Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131362e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e3131362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          yQmENHPBwfzm2/3cQyLSk9whxCO18qgZCGW8fSadAsg=
Subject key identifier:   2E:29:36:78:AE:66:A1:FF:65:F4:20:1A:8B:1C:E2:09:CE:3A:33:9D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3BF9161D29E20796F8CA2D523B96EFF44D5FFD45
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:59 +0000
ROA not before:           Wed 29 Sep 2021 23:55:59 +0000
ROA not after:            Fri 30 Sep 2022 00:00:59 +0000
asID:                     17451
IP address blocks:        118.99.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f9:16:1d:29:e2:07:96:f8:ca:2d:52:3b:96:ef:f4:4d:5f:fd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:59 2021 GMT
            Not After : Sep 30 00:00:59 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:d0:35:c2:ba:a4:7f:0c:38:de:2f:fb:80:
                    e0:88:88:14:98:cb:9b:33:ec:67:9f:0a:6e:ef:bb:
                    82:44:2a:0b:ca:1a:62:31:1e:14:62:51:5a:15:0b:
                    79:7e:44:7b:a9:a8:5a:ac:1e:d4:8e:f7:f6:2e:04:
                    1f:a8:13:c4:fb:1b:9c:57:05:fc:10:78:1a:61:1b:
                    23:0f:7d:35:ef:a9:89:b8:9f:56:f6:91:2a:91:41:
                    10:1e:0d:38:2d:78:ac:1b:b6:91:07:31:af:ac:78:
                    40:45:3f:ea:eb:b1:a1:e6:a6:a6:d1:0e:62:8c:0e:
                    eb:ba:a7:7b:af:5f:8b:41:24:1c:71:02:6e:aa:3b:
                    af:e1:05:f7:2a:dd:88:68:c4:1c:ab:37:50:30:eb:
                    79:1b:51:fa:28:18:33:a8:c9:c0:29:fa:82:94:ec:
                    f2:5e:01:a5:ba:d8:66:35:71:54:f6:aa:ee:6f:24:
                    03:ad:fe:a1:72:67:7e:a2:9c:ae:b6:f6:c8:12:a1:
                    e5:80:3b:84:a2:7f:27:6a:72:3b:a8:ef:3d:fa:07:
                    65:e9:f1:54:f2:03:6b:2a:e1:0e:89:73:8d:8b:c9:
                    ab:45:e3:53:0a:04:a5:45:90:dc:2e:eb:b6:26:29:
                    57:a5:63:6e:6b:fd:e2:23:49:bc:56:eb:ae:27:c4:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:29:36:78:AE:66:A1:FF:65:F4:20:1A:8B:1C:E2:09:CE:3A:33:9D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9a:de:96:64:ab:6b:2f:dc:e4:52:f5:0e:de:b9:dc:7d:24:
         0a:09:07:08:08:7f:82:45:f0:5e:3d:08:7f:62:cf:06:9e:4a:
         8b:8e:3a:a2:bb:4f:eb:24:fa:7d:13:cf:c7:bc:2d:e5:8a:08:
         68:dd:ee:15:89:f5:2a:2b:bf:17:42:8c:d4:43:c0:1e:22:8a:
         78:7d:c5:f7:89:8a:31:67:7f:64:f8:ec:50:71:c9:11:4b:d2:
         bf:66:9c:b3:79:c4:f3:0a:be:41:43:a1:bd:58:cc:0c:a7:44:
         db:c2:d0:d5:73:92:51:0e:c3:6a:40:14:d2:d0:0d:38:4a:b8:
         f6:90:7c:56:cf:e3:f2:5b:de:67:6d:b7:00:d1:85:5d:21:9b:
         2e:45:5c:62:3f:0e:86:fe:95:80:71:2b:1b:ae:74:67:41:e3:
         3d:de:b9:d5:5c:d2:84:72:e1:90:ee:94:0b:3e:bf:fe:8b:1a:
         09:88:92:3a:c7:35:da:e8:4c:98:2a:61:8b:5f:23:33:13:a2:
         8b:ce:ca:f3:44:c7:aa:c2:a7:f4:92:d4:0a:2d:d0:d2:be:ad:
         44:58:d5:03:14:bd:d2:de:31:51:30:e6:be:b1:fd:02:d4:b3:
         6f:76:65:98:85:95:65:f9:1b:b3:c9:d0:09:e8:0c:24:6d:11:
         8d:f7:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----