Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e36392e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e36392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          kttrUJ2//QGZ4m6Te+mRj1zi5dkQkMwbIh/Frmp9FxQ=
Subject key identifier:   D0:71:B6:90:6B:FD:92:1E:14:C1:38:EC:82:D2:C4:62:88:87:6D:9E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       60192E9358733DD61F309AA0C427B998767BDF96
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e36392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:13 +0000
ROA not before:           Wed 29 Sep 2021 23:56:13 +0000
ROA not after:            Fri 30 Sep 2022 00:01:13 +0000
asID:                     17451
IP address blocks:        118.99.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:19:2e:93:58:73:3d:d6:1f:30:9a:a0:c4:27:b9:98:76:7b:df:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:13 2021 GMT
            Not After : Sep 30 00:01:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:a3:d2:a0:57:a0:4b:c7:14:d5:63:be:b6:
                    ab:06:31:ed:35:b0:95:c4:00:e2:1c:fd:a7:52:8f:
                    8d:f8:99:5a:6b:51:d7:e4:e8:e7:1a:0f:6a:8c:eb:
                    11:52:88:00:fc:1f:2c:67:26:0a:da:ab:73:8b:97:
                    a0:f2:66:32:78:9c:bf:9e:4a:0f:5a:a6:c5:9f:4a:
                    a8:82:d6:d2:48:89:d8:8c:a7:1a:b5:61:34:f2:8c:
                    6f:ad:48:87:54:a2:bc:01:b4:45:fe:73:a4:e0:4b:
                    ef:80:44:11:be:c4:fb:a7:da:ed:b0:d9:fb:09:8c:
                    3f:4b:1b:71:3d:80:32:1b:fe:46:f7:e3:ac:f0:08:
                    c3:34:b4:79:14:a4:3b:77:95:78:e8:c1:59:2a:81:
                    6f:87:40:e9:76:61:42:23:5a:36:68:21:59:82:6b:
                    c5:11:3d:f0:88:32:cf:ca:8f:88:ec:a5:a2:4b:09:
                    03:4a:58:28:8f:ad:66:a3:aa:18:43:69:5c:47:cb:
                    0e:e8:e3:cd:93:ed:d6:ea:50:68:d6:96:0a:7c:ad:
                    8b:9b:57:91:e3:ff:5a:10:71:73:49:ef:97:05:5b:
                    a4:d0:6f:fe:1d:62:db:d0:f9:ee:d4:53:cb:b0:24:
                    e1:05:6b:f9:b0:3c:80:2f:b8:13:f2:fc:5b:8e:00:
                    f7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:71:B6:90:6B:FD:92:1E:14:C1:38:EC:82:D2:C4:62:88:87:6D:9E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e36392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:0d:3f:88:1f:0c:16:3d:83:0d:d9:19:4f:22:57:39:9e:0f:
         ab:7e:c8:1e:f4:b8:04:07:5f:12:18:b6:74:f4:87:59:ba:db:
         52:ea:43:35:84:63:02:09:7f:3a:2f:36:b0:02:d4:e9:1b:56:
         5c:f8:23:70:f5:6b:68:d6:0d:e2:70:9c:e6:28:f5:eb:a8:14:
         94:94:7b:93:32:eb:e1:1a:b0:94:5d:db:2f:cb:64:6c:fb:e9:
         2f:4d:c1:37:12:2d:63:d6:ec:d4:45:80:7c:65:80:27:1c:4a:
         34:e8:b5:43:1d:de:ff:21:20:d5:87:8b:6a:9a:83:6c:ba:bf:
         f9:69:24:b6:83:8e:d2:8a:05:be:35:7e:9e:11:4c:a5:87:e7:
         13:55:94:76:23:a7:d3:76:97:3d:1a:53:20:d6:a6:cb:16:3b:
         3d:ce:29:85:1e:1a:4f:41:96:e9:66:21:4d:52:51:6c:b3:79:
         1c:a3:02:1d:7b:36:5e:da:41:3f:ec:f0:06:53:1e:0a:3e:87:
         7f:73:25:e9:13:df:94:32:19:06:1a:d9:95:c1:9d:40:86:27:
         8f:ff:bf:59:db:40:fb:7d:a9:5a:e8:a2:30:eb:57:82:7e:51:
         f5:1f:1c:ad:a7:93:3d:b0:cc:3f:c7:03:92:17:25:64:c9:2b:
         15:da:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----