Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e37312e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e37312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          y913BY5v5KIOVF2Tqhah9uM+wf8iushmRporh7+L4ZU=
Subject key identifier:   AB:48:6F:17:6F:B2:68:5A:56:19:93:E5:21:26:1F:1D:13:D8:2A:CF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2B06F7D8814CD4BB193B9B113A92AF69F4173085
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e37312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:53 +0000
ROA not before:           Wed 29 Sep 2021 23:55:53 +0000
ROA not after:            Fri 30 Sep 2022 00:00:53 +0000
asID:                     17451
IP address blocks:        118.99.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:06:f7:d8:81:4c:d4:bb:19:3b:9b:11:3a:92:af:69:f4:17:30:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:53 2021 GMT
            Not After : Sep 30 00:00:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:0a:29:b4:5c:d3:dc:89:24:43:45:0d:21:
                    8b:1a:20:93:5b:94:fd:fd:b6:d2:c9:94:df:5d:90:
                    87:f7:3f:02:9f:45:8f:b3:a8:e2:6e:48:f5:5b:7c:
                    a0:b2:3c:fa:73:73:43:43:29:96:24:d0:17:cd:62:
                    c6:ba:33:89:7b:16:f8:d0:0d:f3:f1:09:d5:8e:65:
                    b4:dd:59:f3:a0:d3:c2:d2:ff:6a:a2:10:ed:51:a8:
                    4e:30:45:e9:e7:80:0f:74:34:30:a1:33:08:f0:c2:
                    2a:49:da:bc:44:2a:b4:5f:94:5a:84:d0:b9:19:6b:
                    fa:a0:bc:47:2b:5e:95:26:38:c4:24:99:58:86:02:
                    32:a8:1f:6d:10:8c:bf:40:b3:5c:19:dd:32:70:8b:
                    35:96:7d:ae:f3:22:fe:51:7c:07:bd:5b:90:f7:49:
                    11:f7:3b:9c:aa:8a:30:af:3e:0d:17:f8:29:b1:e5:
                    3e:d0:47:4e:05:59:d4:a7:78:7d:b6:2b:de:3b:2b:
                    12:fb:d5:f5:f0:69:15:d7:31:ac:35:a0:8a:34:1d:
                    d7:91:ea:54:47:77:db:38:c6:93:bc:1b:c7:5b:92:
                    da:8c:e5:24:93:79:11:c1:1f:90:23:69:e8:64:aa:
                    b6:0d:0b:92:19:e0:85:d9:8a:08:0f:f3:2d:be:0f:
                    4a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:48:6F:17:6F:B2:68:5A:56:19:93:E5:21:26:1F:1D:13:D8:2A:CF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e37312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:cd:e6:b9:71:ac:22:47:82:90:e1:39:dc:e5:63:f6:f7:b2:
         47:af:d7:a4:e9:71:0f:c1:2b:24:70:8c:43:ec:54:54:73:28:
         c6:d1:3f:85:92:85:25:16:3c:9c:f5:35:7d:83:34:a8:4a:ef:
         a4:f6:9f:ed:a6:c2:91:e3:5f:94:3f:e1:e1:6e:ab:08:e5:f5:
         c9:8a:84:55:0f:70:a9:95:f0:24:75:2b:94:ef:3c:8c:28:00:
