Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36352e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e36352e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          1mzVrfgA05EET7GcC+hqQPn3ILPdgRrcp6hr9tmIVvE=
Subject key identifier:   67:FB:33:15:62:DF:0D:6C:0A:8E:8D:39:73:BA:81:87:AB:0C:D6:1A
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       64993AF157787CFB836E74950A5F860E6D7F806B
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36352e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 11:59:25 +0000
ROA not before:           Thu 20 May 2021 11:54:25 +0000
ROA not after:            Fri 20 May 2022 11:59:25 +0000
asID:                     38511
IP address blocks:        115.124.65.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:99:3a:f1:57:78:7c:fb:83:6e:74:95:0a:5f:86:0e:6d:7f:80:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:54:25 2021 GMT
            Not After : May 20 11:59:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:90:2a:2a:f4:51:8a:22:25:46:32:39:f9:
                    81:dc:9c:8f:6c:91:aa:83:7e:d2:7c:93:6e:fd:01:
                    3d:f3:37:e7:2b:b0:ef:6d:7a:6f:4a:65:75:2a:42:
                    40:a6:95:32:6c:2c:58:05:e6:5f:c3:5e:bb:f1:77:
                    c6:de:80:e2:a0:07:47:05:75:cd:31:2c:88:13:13:
                    d8:9b:84:b3:ab:c1:05:11:1e:26:28:db:a9:90:35:
                    e2:5a:97:e0:bb:6b:1f:02:b5:6f:2f:b4:3f:29:c0:
                    55:87:d4:84:72:f2:8f:e2:c4:c0:8c:4e:01:e5:aa:
                    ba:bd:f3:96:46:70:c9:d8:cf:f6:65:c8:f4:08:60:
                    fb:ba:19:a5:6d:c0:3c:e9:59:94:f7:25:c2:75:88:
                    36:ab:cf:83:97:58:d4:6d:8b:42:63:4a:97:de:cf:
                    99:24:cb:21:7b:55:97:fc:f5:fb:70:18:32:39:cd:
                    8b:43:f0:7b:41:7f:ea:75:f8:ee:aa:b6:82:08:5b:
                    93:30:5c:de:c1:66:10:63:e0:f4:27:c6:85:33:ec:
                    49:1c:21:a8:af:49:9e:db:9e:19:b8:1a:03:27:c9:
                    8d:b3:74:0e:2f:d2:45:83:cf:3d:bd:a0:77:9f:cf:
                    b2:ee:63:8a:4a:c0:3e:a1:89:dd:c5:f2:8f:82:e2:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FB:33:15:62:DF:0D:6C:0A:8E:8D:39:73:BA:81:87:AB:0C:D6:1A
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36352e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:82:51:a1:59:d0:44:05:b6:5a:96:27:d8:16:a9:ca:eb:c2:
         e1:60:44:3f:e9:3a:14:d7:7f:ec:02:02:00:a3:2a:71:d6:0a:
         de:24:bf:a1:d7:af:5e:5e:58:50:e7:08:43:99:23:aa:5d:6f:
         2b:97:e8:9c:f9:60:41:5b:c9:56:c8:00:50:f7:a0:84:49:b2:
         03:f5:16:71:79:9f:49:a0:1a:b4:42:04:e6:6d:15:4a:26:48:
         34:58:1d:aa:20:79:77:bb:07:18:de:04:e3:c3:5b:fb:c8:fe:
         7a:4b:54:52:e5:97:5e:f1:8a:2a:73:ee:97:3a:74:3d:b6:72:
         7a:34:a5:5f:55:c2:3d:50:d6:89:94:64:01:8f:e8:93:fc:a3:
         86:a0:3c:b9:8a:37:22:7e:b3:5c:cf:cd:fd:5a:3e:a2:b8:4a:
         c4:1d:e1:57:52:4a:f2:98:3b:5d:32:8f:6a:42:be:ca:82:88:
         98:4f:f3:d3:64:55:85:f8:84:4a:53:26:db:b6:a0:fe:b4:f9:
         a4:a2:e5:81:e7:0b:45:64:2d:ef:86:4f:65:de:dd:c7:67:1d:
         95:10:2c:cf:6d:13:e9:81:28:8f:f1:ad:1d:ea:a9:34:69:32:
         cb:42:f3:03:f4:bd:e6:23:37:66:4a:1e:43:71:3b:1f:fa:56:
         57:af:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----