Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38372e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e38372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          6ampiRd30+VV+Kq0qdx7SAaeoTu+c9w3PfQWNVGcG/M=
Subject key identifier:   99:76:F4:39:13:93:B4:F8:46:81:F0:E1:3D:29:5F:FA:A6:03:47:15
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7EDE8563B84571F89EB3846B03E59FA823C28DB8
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38372e302f32342d3234203d3e203137343531.roa
Signing time:             Wed 23 Jun 2021 01:19:11 +0000
ROA not before:           Wed 23 Jun 2021 01:14:11 +0000
ROA not after:            Thu 23 Jun 2022 01:19:11 +0000
asID:                     17451
IP address blocks:        118.99.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:de:85:63:b8:45:71:f8:9e:b3:84:6b:03:e5:9f:a8:23:c2:8d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jun 23 01:14:11 2021 GMT
            Not After : Jun 23 01:19:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:7f:2c:bf:b5:22:99:48:fc:94:04:4c:be:
                    f7:54:f1:f1:57:4f:00:a0:8a:58:1e:57:dc:87:02:
                    ee:09:5e:81:92:1f:f6:16:cd:7f:63:b5:71:31:3b:
                    7b:a4:c0:85:7e:3f:76:8a:87:b5:d1:e7:54:eb:60:
                    a2:c0:cd:db:4c:5d:f5:31:d8:25:6b:e1:76:26:97:
                    2a:85:f1:cd:ec:93:ef:c4:f4:46:fb:dc:b8:86:de:
                    b8:c3:03:a7:d1:93:ba:7c:bd:4c:97:4f:f0:85:43:
                    1b:67:ed:94:0d:a3:58:23:49:e0:f7:31:53:bf:e9:
                    51:ad:41:fa:25:5d:4d:20:46:5d:44:df:95:d0:b0:
                    8b:8a:37:86:6a:e5:fd:70:1c:ec:7b:81:85:02:b4:
                    80:6b:1c:2b:08:be:ef:78:9d:bc:dc:df:4a:c0:8b:
                    e5:b5:aa:8c:2a:50:03:8b:ba:24:bd:eb:71:2a:3b:
                    72:64:5e:77:09:90:ef:5b:83:c2:ba:5f:b9:05:07:
                    a9:bc:4f:6f:0b:6f:48:3b:38:60:4b:2f:e2:9a:cb:
                    6d:29:0a:7a:d1:f3:2d:90:9e:38:c5:dd:12:a7:f7:
                    b4:3d:b5:ab:81:b9:8a:e6:03:6b:63:b9:66:60:d1:
                    b0:54:1e:19:32:75:16:83:f6:0b:c5:41:14:e3:1c:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:76:F4:39:13:93:B4:F8:46:81:F0:E1:3D:29:5F:FA:A6:03:47:15
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e38372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:8a:11:bb:44:fa:10:a8:4d:51:ea:8c:bc:ec:c0:60:ea:8f:
         e2:1f:9f:15:ea:4e:3d:ef:60:67:ab:1d:67:90:90:93:25:1e:
         b9:a6:b7:f1:ad:91:9c:6e:b1:1d:c7:2f:7a:26:5d:9a:d4:21:
         d2:fe:1a:36:26:58:a1:88:27:bb:43:d5:21:52:ca:0d:23:2b:
         02:55:26:c7:dc:7a:57:4a:5a:e1:04:83:25:db:c1:ee:52:da:
         98:db:dd:ab:fc:74:b6:da:24:36:a4:ca:d8:6a:15:7a:ef:2e:
         60:5e:b7:93:e9:db:00:c2:2b:4d:b7:1d:e0:0e:18:41:11:2e:
         a7:be:48:7d:9a:6d:a1:32:5e:53:a9:24:ec:8f:e5:5d:9b:11:
         fe:61:6e:0c:d4:de:c4:8b:54:f6:02:2c:49:10:9c:99:03:ea:
         68:85:21:6d:db:20:c6:18:bf:f3:90:d4:77:b0:2b:34:03:d6:
         fc:41:44:ee:72:64:70:71:71:fc:94:01:e5:8a:e0:ae:6e:75:
         c1:3a:e5:93:7b:31:9d:c2:65:dc:d3:f6:df:2e:17:77:f5:6a:
         4c:f7:b4:62:8b:d7:7b:79:66:05:70:16:ae:0b:2c:d8:91:5c:
         5b:f6:c0:3d:f6:44:a8:ea:a2:9a:20:4e:af:48:5c:f5:d4:c9:
         96:58:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----