Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135322e302f32342d3234203d3e203137343531.roa
File:                     3130332e3233332e3135322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          8fyH1G5sTNpNm1WH8VDBk7Idz4ibZqvQ8xpieu6qtvY=
Subject key identifier:   77:D9:57:A5:3A:4F:5F:AB:CC:52:91:45:B3:DC:95:2C:1E:5C:E2:BB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       77A6CAB6DEF966F2ED559D57E2804F9874B84746
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:02 +0000
ROA not before:           Wed 29 Sep 2021 23:55:02 +0000
ROA not after:            Fri 30 Sep 2022 00:00:02 +0000
asID:                     17451
IP address blocks:        103.233.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a6:ca:b6:de:f9:66:f2:ed:55:9d:57:e2:80:4f:98:74:b8:47:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:02 2021 GMT
            Not After : Sep 30 00:00:02 2022 GMT
        Subject: CN=3082010A0282010100E32EB06B05A1F9874514FFAC91CC54DB68E6178ACCF92E358CEE320F36C2D031BF0367C9301609CBC383817DF9556A8C27832C9383EB76F6D7A49DC944BF483554B0BA5A02EBA091B56ED4F63F3062473C3D76ECB54FFC8B327FFD6F7E2AB2589A6EA26123EB4FFA77A4A851B035E7EAB245F2A41E415D12AB1C0E907D2E04F9456BAD90878B88FF2662164DDD56E8AA2728CAC26E822774BB00C1F08C0EA8351BC8C035C1F9BFDF8C615AAFC64AD31B0D7A6223C0F0871A024A70824A4DA111EE799D968750916681AD39EFB85A5D30D89071A27DCDB249F95BF9C27D8C248DA0A4D89F5ACB81947FFE065AFB7C28089ED4BF834A0E3F6BF229CBB75E98086B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2e:b0:6b:05:a1:f9:87:45:14:ff:ac:91:cc:
                    54:db:68:e6:17:8a:cc:f9:2e:35:8c:ee:32:0f:36:
                    c2:d0:31:bf:03:67:c9:30:16:09:cb:c3:83:81:7d:
                    f9:55:6a:8c:27:83:2c:93:83:eb:76:f6:d7:a4:9d:
                    c9:44:bf:48:35:54:b0:ba:5a:02:eb:a0:91:b5:6e:
                    d4:f6:3f:30:62:47:3c:3d:76:ec:b5:4f:fc:8b:32:
                    7f:fd:6f:7e:2a:b2:58:9a:6e:a2:61:23:eb:4f:fa:
                    77:a4:a8:51:b0:35:e7:ea:b2:45:f2:a4:1e:41:5d:
                    12:ab:1c:0e:90:7d:2e:04:f9:45:6b:ad:90:87:8b:
                    88:ff:26:62:16:4d:dd:56:e8:aa:27:28:ca:c2:6e:
                    82:27:74:bb:00:c1:f0:8c:0e:a8:35:1b:c8:c0:35:
                    c1:f9:bf:df:8c:61:5a:af:c6:4a:d3:1b:0d:7a:62:
                    23:c0:f0:87:1a:02:4a:70:82:4a:4d:a1:11:ee:79:
                    9d:96:87:50:91:66:81:ad:39:ef:b8:5a:5d:30:d8:
                    90:71:a2:7d:cd:b2:49:f9:5b:f9:c2:7d:8c:24:8d:
                    a0:a4:d8:9f:5a:cb:81:94:7f:fe:06:5a:fb:7c:28:
                    08:9e:d4:bf:83:4a:0e:3f:6b:f2:29:cb:b7:5e:98:
                    08:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D9:57:A5:3A:4F:5F:AB:CC:52:91:45:B3:DC:95:2C:1E:5C:E2:BB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e3:e8:07:7b:ea:50:37:9f:a5:10:c8:69:72:f8:6a:ee:3c:
         a8:a4:a8:96:c5:d1:fe:1b:3b:49:f7:1a:9f:6e:94:a8:25:20:
         03:2e:40:8f:a6:7e:16:39:1c:be:5e:c3:e6:81:09:f7:55:b8:
         5a:08:10:8d:25:bc:3b:66:d8:a5:f0:bf:26:b5:7d:71:7c:73:
         3f:d2:5e:59:cd:f4:d1:f6:ef:d6:ee:cb:52:b9:7c:f4:6e:5d:
         78:7b:a1:5e:4a:70:33:fe:37:6b:68:df:a8:c8:46:01:e7:a6:
         22:9b:77:7d:60:e8:c0:76:a0:ef:2e:3c:ce:ea:3c:a4:c0:b1:
         ea:ea:67:1c:f8:24:76:fa:47:fe:0f:50:3c:56:a3:bc:9e:fe:
         cd:40:30:57:74:a0:2b:cc:24:6d:1e:a3:d0:33:1f:02:54:9e:
         9b:54:83:38:be:56:b1:5f:59:e6:ac:bc:05:db:c9:05:01:af:
         00:68:da:d2:8a:2e:77:a4:71:1d:b1:56:a6:c5:b9:a8:2f:0a:
         9c:dc:e5:2c:18:0b:15:d5:7a:23:6a:8a:c6:58:41:5b:3b:95:
         bb:bf:d5:4f:6c:19:a5:4e:cf:df:7e:15:90:80:3c:2e:9e:74:
         8e:15:16:09:91:94:45:e1:ca:36:1b:30:42:e1:3d:7c:e4:6e:
         09:48:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----