Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35392e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e35392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          yA2buZtbe/x1iUMuTNMqjOdUfFfZj1rTVaLv55nZbfc=
Subject key identifier:   43:C2:4F:62:0A:75:9F:E2:52:EC:B9:93:B5:29:95:BC:4D:E9:9A:19
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       35E6972A321BEBA0796D18D931C3B65C1DF77B6F
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:28 +0000
ROA not before:           Wed 29 Sep 2021 23:55:28 +0000
ROA not after:            Fri 30 Sep 2022 00:00:28 +0000
asID:                     17451
IP address blocks:        202.169.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e6:97:2a:32:1b:eb:a0:79:6d:18:d9:31:c3:b6:5c:1d:f7:7b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:28 2021 GMT
            Not After : Sep 30 00:00:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:a7:e8:1d:d9:7d:25:70:0c:b2:3e:24:2a:
                    49:2d:c2:c9:90:44:b7:17:00:82:7b:ff:65:ad:dd:
                    9b:12:a7:87:6b:f9:03:69:f2:ab:df:aa:f1:79:e1:
                    d6:3f:42:b9:ed:cb:67:77:53:b5:af:f1:78:9a:4f:
                    0d:43:dc:f9:34:39:6a:e0:3a:3b:9b:18:05:8b:67:
                    6f:3a:65:50:9e:64:c9:22:e1:ff:fd:b7:65:dd:85:
                    1c:44:36:fb:d9:bb:12:b4:79:b6:3e:21:53:49:22:
                    70:ca:82:ad:b0:f6:06:66:7c:84:a6:f9:80:42:a7:
                    f6:c4:a4:59:48:5d:bd:4d:50:52:e7:5a:08:e7:fb:
                    fa:74:84:53:5a:6f:bb:1e:2f:54:ac:0a:30:a4:e5:
                    37:c5:26:d3:4f:f1:2f:1b:1e:d3:c9:cb:11:34:56:
                    79:a0:ec:39:e4:b4:fa:c8:86:6a:aa:2e:35:5d:d5:
                    1a:fa:c0:36:e1:75:f1:b2:ea:17:8d:50:ce:f8:eb:
                    1b:59:26:78:a8:94:5e:93:03:fe:cc:f9:10:e8:12:
                    de:a0:d3:03:76:02:cc:34:55:8e:86:17:e3:0e:7a:
                    63:a6:a8:83:8d:6f:86:9c:7a:d8:6b:80:c4:09:d6:
                    77:da:72:45:57:02:eb:c0:dd:6d:b4:15:5f:3f:9f:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C2:4F:62:0A:75:9F:E2:52:EC:B9:93:B5:29:95:BC:4D:E9:9A:19
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:2a:50:75:eb:70:05:fe:e0:1e:e5:fe:67:cc:28:39:25:da:
         75:e9:57:a7:0e:4c:39:75:be:b0:b3:c2:43:3b:14:2f:59:f3:
         17:a7:af:34:ee:a7:a9:20:94:f6:b0:e4:90:7c:69:b7:0b:15:
         a9:6f:54:80:96:f3:6d:6d:e8:ce:08:bc:03:12:61:2c:07:ca:
         cb:c3:c8:b2:ec:ce:19:5c:95:8e:09:56:76:93:68:ce:56:6d:
         93:4f:0d:56:8b:39:99:92:d7:3f:01:6b:ad:15:91:01:44:05:
         0f:dd:b4:d7:8b:c9:76:c3:98:01:ac:21:78:2f:58:3f:ce:e3:
         04:e8:55:a1:d9:38:ed:40:fa:b5:11:86:08:ab:1c:5a:ed:d1:
         be:4a:f6:32:be:3c:46:3f:be:e7:d0:e4:65:6d:1d:8d:db:fd:
         dc:fb:31:38:3e:01:04:d0:9a:a5:d5:82:f9:47:9b:51:0c:81:
         20:6c:de:f9:8a:b1:79:d2:a0:e3:0a:f6:23:4a:5c:eb:2f:56:
         f1:71:05:7e:dd:c5:e7:28:87:33:f0:48:bf:1e:ba:c3:7a:32:
         d5:8d:99:bf:8b:3a:27:08:51:a9:31:db:41:8d:1e:cb:67:f0:
         49:17:3b:c7:aa:34:94:11:5c:81:d0:aa:b7:18:37:62:4c:97:
         77:11:5e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----