Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36362e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e36362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          B0zJ9Som9dtHJZFRPBcyvUEKo4GFrZABfLX2bqiOcJQ=
Subject key identifier:   C6:0D:4D:4B:3C:B9:B0:C9:2B:2C:C2:3E:5A:86:67:7C:BE:C5:20:93
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2B9DED225A7B37C036F24D4A497BE5EABAA57898
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:25 +0000
ROA not before:           Wed 29 Sep 2021 23:55:25 +0000
ROA not after:            Fri 30 Sep 2022 00:00:25 +0000
asID:                     17451
IP address blocks:        203.142.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9d:ed:22:5a:7b:37:c0:36:f2:4d:4a:49:7b:e5:ea:ba:a5:78:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:25 2021 GMT
            Not After : Sep 30 00:00:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:32:39:1a:46:62:23:64:fb:db:11:b2:0b:
                    f2:f6:a5:42:53:69:09:2b:ba:3f:00:40:48:cd:f4:
                    20:f2:0b:84:3f:30:b1:ce:bb:54:e5:a7:66:58:ea:
                    65:09:13:82:0f:1d:14:68:33:d0:3c:70:cd:19:a1:
                    e1:e4:7e:2d:d8:c3:03:85:d6:4f:d3:e1:00:b5:e8:
                    eb:51:92:93:89:09:c8:62:cf:43:9c:49:de:12:88:
                    bc:89:fc:e9:1d:36:2f:84:a2:ef:cf:d7:37:55:6e:
                    fc:cf:cd:81:2b:60:fc:ff:ca:d4:bc:5c:4f:e2:f7:
                    56:86:67:b8:a1:d3:ef:f5:0f:b5:29:46:7c:78:ac:
                    ee:31:cd:04:2a:b5:e3:63:c0:cc:fd:3e:b6:83:e7:
                    85:59:ae:b8:1e:89:35:da:df:ae:c2:c4:79:7b:b9:
                    43:eb:66:b6:a8:8d:fd:bc:7e:94:47:08:49:ba:2d:
                    18:3e:4d:39:37:7d:24:82:e0:8d:eb:e4:7b:f8:84:
                    dd:34:f9:83:d0:15:17:ad:63:5f:19:a7:e7:2f:24:
                    8b:91:07:e6:ce:84:4f:75:58:7d:63:1d:f7:79:78:
                    34:61:eb:f4:ea:ae:59:15:92:e8:2f:10:7c:50:d5:
                    3f:7e:2d:e2:14:4e:3c:3a:e1:10:58:59:3d:7b:23:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0D:4D:4B:3C:B9:B0:C9:2B:2C:C2:3E:5A:86:67:7C:BE:C5:20:93
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:35:1b:77:99:97:23:12:d4:4c:15:1a:2d:ad:9b:d2:05:40:
         77:e0:ca:36:02:eb:4f:3e:0f:0b:1e:1a:0e:72:ff:20:f5:ac:
         20:8f:68:ad:19:c1:c6:10:d2:23:60:2b:9f:43:c3:1b:33:a6:
         06:43:67:16:aa:c1:6c:34:ec:c7:ea:e4:0e:93:55:e5:bf:cf:
         ae:82:ae:43:38:8a:3a:1f:71:a2:0d:45:55:ab:c7:d5:03:bc:
         f8:30:a6:e2:6e:93:dd:70:1c:d8:16:49:5e:83:fc:fd:72:5b:
         65:c5:f8:34:a6:6f:7f:b5:38:8e:5f:7a:6b:5d:43:ef:de:28:
         d2:a2:1d:8a:cf:6a:88:89:ed:dc:7d:d2:53:2f:a4:70:8a:b4:
         76:6e:5a:5a:45:b3:18:9e:b9:d5:56:05:5d:91:37:73:b2:28:
         cf:72:44:86:71:91:5e:07:d4:65:cc:e6:32:79:3b:e3:73:91:
         c2:e2:31:38:19:b6:8a:b4:4c:c1:c4:77:33:da:51:d1:3b:ad:
         4c:d7:78:cc:2e:a0:c0:8a:48:29:0d:0f:42:73:d7:f4:46:48:
         63:d3:76:4a:82:85:02:8b:40:d5:2f:94:35:85:1c:37:47:23:
         0b:c4:bf:9a:b8:3e:83:f4:66:5b:ad:1a:4b:2d:11:fd:b6:bb:
         ce:ba:6f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----