Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38342e302f32332d3234203d3e203137343531.roa
File:                     3131382e39392e38342e302f32332d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ppSGcE8iGRZJrcW9Q7lICPIf/nt7zct1TeSolqmzE/s=
Subject key identifier:   8B:20:19:4B:63:06:92:CB:30:54:39:52:6E:8F:93:E4:85:D1:58:05
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7257B8E2FD582E5BBF5913E2CDF39587F7F3C709
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38342e302f32332d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:04 +0000
ROA not before:           Wed 29 Sep 2021 23:55:04 +0000
ROA not after:            Fri 30 Sep 2022 00:00:04 +0000
asID:                     17451
IP address blocks:        118.99.84.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:57:b8:e2:fd:58:2e:5b:bf:59:13:e2:cd:f3:95:87:f7:f3:c7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:04 2021 GMT
            Not After : Sep 30 00:00:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ba:32:bb:8a:9e:5f:da:5f:2f:85:35:54:12:
                    58:56:5f:1e:d3:20:9a:a6:a0:39:38:30:ba:fa:c6:
                    45:22:49:6b:5f:57:57:e8:f6:de:ad:06:90:09:c2:
                    de:c5:13:15:ae:d6:62:8a:73:8d:82:70:d0:eb:f8:
                    67:34:fc:6e:0a:65:e1:00:20:13:c9:f7:ab:64:96:
                    2b:b3:58:c7:cc:60:b9:8d:57:06:82:76:fb:5f:49:
                    b8:e8:c1:c1:f7:db:68:81:0a:32:1b:21:2a:55:ed:
                    00:a3:43:e4:5f:18:35:7d:cc:55:d3:5d:f7:c2:fa:
                    2b:ab:79:67:e5:95:e4:bc:25:00:07:3f:61:fe:23:
                    ad:26:02:6d:bc:8b:06:06:0b:73:10:55:0f:56:69:
                    b7:f6:49:06:5d:f6:5d:19:b0:61:50:67:9a:3e:d3:
                    b7:9e:91:9a:07:7c:bf:d5:87:a1:8c:8b:9c:49:99:
                    eb:8e:15:0d:e8:e1:5f:c7:5b:15:ed:2e:4e:25:e2:
                    cd:d0:23:c7:79:d2:a6:a3:5a:e3:8d:5d:87:13:81:
                    a1:c6:2e:e0:1b:a8:ea:14:96:97:62:dd:52:d5:a7:
                    2a:12:bb:aa:49:ab:91:cd:2e:b0:9c:c9:0b:c9:bf:
                    3a:e4:e4:cc:df:76:1c:c2:2c:c6:ca:d6:8f:34:cf:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:20:19:4B:63:06:92:CB:30:54:39:52:6E:8F:93:E4:85:D1:58:05
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38342e302f32332d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:56:d1:aa:55:ba:c7:9c:28:f3:d3:fb:99:17:f3:26:d1:d0:
         7a:90:47:1e:91:e9:03:b4:28:bb:10:12:7b:cf:20:c8:d8:3e:
         be:4c:3e:80:d8:d2:9d:e2:37:35:89:ec:00:e1:cb:3d:ef:1b:
         38:0b:65:19:6a:29:96:a6:0b:64:d6:06:87:6c:54:a5:67:12:
         b3:a1:63:cd:13:1c:8c:de:32:6f:1b:fa:3b:0a:24:57:90:3f:
         bb:fb:48:fd:7d:2b:32:95:30:d3:7d:1d:f9:c9:65:d7:88:fe:
         2d:8c:fd:c8:1d:10:78:8d:09:80:2c:70:a0:93:aa:3c:17:72:
         7b:94:ac:69:80:ff:a9:ce:56:24:a7:81:35:c4:98:d1:a3:2f:
         b5:bd:7a:5d:6b:f2:8b:a6:aa:ec:3c:b4:fa:44:ce:31:96:1c:
         51:b8:c0:6b:01:c5:2f:0e:b2:e6:4d:bd:f3:6b:7b:e9:39:eb:
         8f:94:fe:d2:23:16:3b:b9:d4:50:26:de:56:c6:33:54:24:07:
         dc:34:62:38:99:63:f3:a7:0a:42:2e:68:87:e1:74:7a:d0:e1:
         d1:ad:00:95:27:b2:a9:1f:ee:6a:7d:56:44:3b:ea:b0:1f:50:
         c1:23:68:9e:6b:f9:34:0d:da:3f:09:f9:e9:15:e6:68:dc:bc:
         37:5e:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----