Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35362e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e35362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          6MrcddYPeqL4w1edRVSSdt94WSN41xFgRK5zCN0l2Gg=
Subject key identifier:   D8:ED:C0:7A:8F:CA:57:EC:F2:53:E7:00:EC:5E:D3:16:09:1C:58:7B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       17827DB41C813C7D51B32EDB1DE8853A84C87827
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:13 +0000
ROA not before:           Wed 29 Sep 2021 23:56:13 +0000
ROA not after:            Fri 30 Sep 2022 00:01:13 +0000
asID:                     17451
IP address blocks:        202.169.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:82:7d:b4:1c:81:3c:7d:51:b3:2e:db:1d:e8:85:3a:84:c8:78:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:13 2021 GMT
            Not After : Sep 30 00:01:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:0f:0f:28:ee:3c:8e:33:97:b3:fe:be:cc:e1:
                    29:23:6c:09:9d:08:2b:99:f9:44:bf:0a:29:75:3f:
                    4f:a0:cd:c7:32:33:99:da:50:f7:0e:33:83:6d:db:
                    e3:ba:e0:f0:0f:63:5b:b4:8c:ee:e2:d9:4b:5b:04:
                    6e:fe:57:61:db:63:1d:b8:57:a3:4f:22:27:98:8b:
                    cd:00:0e:10:c4:a7:e8:a0:68:07:5b:e2:df:79:aa:
                    41:d4:cb:63:ef:f9:61:98:ce:68:20:a1:4c:29:17:
                    a4:80:47:2e:8a:3f:7e:84:c1:2e:a7:9c:87:ee:96:
                    14:b0:03:38:f7:a4:06:67:b1:12:63:e7:43:1b:86:
                    87:79:16:e1:40:2d:60:29:88:aa:bd:52:4a:61:e0:
                    ac:26:68:6b:de:99:99:74:47:44:3e:3a:a1:92:95:
                    47:8b:17:31:75:8f:30:0c:fb:0b:eb:32:d2:b6:d7:
                    31:ca:9b:1b:c9:10:7e:62:d4:c4:fe:d0:79:9b:f7:
                    02:52:d6:58:6f:3a:48:98:2b:6e:a3:9d:51:9d:92:
                    85:4e:4f:b8:6e:32:73:e8:a6:ff:d0:0c:46:c4:7f:
                    5d:8f:de:b8:b5:4e:80:6d:86:fb:9b:ec:fe:23:48:
                    ce:b7:bc:6f:f1:83:c4:8f:b4:8e:89:06:b4:94:36:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:ED:C0:7A:8F:CA:57:EC:F2:53:E7:00:EC:5E:D3:16:09:1C:58:7B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c8:4c:4b:c1:98:f2:60:e3:1c:f3:51:28:16:08:c8:46:a3:
         40:44:1d:28:6f:69:a0:ae:25:1c:c9:06:30:a3:7e:af:fe:56:
         09:0b:c6:95:b4:52:3b:08:6b:99:c7:d5:db:82:7b:bd:2c:4a:
         ab:d4:24:e4:47:d4:53:f0:08:03:1d:02:7f:d7:5d:c7:83:8a:
         8b:ca:7c:55:6b:ab:11:9f:be:ab:16:d1:52:3a:ca:1b:15:85:
         fe:00:a3:bc:10:cc:62:2e:1e:86:b1:e1:a1:f4:7b:8c:4b:a8:
         2a:0c:6e:43:d4:48:02:90:dd:6f:be:79:fb:60:22:5f:a9:77:
         e4:d3:a6:6b:56:32:f9:3e:e4:f5:77:73:c3:2e:82:45:87:16:
         8a:5c:f1:5e:b7:5f:e9:61:3b:bd:a0:78:cf:22:b1:e4:6a:fe:
         de:91:19:2a:4c:0d:e1:3a:c9:28:b5:08:95:2c:0a:f5:86:7c:
         d5:15:08:cd:79:67:a2:61:71:a1:f3:32:23:78:7f:d1:93:4d:
         f0:95:95:85:de:5b:66:87:c7:f5:5a:5c:1b:05:80:22:a4:f2:
         d1:99:ec:59:eb:62:47:f1:3a:63:5a:17:8c:a5:32:d4:6f:78:
         54:c1:45:10:59:ac:36:45:4a:a6:0d:1a:1c:2c:4b:b9:28:40:
         e4:59:74:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----