Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38362e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e38362e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          3ym8WilfdiuXS//+wRJsfL7Zdk2Qj57vBpX8qsV+UM4=
Subject key identifier:   3D:BD:59:63:5F:44:54:9A:C9:C7:AE:CE:A1:46:D6:FF:3A:83:2F:F3
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       71FAB3900420C5F5FF78F9ADCCCDFA6A0B358237
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38362e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:10:08 +0000
ROA not before:           Thu 20 May 2021 12:05:08 +0000
ROA not after:            Fri 20 May 2022 12:10:08 +0000
asID:                     38511
IP address blocks:        115.124.86.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fa:b3:90:04:20:c5:f5:ff:78:f9:ad:cc:cd:fa:6a:0b:35:82:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:05:08 2021 GMT
            Not After : May 20 12:10:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:01:b8:f8:d3:91:43:ae:95:9b:4d:2e:5c:
                    b0:52:ab:43:74:27:6c:2b:81:94:42:b7:c5:3d:1a:
                    3a:50:e6:49:49:b1:11:ea:8c:0c:ae:92:b3:68:93:
                    55:ac:fc:92:7d:af:12:ba:73:44:53:8f:9d:fd:cb:
                    70:9e:f4:b0:f5:8d:dc:52:df:03:5e:cb:c8:45:83:
                    20:5f:56:0c:23:8e:4a:85:6f:68:57:ff:83:84:62:
                    f7:b8:3f:4d:00:04:29:77:f6:e7:8f:a4:eb:b9:ee:
                    30:b0:7d:bd:9a:06:3e:63:54:92:18:1a:27:d0:a3:
                    35:24:9c:c9:52:9a:41:86:3c:7a:c3:d3:7c:b9:92:
                    36:8f:eb:4f:60:65:79:75:5a:b5:3d:5b:a6:d8:01:
                    2c:cf:1a:ec:9e:4e:b0:f7:f8:cf:c5:f0:ab:aa:b3:
                    47:ea:d5:3c:98:bb:49:a9:17:22:eb:32:84:fe:4d:
                    ac:27:a0:e4:7a:cb:3e:73:3f:ef:e8:cc:f1:f4:4b:
                    3d:f6:94:b6:b2:72:76:b4:83:32:12:e8:99:7d:d1:
                    5e:71:06:06:ee:d0:f7:da:2d:a5:54:3e:40:3a:3a:
                    9c:fb:83:2b:8e:ec:dc:d4:ac:be:a3:74:7f:61:7e:
                    e7:c7:be:80:a9:5e:5b:4c:b5:5e:3e:72:7d:97:95:
                    60:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BD:59:63:5F:44:54:9A:C9:C7:AE:CE:A1:46:D6:FF:3A:83:2F:F3
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38362e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f3:97:50:fa:cb:41:a1:56:4e:a7:93:10:2b:e6:a5:80:6c:
         96:96:19:f6:98:e6:3d:ef:e3:8f:ba:10:bd:2c:33:e7:7a:46:
         0c:49:a3:35:94:f0:3f:4e:8c:69:f4:b6:d4:a4:47:e0:43:60:
         81:aa:f7:fa:0c:09:76:ea:5a:a7:6c:fd:96:43:0b:fa:70:1b:
