Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131322e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3131322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          KHJLxtMqHgtvaEgWWIgEl2O0b9l17EwY67L+lWEx1Iw=
Subject key identifier:   03:7D:84:C9:1D:63:2D:4A:45:2C:52:A7:4A:09:02:3B:1C:3B:45:F7
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       301432DC85C88FABB30E6A2588A88F8F320D9AC9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:45 +0000
ROA not before:           Wed 29 Sep 2021 23:55:45 +0000
ROA not after:            Fri 30 Sep 2022 00:00:45 +0000
asID:                     17451
IP address blocks:        117.102.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:14:32:dc:85:c8:8f:ab:b3:0e:6a:25:88:a8:8f:8f:32:0d:9a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:45 2021 GMT
            Not After : Sep 30 00:00:45 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:51:76:7f:4f:87:94:79:1d:dc:f2:a2:bc:
                    f1:80:9a:cc:58:43:bb:7d:6d:a3:93:00:57:3b:c4:
                    b6:59:48:e8:1f:7a:4b:09:81:df:16:b8:06:3b:72:
                    8d:d9:80:4c:05:bb:3d:da:0c:e7:5c:7d:c3:ee:c1:
                    36:44:d2:05:f7:f7:51:cf:b9:a0:52:b8:53:5d:ce:
                    63:d1:e3:02:8c:c2:1c:59:4b:e2:b8:e3:ba:44:46:
                    4d:62:71:ff:dc:e8:20:f4:64:3d:32:5f:83:21:d1:
                    f8:d6:c9:8e:51:0e:0b:96:22:ed:d5:fd:c9:20:d4:
                    d9:56:81:9b:fb:77:07:88:04:71:f7:49:19:78:72:
                    b7:ce:9f:1e:6c:7d:10:e7:eb:fc:49:d3:f0:d4:2b:
                    b2:2c:f0:73:a0:71:19:8e:23:00:93:71:88:d0:ce:
                    55:1f:b7:7e:cb:e4:07:93:c1:eb:50:7f:00:1c:a2:
                    09:d9:67:f4:79:e6:6e:cb:05:a9:f4:2f:da:f4:5a:
                    1c:a2:a8:42:8c:db:72:3a:9e:e3:04:7f:71:5d:36:
                    77:1d:d1:5f:f5:69:2a:b1:fa:b2:34:9e:c1:8a:d4:
                    54:55:70:70:28:08:49:9d:bd:ad:45:8c:e9:17:62:
                    0b:51:fa:8f:b5:00:89:9f:96:dc:b6:ae:a7:fc:da:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7D:84:C9:1D:63:2D:4A:45:2C:52:A7:4A:09:02:3B:1C:3B:45:F7
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:4b:ad:1c:60:bf:3d:9f:ae:77:2f:34:46:47:1c:bc:4f:38:
         70:b9:cb:fa:10:21:33:82:23:b1:de:1d:e9:dc:19:68:71:3b:
         fb:ca:33:bb:a7:fd:62:b5:7d:b2:f4:12:91:c6:ce:0d:36:e2:
         49:e2:ce:b3:59:6b:2c:32:d4:df:8c:59:a6:1a:f6:96:b2:ea:
         6c:30:08:50:c5:52:84:d6:3d:14:00:31:c7:ca:f9:17:60:64:
