Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38382e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e38382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          tMi4bWgdb6St90LGaq+xw14Dteks2PnfZzTpVazd9tg=
Subject key identifier:   F0:3C:A4:70:91:39:5B:BA:EE:02:7D:41:63:D6:28:71:5F:9A:5B:E6
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       18D043114D6ABDE58902AE0C28C7217DBB106D64
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:07 +0000
ROA not before:           Wed 29 Sep 2021 23:56:07 +0000
ROA not after:            Fri 30 Sep 2022 00:01:07 +0000
asID:                     17451
IP address blocks:        117.102.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d0:43:11:4d:6a:bd:e5:89:02:ae:0c:28:c7:21:7d:bb:10:6d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:07 2021 GMT
            Not After : Sep 30 00:01:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:34:8d:b0:71:53:50:21:2a:0c:16:62:43:
                    a8:b8:af:bb:1e:4e:fb:50:26:be:b3:07:3a:88:3c:
                    81:18:2a:80:1a:94:c2:6f:0b:a3:31:5b:e8:d1:7b:
                    42:a0:1c:64:09:b6:8b:aa:10:57:a8:d1:bf:50:84:
                    25:91:61:9f:e0:9c:6f:4b:51:ff:61:8d:73:64:66:
                    93:f7:46:5b:9b:3e:d3:a3:37:e8:3e:a7:2b:53:13:
                    3d:c6:4f:45:25:88:25:a2:d4:41:21:31:f2:4b:f1:
                    ba:a0:fc:b0:42:1b:ec:ec:16:9e:25:77:62:bb:44:
                    1b:a0:f2:23:76:6e:bf:90:a9:9a:07:80:e5:12:62:
                    54:b2:12:b5:51:3b:7d:77:74:f3:dc:63:1b:78:d5:
                    98:0c:c4:72:cc:3d:bd:df:8f:55:58:eb:4f:6b:15:
                    6b:1d:dc:00:b2:80:c3:36:03:28:4b:62:3b:d6:2b:
                    5c:21:ee:b7:a4:5b:15:02:5f:35:7d:29:c5:5c:9b:
                    96:8c:96:00:b3:76:ae:d0:93:1b:9e:7f:24:35:d8:
                    33:4b:a0:6c:24:77:fb:21:0b:ef:f4:fa:0b:48:72:
                    9a:30:42:db:d8:5d:da:68:0a:4b:cf:52:08:25:f7:
                    bb:d5:15:f1:a7:14:50:08:82:38:b0:d4:39:f4:80:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:A4:70:91:39:5B:BA:EE:02:7D:41:63:D6:28:71:5F:9A:5B:E6
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:29:3a:49:92:a4:62:3e:01:c6:22:47:47:71:f1:a5:aa:c7:
         08:af:ab:92:61:b5:21:56:73:d3:b2:37:2b:01:bf:33:f3:59:
         a1:de:51:92:61:8f:93:f0:d6:82:a8:43:b0:c5:5d:94:bb:2a:
         8b:24:b8:33:ea:c1:1d:7f:3a:57:a2:0c:df:52:e0:61:e2:34:
         d4:17:eb:60:28:dd:a1:e7:ed:c7:b0:27:e3:c6:c9:64:f6:ff:
         57:72:e8:21:22:ca:07:93:e0:b9:ad:81:86:5a:10:61:04:33:
         a9:a9:0b:b3:58:75:20:8a:73:4c:84:2b:26:27:27:5c:db:4d:
         21:34:1e:c2:1e:d7:af:e8:0a:d3:42:4e:45:60:16:71:60:a8:
         98:ec:81:ed:23:7d:65:bb:c0:60:7a:db:3c:be:68:02:39:1f:
         65:0e:ed:a3:35:7f:16:2f:08:97:2f:43:a6:ad:d0:cd:71:9c:
         25:aa:0d:94:05:0a:ce:fd:95:0d:5a:89:5f:b6:a8:94:42:5f:
         01:0f:79:e7:c3:b5:89:f0:d8:12:af:ea:b0:a9:5f:15:d2:be:
         a4:58:80:bb:85:3f:6e:d2:05:8c:31:38:32:6d:a4:1b:65:42:
         73:5a:3c:b3:07:63:3c:79:1a:49:66:b1:03:bd:92:92:94:95:
         35:18:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----