Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36392e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e36392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ulIS6eTsLRjGlu4gh0JOI17GdD2vMIW5FlT3m3ClTt4=
Subject key identifier:   DB:3A:44:3D:BA:B1:20:5E:5D:BA:D0:B5:11:8D:14:0D:BC:2B:CE:81
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5D74195A23DA0D5527EC3A15789C7F58913468F5
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:30 +0000
ROA not before:           Wed 29 Sep 2021 23:55:30 +0000
ROA not after:            Fri 30 Sep 2022 00:00:30 +0000
asID:                     17451
IP address blocks:        117.102.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:74:19:5a:23:da:0d:55:27:ec:3a:15:78:9c:7f:58:91:34:68:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:30 2021 GMT
            Not After : Sep 30 00:00:30 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:2e:a7:54:95:66:41:cc:58:d7:af:7b:0b:
                    1c:6d:4b:d1:b5:b6:09:28:78:f7:ce:33:1a:b0:f8:
                    78:ce:44:c9:b3:01:90:11:97:27:5d:c2:0b:26:a3:
                    4a:9e:9f:b6:11:4c:e7:00:5d:96:da:96:3f:e0:a1:
                    42:4c:1e:69:d1:5e:68:55:35:6e:9b:51:40:24:d5:
                    c6:b6:26:1f:66:69:54:af:3f:6f:e5:dd:0a:fd:3c:
                    fa:1a:c3:e5:0b:c9:a4:4d:20:44:59:b4:89:13:af:
                    39:c4:fa:fa:d2:96:2b:c8:6b:9d:01:01:5c:5b:1a:
                    f1:e0:69:26:10:bd:dc:da:45:5c:dd:17:9b:35:96:
                    59:a1:94:97:09:f8:b7:e4:a6:23:d1:f9:66:00:d0:
                    95:9b:2f:de:7c:b5:bb:f5:c2:d4:27:ee:25:8f:1b:
                    91:b7:36:24:cf:83:03:3a:3b:78:1b:ba:67:4b:78:
                    aa:d2:d1:f4:22:79:44:3a:68:b6:66:1d:97:20:f3:
                    f8:f2:06:3e:de:9e:3c:0c:88:6f:09:bb:83:c0:a8:
                    09:47:8d:94:61:18:2f:2a:e8:79:35:a6:d8:67:84:
                    9c:60:ce:4b:99:7a:e3:2d:11:8b:ef:3d:f6:9c:56:
                    77:cd:4a:b1:14:b8:fe:e0:72:da:07:23:24:09:32:
                    b0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3A:44:3D:BA:B1:20:5E:5D:BA:D0:B5:11:8D:14:0D:BC:2B:CE:81
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:1f:b2:e6:98:d5:d6:17:f2:f2:6a:67:d4:c2:d3:bc:1f:
         e5:a8:4e:9a:d1:f6:5c:0f:43:b3:06:ee:3f:ad:d7:07:05:67:
         2f:72:73:ab:aa:99:10:4f:8a:45:e3:7a:04:cd:dd:7e:ec:e1:
         a3:d5:cd:a2:89:e0:39:ad:f7:a5:84:a1:78:d1:62:31:18:6d:
         0b:a0:fa:f9:72:eb:b1:84:b9:d4:cc:2b:de:5b:e9:fd:79:4f:
         45:bd:ca:8d:cb:1f:d2:e4:f8:7f:ff:d4:c2:f1:16:75:a8:19:
         c7:30:b8:02:05:d2:27:f8:b3:90:ca:94:75:50:f2:10:7e:2a:
         39:e0:95:61:98:6e:9d:d6:3e:0a:05:3e:ae:ba:b0:d9:b9:d0:
         89:13:24:5c:33:cf:28:bb:12:02:4e:20:fe:44:e5:8b:c7:a2:
         86:10:86:80:30:a9:1d:75:97:51:a6:40:81:f9:82:2a:ad:29:
         57:b9:df:af:94:db:f0:f7:1f:2c:91:5d:f1:9b:d2:fa:ef:26:
         97:ee:cb:ed:48:a6:b5:7b:9f:41:fd:bc:01:27:75:08:bc:cf:
         94:b1:41:ae:18:e9:a2:8e:f0:77:92:74:48:d3:a6:59:cb:db:
         dc:5b:1e:91:60:3c:ac:7b:8f:fd:4d:64:54:22:3c:59:8f:36:
         ff:87:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----