Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3131392e3233352e3230382e302f32302d3230203d3e20313331313131.roa
File:                     3131392e3233352e3230382e302f32302d3230203d3e20313331313131.roa (raw, json)
Hash identifier:          37z7h6rBVcdMC+ir6z/mVq6+sbU+4whRpPCgH/SF+d0=
Subject key identifier:   68:D4:C0:91:D0:31:1E:35:E7:DD:4C:43:DA:83:92:7B:CC:02:88:2E
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       761F9D0BED002179A69E4BB970C396DE1B727518
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3131392e3233352e3230382e302f32302d3230203d3e20313331313131.roa
Signing time:             Thu 30 Jun 2022 11:28:53 +0000
ROA not before:           Thu 30 Jun 2022 11:23:53 +0000
ROA not after:            Thu 29 Jun 2023 11:28:53 +0000
asID:                     131111
IP address blocks:        119.235.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1f:9d:0b:ed:00:21:79:a6:9e:4b:b9:70:c3:96:de:1b:72:75:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Jun 30 11:23:53 2022 GMT
            Not After : Jun 29 11:28:53 2023 GMT
        Subject: CN=68D4C091D0311E35E7DD4C43DA83927BCC02882E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:67:34:3d:12:34:a4:60:2a:73:aa:e4:57:
                    ae:a1:01:51:f8:d3:8a:74:9e:41:47:86:d0:86:49:
                    74:17:5f:62:1b:07:f1:8c:18:e7:ca:57:e3:b8:b2:
                    74:bc:53:cc:9c:08:60:cd:d9:f4:d6:39:e6:43:67:
                    9b:f9:13:10:96:de:ff:a0:0c:48:36:b0:3f:43:95:
                    31:28:4d:ac:69:74:67:db:33:d2:61:68:c9:2e:77:
                    19:13:fd:ec:a7:84:c7:5c:c9:7b:a1:7d:57:cd:c7:
                    97:9f:b9:f1:cb:5d:a9:00:96:6f:21:cf:ee:05:c1:
                    46:5c:5c:c5:ae:df:af:3c:51:98:3d:63:94:1b:43:
                    b5:5b:0f:73:6c:97:b7:7f:de:f1:6b:09:67:73:e9:
                    b2:7b:29:22:3c:69:68:1d:24:f9:d7:e3:e6:fd:64:
                    57:56:af:f9:d2:23:8c:08:a5:67:5b:27:85:b3:03:
                    2f:e5:7f:e9:13:cf:2b:d6:96:24:ba:18:0f:d0:10:
                    2a:fc:7f:33:08:a7:24:e4:38:c5:88:0b:3f:d5:b0:
                    f5:f1:cf:80:6e:71:8b:2f:b0:e4:60:55:74:66:a7:
                    40:5b:3d:4f:7a:e7:40:11:35:58:60:f3:6c:0e:63:
                    32:17:69:93:97:a8:36:e8:4d:9c:71:86:2e:ae:23:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D4:C0:91:D0:31:1E:35:E7:DD:4C:43:DA:83:92:7B:CC:02:88:2E
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3131392e3233352e3230382e302f32302d3230203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:53:f2:e7:dd:e9:94:39:4e:fb:21:81:a9:9c:d9:72:fd:f7:
         e2:76:83:ff:f7:1d:ea:80:3e:43:c3:96:90:60:51:6c:09:dd:
         b3:2a:4f:55:c2:e4:6d:51:82:9e:e0:72:7c:3c:e2:1d:aa:0f:
         a1:20:83:8e:35:67:d0:b8:94:0d:13:6a:ca:44:fc:87:27:93:
         3f:9b:a4:d4:54:8f:0c:b8:56:67:55:69:d1:f1:08:5b:18:6b:
         50:9e:76:7c:97:d2:80:c4:36:08:5c:eb:81:b4:e0:5f:5f:72:
         0a:26:42:93:88:f0:fc:0b:60:97:da:3e:fb:bd:8e:40:88:8b:
         bd:fd:c1:9e:75:91:4b:e3:15:15:bc:35:ba:4b:c2:8a:ab:c5:
         4c:93:1e:cb:7d:4c:1a:47:7e:6a:8f:6a:77:2d:0d:7f:cf:8d:
         50:5c:d7:2b:1c:f8:b2:31:2f:86:4e:40:29:b5:fb:84:5a:95:
         c7:2a:2e:35:89:99:4f:71:61:0c:59:09:a6:fa:5f:b4:33:62:
         55:06:a8:72:5a:f5:c6:e5:63:81:7c:9f:33:7c:f6:33:78:e9:
         82:0d:1c:fc:28:4f:92:0d:f1:5b:dc:bb:15:08:f5:aa:dd:56:
         90:9d:84:32:77:93:60:93:a4:33:17:a7:29:46:c8:fa:67:8b:
         00:e4:9a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----