Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131302e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3131302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          lDOPnTbO6ysxY/CfQWTieRDGtzh6Z1+6b4c4I35l1r4=
Subject key identifier:   8B:C6:E5:90:11:BF:75:6D:DE:C1:DC:4E:AB:FA:11:3A:07:14:72:99
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0E14E17971EF6F95CEB4FAC8C2F2AD84D3C92A81
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:02 +0000
ROA not before:           Wed 29 Sep 2021 23:56:02 +0000
ROA not after:            Fri 30 Sep 2022 00:01:02 +0000
asID:                     17451
IP address blocks:        117.102.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:14:e1:79:71:ef:6f:95:ce:b4:fa:c8:c2:f2:ad:84:d3:c9:2a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:02 2021 GMT
            Not After : Sep 30 00:01:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:98:ea:ec:b8:a0:14:2c:5a:c4:be:22:ea:
                    49:a0:8e:4b:d9:e4:06:0f:86:a8:f5:37:c1:3a:1c:
                    37:e9:96:4b:8a:9a:3b:ad:34:c1:0c:f7:f4:6f:d7:
                    a6:3b:ae:a3:1e:bc:c5:08:15:1e:94:84:a3:58:b3:
                    6b:3e:df:35:d0:8c:35:4d:ed:56:50:93:f4:69:54:
                    fd:f6:7a:1d:11:05:25:62:d9:cc:39:30:09:ce:f2:
                    b7:fc:fe:3e:35:09:2c:87:4e:60:29:28:1f:36:d0:
                    9c:ec:93:6e:8b:7c:ec:39:46:c8:1e:2e:dd:3c:78:
                    36:ad:bf:69:95:da:57:c4:04:ab:f8:af:38:63:3d:
                    1c:2f:50:ae:d8:5c:dc:ed:4d:cf:b1:b0:93:73:0f:
                    37:ed:c8:73:fd:c1:ae:83:02:a1:df:83:21:f4:1d:
                    52:60:4b:68:5d:e5:12:b4:0f:1a:39:a5:e1:4e:1f:
                    4b:cd:21:50:59:db:ac:99:ac:d2:a9:02:01:89:62:
                    08:e9:1d:1c:65:b0:4b:50:df:3e:8a:60:64:9a:4f:
                    18:ea:87:bc:ed:8d:9c:ea:a4:70:6c:b2:39:7d:fd:
                    f1:99:9f:9c:33:1a:29:ca:0e:49:38:95:a6:4b:ab:
                    53:97:d5:3d:2d:d9:8d:d6:35:de:a5:e4:21:8a:43:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C6:E5:90:11:BF:75:6D:DE:C1:DC:4E:AB:FA:11:3A:07:14:72:99
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:21:f6:51:4a:44:12:0b:bf:0e:9d:7e:01:5a:c2:66:25:e7:
         a6:6d:c6:d5:fb:cc:a9:46:8a:d4:e7:2d:42:c7:0b:c1:b9:d0:
         b5:f9:8c:71:17:79:85:0f:51:1e:28:2a:e8:7e:f6:fc:e2:06:
         1c:8e:0e:dc:38:84:93:68:e8:13:61:52:48:b2:77:5a:42:8e:
         94:b5:57:74:53:4b:d2:9d:ba:24:dc:c2:48:a8:07:ce:32:f4:
