Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135332e302f32342d3234203d3e203137343531.roa
File:                     3130332e3233332e3135332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          L7TH/yDPZ2+pks3OwQgI87eKlJD/Cct6Ud+mFYDVx+A=
Subject key identifier:   56:39:A8:C5:13:DA:51:37:2B:02:24:1B:E7:E8:7A:4F:04:7A:78:31
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       61FF51D54674BB77E7196F6FB8AA1B1CB51C2706
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:14 +0000
ROA not before:           Wed 29 Sep 2021 23:56:14 +0000
ROA not after:            Fri 30 Sep 2022 00:01:14 +0000
asID:                     17451
IP address blocks:        103.233.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ff:51:d5:46:74:bb:77:e7:19:6f:6f:b8:aa:1b:1c:b5:1c:27:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:14 2021 GMT
            Not After : Sep 30 00:01:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:12:fe:d2:f6:f2:58:76:1d:a5:14:c7:85:
                    7f:b4:be:96:6e:cd:24:9f:f7:d9:34:b1:a2:f3:8c:
                    5b:6f:95:02:40:f9:77:a7:25:33:12:ee:70:cb:6f:
                    8f:4a:a5:48:f5:1c:a0:7b:1e:05:80:2e:4a:df:6d:
                    95:e7:e6:7c:74:2f:03:d8:c9:a0:20:1f:28:bf:c1:
                    15:9d:f6:67:9b:15:89:07:39:92:f2:e2:9d:ce:40:
                    24:19:9d:bd:60:64:26:cf:6e:b1:e6:8e:6c:72:d9:
                    6e:10:96:83:10:df:de:4a:e6:d1:51:d4:4d:6f:35:
                    51:52:44:ed:9b:11:72:c2:4f:71:ad:28:5e:35:72:
                    54:df:dc:63:0c:e0:7f:95:5e:62:29:27:08:df:2c:
                    ac:02:12:6c:bf:05:ec:3a:7e:c6:c7:cb:19:6d:14:
                    87:09:9d:7b:f6:99:5f:00:89:0d:c6:9e:cb:aa:ce:
                    5b:c8:cf:c5:5b:f3:cf:b0:d1:43:1f:78:78:30:23:
                    00:15:71:58:c1:5a:b6:88:f6:26:b6:5c:99:19:80:
                    3e:b6:90:1c:45:7d:ae:9f:53:84:78:23:e9:9a:e4:
                    9e:97:c6:d8:d7:81:e1:dc:da:53:a5:2c:1c:70:f8:
                    51:e8:54:9f:5f:38:26:bf:c4:ab:eb:d4:f1:ca:e0:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:39:A8:C5:13:DA:51:37:2B:02:24:1B:E7:E8:7A:4F:04:7A:78:31
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:f7:7d:e5:f9:4f:56:94:11:f1:0d:59:8e:a6:0f:b8:9c:d3:
         bb:d7:79:10:0b:0b:88:f5:e4:12:ce:cd:c8:c3:b5:5d:2e:3f:
         b4:2f:a5:31:c9:46:d3:fd:5f:db:d0:6b:dc:6c:bf:2c:10:e6:
         4b:f8:7e:91:ea:40:f4:57:b0:cb:d6:24:ff:bb:bf:a9:8d:39:
         05:64:9b:46:ce:d4:a4:29:f5:39:f9:78:f1:e5:9a:89:3a:aa:
