Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e36352e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e36352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          tT8Fz87rZDqcjXc/qbXYnoKYAA0o9bVnie4VpUTQ9rA=
Subject key identifier:   2B:D7:6C:2D:DD:FE:44:96:F6:A0:7B:62:5D:99:91:31:E7:DC:DB:00
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7AC3B2667EBE3337C5E405698084AB682B24CBA2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e36352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:01 +0000
ROA not before:           Wed 29 Sep 2021 23:55:01 +0000
ROA not after:            Fri 30 Sep 2022 00:00:01 +0000
asID:                     17451
IP address blocks:        118.99.65.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c3:b2:66:7e:be:33:37:c5:e4:05:69:80:84:ab:68:2b:24:cb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:01 2021 GMT
            Not After : Sep 30 00:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:aa:f1:e6:21:b4:34:cd:e5:74:67:da:e0:e8:
                    2e:5e:a6:78:c8:f7:4f:e9:77:14:44:7a:f0:b2:02:
                    05:f9:dd:35:21:6a:5f:9d:60:be:74:ba:d6:e0:cf:
                    3b:ce:fb:a1:a3:a3:60:86:4a:48:6a:f7:b3:6b:e2:
                    51:8a:d8:1b:e9:7c:02:7f:4d:a6:9f:01:97:98:39:
                    0f:c7:47:37:ca:9f:62:2c:2e:83:2b:73:50:9f:dc:
                    e4:5a:61:93:2d:cc:19:5c:8b:51:04:c6:ad:86:2b:
                    6f:9a:37:f8:3d:6a:bf:8b:28:14:85:4d:94:69:14:
                    d5:cb:f5:72:24:62:84:7c:36:90:97:e6:9e:ef:aa:
                    d8:af:9a:42:e0:27:9e:da:3a:2a:b2:b0:d2:a8:05:
                    c8:89:a7:0e:d6:72:81:59:e1:ab:c4:e4:81:ca:5a:
                    5a:ff:09:bb:c1:12:99:af:55:32:e6:63:24:69:e7:
                    d5:5f:07:68:93:5a:c0:b9:98:5f:3c:37:f3:dd:44:
                    cf:b3:4e:b6:d1:19:26:c5:a5:15:45:82:99:98:2c:
                    23:d6:dc:9c:99:d2:3e:b7:70:1e:a3:5e:34:5c:67:
                    68:80:c7:64:73:08:54:f0:b9:ff:a2:38:f4:ce:e2:
                    ad:da:b2:fd:43:1b:96:6e:91:c1:0b:57:83:ed:10:
                    b3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D7:6C:2D:DD:FE:44:96:F6:A0:7B:62:5D:99:91:31:E7:DC:DB:00
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e36352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:a7:9a:48:47:b9:c6:d6:1c:e5:f9:1a:7d:0e:b3:7a:6f:d3:
         65:fe:07:04:6e:52:27:7e:4e:c2:b7:1b:55:19:d6:5a:c0:02:
         7a:aa:55:f9:74:9f:e9:10:18:22:b2:e2:b6:7d:8f:ee:20:72:
         78:be:ed:fe:ab:e0:a3:be:85:dd:74:a8:09:0b:f7:44:71:73:
         29:a2:d3:09:3e:6d:82:2b:80:51:c6:97:62:7e:9a:b8:01:96:
         40:aa:ab:0c:f3:68:5f:49:a9:b5:68:57:20:95:96:89:b0:0d:
         0f:d6:7c:6a:18:88:dd:3f:3c:d3:09:76:e7:d9:c4:cf:cb:c9:
         9b:f5:fa:c7:56:ce:9a:a9:18:ce:c0:f6:45:9b:cf:6b:cc:e7:
         7a:32:a3:f5:c5:69:0b:25:06:27:93:05:27:3f:4a:e5:b1:f1:
         2d:f1:c6:cf:7c:a3:99:f3:2d:52:d2:b4:79:ff:03:55:7d:cf:
         5b:a7:7a:62:6b:64:37:50:2c:81:8d:36:85:9a:6a:a4:cc:c9:
         d3:fa:51:58:c3:0c:ca:58:f6:f1:3b:58:32:ff:1a:83:ba:2b:
         da:6a:5f:6b:a5:0b:0f:8b:fd:b2:c7:4f:4d:54:6b:c9:0f:b6:
         28:fc:a7:4a:dd:db:bd:25:64:4b:7f:24:4a:0d:aa:b9:65:88:
         79:ef:24:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----