Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130392e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3130392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          SUWWNEeX5PTUljTgWSeOQKKyZwlmwzJ5kr04H6h8Kf4=
Subject key identifier:   1A:22:78:32:0B:30:FE:FB:08:09:93:42:CC:17:3F:A3:98:54:02:AF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2E39B1E4F50274B644E22CD370421D2F297B52C2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:09 +0000
ROA not before:           Wed 29 Sep 2021 23:56:09 +0000
ROA not after:            Fri 30 Sep 2022 00:01:09 +0000
asID:                     17451
IP address blocks:        117.102.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:39:b1:e4:f5:02:74:b6:44:e2:2c:d3:70:42:1d:2f:29:7b:52:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:09 2021 GMT
            Not After : Sep 30 00:01:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:86:60:f6:38:22:cb:93:80:07:e1:6d:9c:
                    47:bb:e8:a8:ae:36:92:ce:c0:fe:ac:23:c9:83:6a:
                    59:21:86:3d:b8:57:fe:92:b9:f2:d0:7d:e0:de:dc:
                    76:5c:73:c2:60:79:3a:ef:19:74:97:10:33:55:f3:
                    a6:66:e6:88:b0:fc:10:2b:0c:3e:8e:f5:9b:81:9f:
                    25:0e:07:e9:7e:4a:91:28:2e:63:3e:e9:d5:fb:da:
                    7a:21:07:2c:c7:60:c7:65:4f:8d:70:af:f9:6d:49:
                    6e:72:af:e8:9c:f9:d7:92:6f:af:86:b1:9b:4b:63:
                    7a:62:8f:f9:7e:8b:65:26:b8:c3:3e:9c:9c:29:38:
                    d8:4f:3f:a5:24:93:20:70:28:55:a0:9f:ee:29:8b:
                    15:e5:16:bb:38:85:cb:f8:f4:40:56:c1:d1:70:55:
                    cc:fd:a1:6e:1b:7d:d8:90:ee:06:cc:a0:74:c7:e5:
                    ee:53:83:94:80:f5:cd:b4:46:61:50:6a:46:53:9b:
                    1a:fa:1d:93:4b:40:23:65:73:40:95:62:df:b7:79:
                    f7:62:e5:74:1e:09:d5:10:ee:b0:42:e0:6d:43:7a:
                    bd:3c:14:51:36:7d:20:bf:1f:c9:3a:04:07:6f:cf:
                    1f:8b:36:0d:ff:3e:d1:e8:0c:17:26:d5:6c:ef:15:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:22:78:32:0B:30:FE:FB:08:09:93:42:CC:17:3F:A3:98:54:02:AF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ed:18:cb:f5:84:12:db:ed:98:42:99:9f:02:96:37:a9:46:
         21:2c:b8:43:03:51:54:01:b3:3e:02:df:b5:3d:69:d6:90:c5:
         e6:59:46:fa:bb:d5:00:0f:82:33:90:84:d4:0a:ad:c0:98:db:
         79:33:68:4d:e9:53:18:55:cc:7e:6f:a6:70:30:2c:e9:bb:8f:
         a8:7d:ca:88:01:f4:7f:95:8f:f7:0a:59:bb:81:a8:4e:5e:10:
         a4:86:db:ea:be:d8:46:a1:df:cf:63:59:df:e9:0f:f4:3c:1b:
         4b:fa:7a:d4:b4:be:1f:41:c3:43:84:9c:b2:4c:fe:a2:71:2a:
         f4:fe:1f:c2:f8:69:f7:26:b0:f1:b7:91:9d:1d:d7:b2:84:22:
         f5:d6:0c:59:b3:84:2e:82:44:69:a8:60:87:8d:77:43:94:16:
         80:14:22:4f:de:84:9e:65:a0:58:bd:21:e1:6f:8b:a7:ae:49:
         51:6b:77:5a:38:66:a9:b1:54:8b:e9:40:b1:f9:44:94:c0:b9:
         56:87:d1:5f:f1:f7:a1:cc:4e:c9:f3:05:e8:20:06:62:bf:08:
         56:68:18:d0:75:b6:b6:a1:a3:9a:bf:71:75:82:2d:45:03:cf:
         fc:1b:45:08:cf:c4:04:cd:6c:21:66:ad:0e:85:00:76:46:bb:
         12:84:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----