Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131342e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3131342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          xA7tuFWLTvM2KkwWunJBKNIzUTg+SF048RChJB2zwkc=
Subject key identifier:   C1:A6:D7:1F:7B:85:99:BB:03:CE:C3:4A:01:F9:BA:34:95:39:05:D8
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       670DEE2E5227D6DAC97CC01AF6E4254792A2388D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:59 +0000
ROA not before:           Wed 29 Sep 2021 23:55:59 +0000
ROA not after:            Fri 30 Sep 2022 00:00:59 +0000
asID:                     17451
IP address blocks:        117.102.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0d:ee:2e:52:27:d6:da:c9:7c:c0:1a:f6:e4:25:47:92:a2:38:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:59 2021 GMT
            Not After : Sep 30 00:00:59 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:29:e4:05:95:b6:37:2b:38:1a:d9:a2:6f:
                    be:18:09:6a:43:77:61:81:af:71:43:d0:f9:5f:00:
                    22:d1:0f:f6:cf:7f:1a:7f:7e:9b:d5:9c:e8:89:c3:
                    62:12:87:fb:f1:f8:5b:e8:f6:72:2e:f7:c2:03:18:
                    a2:04:7f:06:34:b2:36:81:69:ad:ad:c3:c2:61:e3:
                    db:9e:b4:4c:f9:f6:67:23:2a:6b:bf:07:1c:8d:f6:
                    3f:52:6c:42:f3:ad:84:8d:d2:ec:b3:0e:41:9e:9a:
                    a2:95:f8:93:26:73:af:5c:63:8c:d5:a8:9f:64:15:
                    0a:7a:22:0f:a7:a6:d5:aa:c3:d4:97:da:f1:b9:9b:
                    0e:29:bd:e5:5d:8f:09:53:74:42:dc:f2:84:b4:5a:
                    c7:e1:e6:ba:6b:7b:87:59:d7:60:ec:93:b6:34:f3:
                    78:8d:de:da:bb:f5:9a:16:ed:db:ac:19:79:f1:09:
                    11:a6:57:f8:4f:8a:8d:be:6c:ba:d4:d7:d5:66:ef:
                    85:0e:87:1c:32:65:b0:df:e9:96:9c:8d:e6:90:ce:
                    8d:d7:b2:fa:b9:1d:43:9d:99:a5:9d:02:35:e3:a6:
                    44:7a:33:34:ef:11:27:16:08:c2:e3:8e:af:6c:a5:
                    63:d4:bc:1c:55:78:48:b9:4d:26:30:0f:cf:da:24:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A6:D7:1F:7B:85:99:BB:03:CE:C3:4A:01:F9:BA:34:95:39:05:D8
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:63:55:35:58:e4:5b:fa:0d:1c:3f:1f:43:4c:05:5f:1d:
         5c:7e:06:73:b8:06:05:1b:0b:54:36:22:67:b1:25:db:74:84:
         f5:6e:72:61:fb:42:43:0c:e8:60:96:b6:6c:62:4d:84:bf:74:
         ec:9e:2b:17:f2:91:50:8d:c3:60:c1:d3:e1:4f:b0:12:7e:e0:
         d4:4b:9f:8f:a0:5b:f7:9e:72:be:8a:3a:9a:9b:97:b2:e4:90:
         22:8d:fc:a6:dd:77:9b:10:db:88:5b:97:9d:a1:48:ec:4c:89:
         7d:2a:2c:de:58:33:76:77:af:02:3c:cb:84:7d:f3:c5:5c:b1:
         60:9a:b6:a8:39:a2:74:a8:b8:33:4f:90:73:d8:a2:9b:62:bd:
         b1:c5:7c:47:12:32:30:df:d9:a7:20:f1:0f:81:f0:77:e2:cd:
         95:c1:06:d8:fd:b8:c7:47:f8:06:54:8d:be:59:66:5a:79:3b:
         5d:a0:63:cc:0e:26:33:46:ee:1e:22:03:e7:99:92:59:f5:b2:
         90:64:1e:1e:59:e3:fc:ab:62:06:01:e5:e4:16:4d:39:cc:7b:
         dd:29:8a:ec:7d:38:01:65:01:d3:29:7e:52:3c:ed:39:20:a9:
         db:13:1f:e5:8d:4b:ae:aa:97:22:6f:cf:43:5b:73:c8:46:a8:
         92:19:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----