         e4:f8:0a:e9:70:91:d5:a1:e2:c1:9f:49:6b:93:f9:a3:2e:6e:
         e3:1e:6c:1e:fc:63:7c:08:02:f1:48:9d:19:e9:87:07:cb:7c:
         ff:41:3e:88:5f:dc:e9:1a:5b:90:c2:3c:a3:68:13:4b:d8:15:
         ca:5c:79:5a:99:18:19:f9:48:fd:dd:14:22:78:11:94:56:7c:
         20:10:60:ed:9e:be:a7:44:3b:80:b6:fc:8e:47:e9:7f:06:74:
         63:16:fb:f4:51:50:4b:e7:5e:04:c3:9b:c8:80:4a:95:8b:7d:
         58:74:7c:48:a2:ac:57:eb:54:68:60:4b:a8:ec:d2:23:36:12:
         87:e4:bf:bd:87:5d:69:21:2d:06:57:be:0d:62:d6:e3:52:af:
         42:26:1d:f8:22:5d:02:08:87:cb:72:47:c4:c8:ea:e0:b4:c4:
         3b:dc:f8:8c
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUDhTheXHvb5XOtPrIwvKthNPJKoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MDJaFw0yMjA5MzAwMDAxMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFBRTk4RUFFQ0I4QTAxNDJD
NUFDNEJFMjJFQTQ5QTA4RTRCRDlFNDA2MEY4NkE4RjUzN0MxM0ExQzM3RTk5NjRC
OEE5QTNCQUQzNEMxMENGN0Y0NkZEN0E2M0JBRUEzMUVCQ0M1MDgxNTFFOTQ4NEEz
NThCMzZCM0VERjM1RDA4QzM1NERFRDU2NTA5M0Y0Njk1NEZERjY3QTFEMTEwNTI1
NjJEOUNDMzkzMDA5Q0VGMkI3RkNGRTNFMzUwOTJDODc0RTYwMjkyODFGMzZEMDlD
RUM5MzZFOEI3Q0VDMzk0NkM4MUUyRUREM0M3ODM2QURCRjY5OTVEQTU3QzQwNEFC
RjhBRjM4NjMzRDFDMkY1MEFFRDg1Q0RDRUQ0RENGQjFCMDkzNzMwRjM3RURDODcz
RkRDMUFFODMwMkExREY4MzIxRjQxRDUyNjA0QjY4NURFNTEyQjQwRjFBMzlBNUUx
NEUxRjRCQ0QyMTUwNTlEQkFDOTlBQ0QyQTkwMjAxODk2MjA4RTkxRDFDNjVCMDRC
NTBERjNFOEE2MDY0OUE0RjE4RUE4N0JDRUQ4RDlDRUFBNDcwNkNCMjM5N0RGREYx
OTk5RjlDMzMxQTI5Q0EwRTQ5Mzg5NUE2NEJBQjUzOTdENTNEMkREOThERDYzNURF
QTVFNDIxOEE0MzczRUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwa6Y6uy4oBQsWsS+IupJoI5L2eQGD4ao9TfBOhw36ZZLipo7rTTB
DPf0b9emO66jHrzFCBUelISjWLNrPt810Iw1Te1WUJP0aVT99nodEQUlYtnMOTAJ
zvK3/P4+NQksh05gKSgfNtCc7JNui3zsOUbIHi7dPHg2rb9pldpXxASr+K84Yz0c
L1Cu2Fzc7U3PsbCTcw837chz/cGugwKh34Mh9B1SYEtoXeUStA8aOaXhTh9LzSFQ
WdusmazSqQIBiWII6R0cZbBLUN8+imBkmk8Y6oe87Y2c6qRwbLI5ff3xmZ+cMxop
yg5JOJWmS6tTl9U9LdmN1jXepeQhikNz7wIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FIvG5ZARv3Vt3sHcTqv6EToHFHKZMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzcyZTMxMzAzMjJlMzEzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAHVmbjANBgkqhkiG9w0BAQsFAAOCAQEADiH2UUpE
Egu/Dp1+AVrCZiXnpm3G1fvMqUaK1OctQscLwbnQtfmMcRd5hQ9RHigq6H72/OIG
HI4O3DiEk2joE2FSSLJ3WkKOlLVXdFNL0p26JNzCSKgHzjL05PgK6XCR1aHiwZ9J
a5P5oy5u4x5sHvxjfAgC8UidGemHB8t8/0E+iF/c6RpbkMI8o2gTS9gVylx5WpkY
GflI/d0UIngRlFZ8IBBg7Z6+p0Q7gLb8jkfpfwZ0Yxb79FFQS+deBMObyIBKlYt9
WHR8SKKsV+tUaGBLqOzSIzYSh+S/vYddaSEtBle+DWLW41KvQiYd+CJdAgiHy3JH
xMjq4LTEO9z4jA==
-----END CERTIFICATE-----