323432.roa
Signing time:             Sat 25 Sep 2021 23:00:00 +0000
ROA not before:           Sat 25 Sep 2021 22:55:00 +0000
ROA not after:            Sun 25 Sep 2022 23:00:00 +0000
asID:                     56242
IP address blocks:        115.124.70.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:65:69:e0:dc:0f:63:2b:36:bf:de:da:8d:dd:62:b3:27:7d:e7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Sep 25 22:55:00 2021 GMT
            Not After : Sep 25 23:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c5:75:49:ad:08:2d:85:31:ac:2a:77:70:6c:
                    ce:11:70:bc:77:db:56:cc:3e:96:42:89:02:5f:db:
                    4b:a7:01:a5:b3:0e:87:48:89:dd:a7:7d:b5:eb:61:
                    90:fb:9b:62:89:69:78:c2:cb:ba:dc:40:65:2a:4e:
                    40:56:0b:c5:2c:b3:ec:64:f8:d1:a1:26:cd:58:72:
                    bd:4b:e3:09:ec:92:5d:8c:31:ed:8b:70:e1:35:50:
                    41:c9:61:c9:fe:a7:36:29:ea:2c:5e:a4:6e:d1:95:
                    40:d6:53:8e:3b:87:95:f3:1f:7b:83:43:28:e8:97:
                    07:cd:b9:17:c9:b1:c4:2b:6f:33:c8:85:43:da:5d:
                    ab:7e:75:b2:de:e9:98:14:2a:ce:e7:99:bd:0f:9d:
                    dc:0f:aa:21:d5:04:c9:06:79:56:77:d8:f0:15:6a:
                    d5:11:0c:01:36:a5:4c:d7:36:07:e9:5a:50:e2:2c:
                    10:78:b2:e6:96:25:e2:cb:75:c9:28:f9:74:65:24:
                    b9:34:8b:77:00:ef:3d:a3:07:ac:d5:b1:40:99:5f:
                    e0:2f:61:d4:b9:b8:14:43:8f:a0:90:db:4b:53:5d:
                    07:e3:96:29:29:4b:f3:ed:2a:f5:57:81:d9:16:d8:
                    ee:4f:2e:5a:39:eb:17:b8:ed:96:1a:52:aa:04:f1:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3A:CF:3B:0C:F2:0B:F7:12:A9:FA:0C:5D:D6:7E:47:B8:80:1A:D5
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37302e302f32332d3233203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:94:73:8c:ec:57:33:6a:a5:dd:b0:27:83:72:23:0a:03:5e:
         28:62:b9:c9:86:46:d3:f3:a8:e9:1f:3b:13:c8:0f:ea:ee:a4:
         b5:1b:92:84:f2:97:f1:9b:48:c0:a8:52:fb:a3:57:6c:a8:2b:
         f5:dc:09:45:ae:58:7b:91:47:b7:20:40:b8:01:69:09:b7:02:
         d7:2c:59:da:9d:32:36:02:71:10:04:fd:9b:1a:b4:a0:2d:92:
         f2:d2:fe:bc:8f:57:eb:f0:3b:a2:17:3f:f3:05:ca:25:d9:05:
         af:27:18:c0:bc:e5:e8:53:2f:1f:63:a8:ce:5f:97:7f:97:ef:
         f5:8e:58:c2:74:29:33:6c:9c:59:da:e0:44:46:e3:03:e9:bd:
         38:f7:7c:81:14:0d:31:a0:d7:3c:7e:82:9f:d7:f2:6c:6e:f0:
         29:cd:17:f6:5b:81:bd:11:ea:ce:cb:22:34:ec:a4:80:d2:48:
         d9:db:78:99:2b:8d:7d:6c:c0:5a:29:71:99:59:49:3d:c9:76:
         f4:3e:70:f3:4d:cd:76:88:0a:21:0b:13:b4:d0:28:93:1f:e8:
         c7:fa:fc:9d:5e:59:de:6e:a8:d0:d8:a7:2c:dd:79:24:97:c0:
         11:a9:ea:75:12:05:b2:73:40:00:dd:9c:84:1f:0c:94:06:45:
         f7:bd:32:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----