         3c:51:36:b6:31:c9:73:3e:ae:f2:77:f4:96:d9:97:40:e0:d0:
         dc:bb:f4:56:d0:1f:25:7f:0d:58:bc:7a:0f:d6:66:2f:9f:72:
         95:96:6d:9e:99:d9:ad:2b:74:68:98:27:42:2e:00:94:c7:46:
         20:53:0a:fb:e9:59:4e:d5:0d:0c:f4:eb:5f:9a:a5:fc:9b:a0:
         be:9b:40:c4:87:68:2c:98:2f:03:4e:34:18:bb:89:6d:36:7b:
         82:f3:54:20:c3:59:75:97:a7:9f:1f:91:cf:55:fc:de:e5:0b:
         05:38:95:fe:e9:69:3e:b0:12:e5:4f:2b:ef:78:88:ae:09:62:
         47:e9:2a:18:90:6d:98:3d:9f:35:46:37:c3:bd:31:6c:e5:99:
         7b:55:ae:62:5b:ec:a5:4f:17:c2:93:4b:dd:5b:90:75:dc:d8:
         e5:17:ce:0d
-----BEGIN CERTIFICATE-----
MIIHIjCCBgqgAwIBAgIUKwb32IFM1LsZO5sROpKvafQXMIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTNaFw0yMjA5MzAwMDAwNTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzlENzBBMjlCNDVDRDNEQzg5
MjQ0MzQ1MEQyMThCMUEyMDkzNUI5NEZERkRCNkQyQzk5NERGNUQ5MDg3RjczRjAy
OUY0NThGQjNBOEUyNkU0OEY1NUI3Q0EwQjIzQ0ZBNzM3MzQzNDMyOTk2MjREMDE3
Q0Q2MkM2QkEzMzg5N0IxNkY4RDAwREYzRjEwOUQ1OEU2NUI0REQ1OUYzQTBEM0My
RDJGRjZBQTIxMEVENTFBODRFMzA0NUU5RTc4MDBGNzQzNDMwQTEzMzA4RjBDMjJB
NDlEQUJDNDQyQUI0NUY5NDVBODREMEI5MTk2QkZBQTBCQzQ3MkI1RTk1MjYzOEM0
MjQ5OTU4ODYwMjMyQTgxRjZEMTA4Q0JGNDBCMzVDMTlERDMyNzA4QjM1OTY3REFF
RjMyMkZFNTE3QzA3QkQ1QjkwRjc0OTExRjczQjlDQUE4QTMwQUYzRTBEMTdGODI5
QjFFNTNFRDA0NzRFMDU1OUQ0QTc3ODdEQjYyQkRFM0IyQjEyRkJENUY1RjA2OTE1
RDczMUFDMzVBMDhBMzQxREQ3OTFFQTU0NDc3N0RCMzhDNjkzQkMxQkM3NUI5MkRB
OENFNTI0OTM3OTExQzExRjkwMjM2OUU4NjRBQUI2MEQwQjkyMTlFMDg1RDk4QTA4
MEZGMzJEQkUwRjRBMzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAydcKKbRc09yJJENFDSGLGiCTW5T9/bbSyZTfXZCH9z8Cn0WPs6ji
bkj1W3ygsjz6c3NDQymWJNAXzWLGujOJexb40A3z8QnVjmW03VnzoNPC0v9qohDt
UahOMEXp54APdDQwoTMI8MIqSdq8RCq0X5RahNC5GWv6oLxHK16VJjjEJJlYhgIy
qB9tEIy/QLNcGd0ycIs1ln2u8yL+UXwHvVuQ90kR9zucqoowrz4NF/gpseU+0EdO
BVnUp3h9tiveOysS+9X18GkV1zGsNaCKNB3XkepUR3fbOMaTvBvHW5LajOUkk3kR
wR+QI2noZKq2DQuSGeCF2YoID/Mtvg9KOQIDAQABo4ICMDCCAiwwHQYDVR0OBBYE
FKtIbxdvsmhaVhmT5SEmHx0T2CrPMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGgBggrBgEFBQcB
CwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzgyZTM5MzkyZTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQz
NTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAdmNHMA0GCSqGSIb3DQEBCwUAA4IBAQByzea5cawiR4KQ
4Tnc5WP297JHr9ek6XEPwSskcIxD7FRUcyjG0T+FkoUlFjyc9TV9gzSoSu+k9p/t
psKR41+UP+HhbqsI5fXJioRVD3CplfAkdSuU7zyMKAA8UTa2MclzPq7yd/SW2ZdA
4NDcu/RW0B8lfw1YvHoP1mYvn3KVlm2emdmtK3RomCdCLgCUx0YgUwr76VlO1Q0M
9OtfmqX8m6C+m0DEh2gsmC8DTjQYu4ltNnuC81Qgw1l1l6efH5HPVfze5QsFOJX+
6Wk+sBLlTyvveIiuCWJH6SoYkG2YPZ81RjfDvTFs5Zl7Va5iW+ylTxfCk0vdW5B1
3NjlF84N
-----END CERTIFICATE-----