Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131302e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e3131302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          kWKdO7pD7ex1tmjg/Bi0AzQE2vfwVQHTkLZBXA2mlNE=
Subject key identifier:   86:3B:D2:D8:3F:AB:3A:62:13:29:F0:53:17:1A:E1:F1:60:EE:D9:D0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       233D498F8C3614FD6FA2D481C3F97E3CCA779482
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:03 +0000
ROA not before:           Wed 29 Sep 2021 23:56:03 +0000
ROA not after:            Fri 30 Sep 2022 00:01:03 +0000
asID:                     17451
IP address blocks:        118.99.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3d:49:8f:8c:36:14:fd:6f:a2:d4:81:c3:f9:7e:3c:ca:77:94:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:03 2021 GMT
            Not After : Sep 30 00:01:03 2022 GMT
        Subject: CN=3082010A0282010100BFF5D69C432A4280C37680E9169F74D865C445D4383CCD03E321D00F256992D01D750166650E0EC6A2E5FCA169AFAA43F7A19338E919377F7E4AD782C117002AB5AB4BF2E064F97121AC05207689E6B6156DEB37A392E20A4B317406D52421AA4BF1E8459C15A52AFEAEA39270EAD61EDD14BFC4C6F3EF03793B5BD6EDFC7BB934AB9218EF39282947435322D562AECF4D8DEB54C36731E86454D4E403A95B33554DD9C3FB277F58D987BA97DC1CD2F0978305EFBE4C11104DDB9D4FAE4EF272F1F90CE49659FE81C742BC6B1B74E03025AE73E3DAA1B99668A26A7E7DB693A686A7B71C83410DD5312A9D5C02D969BF33B3E060CB29665D57F5A6BBCB8CA7A30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:d6:9c:43:2a:42:80:c3:76:80:e9:16:9f:
                    74:d8:65:c4:45:d4:38:3c:cd:03:e3:21:d0:0f:25:
                    69:92:d0:1d:75:01:66:65:0e:0e:c6:a2:e5:fc:a1:
                    69:af:aa:43:f7:a1:93:38:e9:19:37:7f:7e:4a:d7:
                    82:c1:17:00:2a:b5:ab:4b:f2:e0:64:f9:71:21:ac:
                    05:20:76:89:e6:b6:15:6d:eb:37:a3:92:e2:0a:4b:
                    31:74:06:d5:24:21:aa:4b:f1:e8:45:9c:15:a5:2a:
                    fe:ae:a3:92:70:ea:d6:1e:dd:14:bf:c4:c6:f3:ef:
                    03:79:3b:5b:d6:ed:fc:7b:b9:34:ab:92:18:ef:39:
                    28:29:47:43:53:22:d5:62:ae:cf:4d:8d:eb:54:c3:
                    67:31:e8:64:54:d4:e4:03:a9:5b:33:55:4d:d9:c3:
                    fb:27:7f:58:d9:87:ba:97:dc:1c:d2:f0:97:83:05:
                    ef:be:4c:11:10:4d:db:9d:4f:ae:4e:f2:72:f1:f9:
                    0c:e4:96:59:fe:81:c7:42:bc:6b:1b:74:e0:30:25:
                    ae:73:e3:da:a1:b9:96:68:a2:6a:7e:7d:b6:93:a6:
                    86:a7:b7:1c:83:41:0d:d5:31:2a:9d:5c:02:d9:69:
                    bf:33:b3:e0:60:cb:29:66:5d:57:f5:a6:bb:cb:8c:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3B:D2:D8:3F:AB:3A:62:13:29:F0:53:17:1A:E1:F1:60:EE:D9:D0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:70:2e:e9:b0:46:cb:1c:2e:1d:50:b0:5e:14:7a:58:e5:
         0e:e8:fc:63:58:86:53:41:89:c0:c3:ac:c5:cf:66:26:0b:6a:
         07:d5:c8:fb:ba:ca:3b:f0:69:76:9d:55:a8:7a:72:54:d7:52:
         5f:83:8a:12:1c:eb:d5:01:ac:cb:f1:39:dc:b2:08:09:60:80:
         99:02:7b:45:ca:20:ca:4a:c3:f8:d3:60:14:2e:8f:e1:43:94:
         ea:bc:28:d2:12:eb:2e:1d:11:31:1b:f4:2f:90:e2:de:b4:5b:
         8b:0a:70:37:15:34:37:85:85:99:b0:41:cd:4e:2f:0e:4b:ee:
         fc:0e:9f:45:c0:fd:20:d3:d6:58:ed:ca:ed:f2:d2:69:46:8a:
         ab:b9:b9:e0:53:1f:f7:46:b1:3f:48:9c:77:93:29:c8:07:9a:
         2b:3f:4f:78:da:a6:ff:77:66:5a:ff:83:08:80:fe:be:15:cf:
         eb:7b:30:20:ec:81:37:83:24:e2:04:94:8c:36:9e:1a:a4:7a:
         f5:9f:9e:48:f8:33:ec:2a:c4:c5:1c:92:fd:ac:d1:f6:47:dc:
         e3:a5:50:c9:3f:33:1d:bb:07:41:74:7d:69:02:90:9e:8b:d3:
         ec:42:d7:6a:35:13:8e:d1:5d:4c:35:54:8c:bb:7c:5e:6b:72:
         6c:66:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----