         da:43:4c:90:8d:12:f7:5f:8f:2f:98:89:07:34:bd:7d:15:1d:
         90:29:ce:0a:56:c9:a9:e5:c9:c5:b9:ea:3c:9b:1e:ae:b1:6a:
         0e:05:6a:b0:03:dc:17:59:db:ce:39:9f:28:d3:3b:25:d9:b2:
         6c:75:79:b3:47:66:1a:37:c3:64:a0:57:a4:f1:44:e6:d5:8e:
         21:4d:e4:c4:dc:27:8f:ce:8b:b3:19:33:ef:bc:c5:63:a4:da:
         6a:cc:7f:df:59:b3:6d:9c:5d:5c:ab:fb:a8:6f:f8:bc:4f:17:
         71:56:a0:dd:0f:6a:42:82:e0:c2:ac:1a:39:27:00:9f:03:7b:
         3e:76:99:af:04:d3:2f:46:f2:13:ec:53:85:56:29:40:d8:d0:
         00:d5:86:dc:14:d2:e8:f5:cf:c1:87:e7:5c:53:48:ec:d7:b8:
         bb:7e:59:7c
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUMBQy3IXIj6uzDmoliKiPjzINmskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDVaFw0yMjA5MzAwMDAwNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjA2NzUxNzY3RjRGODc5NDc5
MUREQ0YyQTJCQ0YxODA5QUNDNTg0M0JCN0Q2REEzOTMwMDU3M0JDNEI2NTk0OEU4
MUY3QTRCMDk4MURGMTZCODA2M0I3MjhERDk4MDRDMDVCQjNEREEwQ0U3NUM3REMz
RUVDMTM2NDREMjA1RjdGNzUxQ0ZCOUEwNTJCODUzNURDRTYzRDFFMzAyOENDMjFD
NTk0QkUyQjhFM0JBNDQ0NjRENjI3MUZGRENFODIwRjQ2NDNEMzI1RjgzMjFEMUY4
RDZDOThFNTEwRTBCOTYyMkVERDVGREM5MjBENEQ5NTY4MTlCRkI3NzA3ODgwNDcx
Rjc0OTE5Nzg3MkI3Q0U5RjFFNkM3RDEwRTdFQkZDNDlEM0YwRDQyQkIyMkNGMDcz
QTA3MTE5OEUyMzAwOTM3MTg4RDBDRTU1MUZCNzdFQ0JFNDA3OTNDMUVCNTA3RjAw
MUNBMjA5RDk2N0Y0NzlFNjZFQ0IwNUE5RjQyRkRBRjQ1QTFDQTJBODQyOENEQjcy
M0E5RUUzMDQ3RjcxNUQzNjc3MUREMTVGRjU2OTJBQjFGQUIyMzQ5RUMxOEFENDU0
NTU3MDcwMjgwODQ5OURCREFENDU4Q0U5MTc2MjBCNTFGQThGQjUwMDg5OUY5NkRD
QjZBRUE3RkNEQTA5MzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsGdRdn9Ph5R5HdzyorzxgJrMWEO7fW2jkwBXO8S2WUjoH3pLCYHf
FrgGO3KN2YBMBbs92gznXH3D7sE2RNIF9/dRz7mgUrhTXc5j0eMCjMIcWUviuOO6
REZNYnH/3Ogg9GQ9Ml+DIdH41smOUQ4LliLt1f3JINTZVoGb+3cHiARx90kZeHK3
zp8ebH0Q5+v8SdPw1CuyLPBzoHEZjiMAk3GI0M5VH7d+y+QHk8HrUH8AHKIJ2Wf0
eeZuywWp9C/a9FocoqhCjNtyOp7jBH9xXTZ3HdFf9WkqsfqyNJ7BitRUVXBwKAhJ
nb2tRYzpF2ILUfqPtQCJn5bctq6n/NoJNQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FAN9hMkdYy1KRSxSp0oJAjscO0X3MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzcyZTMxMzAzMjJlMzEzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAHVmcDANBgkqhkiG9w0BAQsFAAOCAQEANEutHGC/
PZ+udy80RkccvE84cLnL+hAhM4Ijsd4d6dwZaHE7+8ozu6f9YrV9svQSkcbODTbi
SeLOs1lrLDLU34xZphr2lrLqbDAIUMVShNY9FAAxx8r5F2Bk2kNMkI0S91+PL5iJ
BzS9fRUdkCnOClbJqeXJxbnqPJserrFqDgVqsAPcF1nbzjmfKNM7JdmybHV5s0dm
GjfDZKBXpPFE5tWOIU3kxNwnj86Lsxkz77zFY6Taasx/31mzbZxdXKv7qG/4vE8X
cVag3Q9qQoLgwqwaOScAnwN7PnaZrwTTL0byE+xThVYpQNjQANWG3BTS6PXPwYfn
XFNI7Ne4u35ZfA==
-----END CERTIFICATE-----