         58:7f:a3:9b:94:ae:cd:d5:50:09:c2:24:33:e4:bf:85:2a:b5:
         ee:31:6a:24:48:14:c5:78:a6:5e:81:b4:eb:82:5e:8e:30:4a:
         23:ce:6d:b0:a2:66:e8:6c:97:d2:42:8f:b1:f3:e2:bd:62:47:
         0f:9d:24:87:17:a8:7f:92:88:7c:32:97:0c:10:92:81:7b:8e:
         1e:d8:e9:d0:fe:1e:75:38:ea:a0:2e:8d:f4:5e:b0:82:6d:bb:
         2d:89:e4:79:31:5b:f2:2a:88:fe:7d:01:d3:54:8f:ed:a2:8f:
         80:86:4d:63:c2:66:2a:13:b8:0e:cd:32:ae:90:82:35:37:13:
         43:4e:d5:9a:38:7e:2b:1e:34:0d:a1:55:79:5f:cb:f0:07:43:
         41:f5:ee:8b:74:b8:4b:ee:23:4a:aa:89:09:e7:da:5e:1f:30:
         50:09:6a:cf:da:bf:e5:8a:45:17:b4:de:95:cc:35:73:da:b1:
         ec:b3:73:4d
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUcfqzkAQgxfX/ePmtzM36ags1gjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA1MjAxMjA1MDhaFw0yMjA1MjAxMjEwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0ZFMjAxQjhGOEQzOTE0M0FF
OTU5QjREMkU1Q0IwNTJBQjQzNzQyNzZDMkI4MTk0NDJCN0M1M0QxQTNBNTBFNjQ5
NDlCMTExRUE4QzBDQUU5MkIzNjg5MzU1QUNGQzkyN0RBRjEyQkE3MzQ0NTM4RjlE
RkRDQjcwOUVGNEIwRjU4RERDNTJERjAzNUVDQkM4NDU4MzIwNUY1NjBDMjM4RTRB
ODU2RjY4NTdGRjgzODQ2MkY3QjgzRjREMDAwNDI5NzdGNkU3OEZBNEVCQjlFRTMw
QjA3REJEOUEwNjNFNjM1NDkyMTgxQTI3RDBBMzM1MjQ5Q0M5NTI5QTQxODYzQzdB
QzNEMzdDQjk5MjM2OEZFQjRGNjA2NTc5NzU1QUI1M0Q1QkE2RDgwMTJDQ0YxQUVD
OUU0RUIwRjdGOENGQzVGMEFCQUFCMzQ3RUFENTNDOThCQjQ5QTkxNzIyRUIzMjg0
RkU0REFDMjdBMEU0N0FDQjNFNzMzRkVGRThDQ0YxRjQ0QjNERjY5NEI2QjI3Mjc2
QjQ4MzMyMTJFODk5N0REMTVFNzEwNjA2RUVEMEY3REEyREE1NTQzRTQwM0EzQTlD
RkI4MzJCOEVFQ0RDRDRBQ0JFQTM3NDdGNjE3RUU3QzdCRTgwQTk1RTVCNENCNTVF
M0U3MjdEOTc5NTYwQjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz+IBuPjTkUOulZtNLlywUqtDdCdsK4GUQrfFPRo6UOZJSbER6owM
rpKzaJNVrPySfa8SunNEU4+d/ctwnvSw9Y3cUt8DXsvIRYMgX1YMI45KhW9oV/+D
hGL3uD9NAAQpd/bnj6True4wsH29mgY+Y1SSGBon0KM1JJzJUppBhjx6w9N8uZI2
j+tPYGV5dVq1PVum2AEszxrsnk6w9/jPxfCrqrNH6tU8mLtJqRci6zKE/k2sJ6Dk
ess+cz/v6Mzx9Es99pS2snJ2tIMyEuiZfdFecQYG7tD32i2lVD5AOjqc+4Mrjuzc
1Ky+o3R/YX7nx76AqV5bTLVePnJ9l5VgswIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FD29WWNfRFSayceuzqFG1v86gy/zMB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMxMzUyZTMxMzIzNDJlMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABzfFYwDQYJKoZIhvcNAQELBQADggEBABLzl1D6y0Gh
Vk6nkxAr5qWAbJaWGfaY5j3v44+6EL0sM+d6RgxJozWU8D9OjGn0ttSkR+BDYIGq
9/oMCXbqWqds/ZZDC/pwG1h/o5uUrs3VUAnCJDPkv4Uqte4xaiRIFMV4pl6BtOuC
Xo4wSiPObbCiZuhsl9JCj7Hz4r1iRw+dJIcXqH+SiHwylwwQkoF7jh7Y6dD+HnU4
6qAujfResIJtuy2J5HkxW/IqiP59AdNUj+2ij4CGTWPCZioTuA7NMq6QgjU3E0NO
1Zo4fiseNA2hVXlfy/AHQ0H17ot0uEvuI0qqiQnn2l4fMFAJas/av+WKRRe03pXM
NXPaseyzc00=
-----END CERTIFICATE-----