         5c:75:93:c9:41:5c:ba:bc:e6:e1:54:ec:4c:a5:65:67:dd:87:
         51:30:dc:3f:1d:45:b3:d1:3d:20:76:52:22:33:5e:8a:6f:70:
         28:d6:96:ba:7d:8f:d1:9e:4c:03:ff:bd:1e:11:25:72:bb:f3:
         9c:d1:bc:b8:72:a1:06:3c:7f:5e:3e:a0:31:62:e7:8b:49:1d:
         4d:96:ce:0e:a0:fa:7c:62:b6:e1:f6:3f:6f:2d:4b:c6:bf:d0:
         72:b2:07:ba:53:7a:5c:63:f5:fb:f1:f3:d0:43:46:11:f0:b6:
         49:1b:6b:c7:11:56:ee:71:69:3f:b2:58:ae:22:af:80:47:d1:
         63:5f:46:13:2c:1c:c7:07:09:73:85:a0:2f:19:dd:4d:dc:28:
         26:57:b1:97:44:0c:24:5c:fa:d7:c6:14:08:1a:25:b5:48:73:
         3e:63:ac:1f
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUYf9R1UZ0u3fnGW9vuKobHLUcJwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MTRaFw0yMjA5MzAwMDAxMTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjMxMTEyRkVEMkY2RjI1ODc2
MURBNTE0Qzc4NTdGQjRCRTk2NkVDRDI0OUZGN0Q5MzRCMUEyRjM4QzVCNkY5NTAy
NDBGOTc3QTcyNTMzMTJFRTcwQ0I2RjhGNEFBNTQ4RjUxQ0EwN0IxRTA1ODAyRTRB
REY2RDk1RTdFNjdDNzQyRjAzRDhDOUEwMjAxRjI4QkZDMTE1OURGNjY3OUIxNTg5
MDczOTkyRjJFMjlEQ0U0MDI0MTk5REJENjA2NDI2Q0Y2RUIxRTY4RTZDNzJEOTZF
MTA5NjgzMTBERkRFNEFFNkQxNTFENDRENkYzNTUxNTI0NEVEOUIxMTcyQzI0Rjcx
QUQyODVFMzU3MjU0REZEQzYzMENFMDdGOTU1RTYyMjkyNzA4REYyQ0FDMDIxMjZD
QkYwNUVDM0E3RUM2QzdDQjE5NkQxNDg3MDk5RDdCRjY5OTVGMDA4OTBEQzY5RUNC
QUFDRTVCQzhDRkM1NUJGM0NGQjBEMTQzMUY3ODc4MzAyMzAwMTU3MTU4QzE1QUI2
ODhGNjI2QjY1Qzk5MTk4MDNFQjY5MDFDNDU3REFFOUY1Mzg0NzgyM0U5OUFFNDlF
OTdDNkQ4RDc4MUUxRENEQTUzQTUyQzFDNzBGODUxRTg1NDlGNUYzODI2QkZDNEFC
RUJENEYxQ0FFMEEyRTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsxES/tL28lh2HaUUx4V/tL6Wbs0kn/fZNLGi84xbb5UCQPl3pyUz
Eu5wy2+PSqVI9Rygex4FgC5K322V5+Z8dC8D2MmgIB8ov8EVnfZnmxWJBzmS8uKd
zkAkGZ29YGQmz26x5o5sctluEJaDEN/eSubRUdRNbzVRUkTtmxFywk9xrSheNXJU
39xjDOB/lV5iKScI3yysAhJsvwXsOn7Gx8sZbRSHCZ179plfAIkNxp7Lqs5byM/F
W/PPsNFDH3h4MCMAFXFYwVq2iPYmtlyZGYA+tpAcRX2un1OEeCPpmuSel8bY14Hh
3NpTpSwccPhR6FSfXzgmv8Sr69TxyuCi5QIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FFY5qMUT2lE3KwIkG+foek8EengxMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMwMzMyZTMyMzMzMzJlMzEzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAGfpmTANBgkqhkiG9w0BAQsFAAOCAQEATfd95flP
VpQR8Q1ZjqYPuJzTu9d5EAsLiPXkEs7NyMO1XS4/tC+lMclG0/1f29Br3Gy/LBDm
S/h+kepA9Fewy9Yk/7u/qY05BWSbRs7UpCn1Ofl48eWaiTqqXHWTyUFcurzm4VTs
TKVlZ92HUTDcPx1Fs9E9IHZSIjNeim9wKNaWun2P0Z5MA/+9HhElcrvznNG8uHKh
Bjx/Xj6gMWLni0kdTZbODqD6fGK24fY/by1Lxr/QcrIHulN6XGP1+/Hz0ENGEfC2
SRtrxxFW7nFpP7JYriKvgEfRY19GEywcxwcJc4WgLxndTdwoJlexl0QMJFz618YU
CBoltUhzPmOsHw==
-----END CERTIFICATE-----