Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36372e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e36372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          +GAmqyFbVOOXsAnscXKZxPaY9dXEQs6IKxSbCKu+5v8=
Subject key identifier:   58:27:FF:BF:40:E0:72:25:FA:6E:0B:48:16:A3:DB:8F:1C:88:0F:E0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1B1DA1F37DF612CFDC65E9876DA56EC49DE00B4C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:17 +0000
ROA not before:           Wed 29 Sep 2021 23:56:17 +0000
ROA not after:            Fri 30 Sep 2022 00:01:17 +0000
asID:                     17451
IP address blocks:        203.142.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1d:a1:f3:7d:f6:12:cf:dc:65:e9:87:6d:a5:6e:c4:9d:e0:0b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:17 2021 GMT
            Not After : Sep 30 00:01:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:55:79:71:e1:e2:88:18:84:f3:af:b0:e9:
                    9f:1d:7c:63:35:6f:01:2e:ad:95:25:86:77:a7:fb:
                    93:67:51:54:3d:bb:36:82:86:8a:25:9c:00:21:f1:
                    24:6b:36:75:60:77:12:c6:59:10:60:c4:2c:4a:41:
                    93:02:e7:d1:47:4c:d8:0e:18:74:64:ce:fe:0d:43:
                    04:63:c4:03:72:c0:3e:85:44:a9:18:99:dc:97:2e:
                    c4:7d:9c:18:b2:de:b7:bc:32:c5:4b:df:f8:de:e1:
                    49:24:6d:54:71:90:92:5c:81:81:d4:42:b2:9f:6b:
                    87:80:bf:97:2e:83:9d:68:4f:48:72:84:51:5e:43:
                    d7:c4:a8:2b:97:c2:fe:fc:93:72:34:8f:e6:cb:6c:
                    5a:2e:01:d5:6b:e1:be:6e:ff:3a:8c:78:c1:96:b2:
                    22:74:d1:c5:11:33:1f:a0:6f:54:3d:41:89:44:fd:
                    a1:5d:7f:d9:b3:24:73:f6:e9:2e:1c:0b:9b:c1:79:
                    65:3f:d3:1a:67:e9:8f:3d:96:33:9a:9a:32:4b:53:
                    ef:9b:bd:b3:92:48:51:79:72:46:c8:f4:0b:8e:0d:
                    52:8a:5a:7b:e2:ce:b3:63:0f:99:0b:5d:9b:73:12:
                    0a:3d:25:7c:3d:8f:aa:38:08:ef:f6:3b:3d:46:a2:
                    0f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:FF:BF:40:E0:72:25:FA:6E:0B:48:16:A3:DB:8F:1C:88:0F:E0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:5b:58:60:12:e1:d7:3e:72:11:87:ee:84:d9:71:9e:b7:
         bb:b9:b2:27:f5:7e:1f:aa:4b:52:7c:75:71:0e:0f:40:8a:c6:
         a8:83:fe:31:fd:2e:f2:6f:0e:a1:fd:03:cd:41:04:a0:f5:a2:
         b5:a3:2c:e4:19:a4:25:47:84:78:af:4a:59:c4:cb:da:e5:82:
         b9:36:d2:be:e4:00:7f:eb:e2:c1:6c:2b:7f:bb:73:ac:5e:d9:
         36:b9:48:b3:a3:43:fa:80:e8:71:97:9b:f5:a2:4a:db:75:b6:
         30:d0:8e:a8:2c:d6:bd:f9:a1:02:2b:80:79:e2:cd:c5:8d:9e:
         dc:85:99:4e:1a:20:e7:ab:a4:25:06:12:1e:46:02:0e:6f:ce:
         ba:a6:59:22:ae:cf:b3:b6:7f:37:32:74:f9:69:0d:b9:d9:70:
         1c:7e:96:48:3e:f2:cd:d0:3d:34:51:1d:0e:76:11:da:35:fd:
         97:34:b7:34:e1:27:72:fc:4c:fb:dd:f0:f1:2b:24:8d:52:df:
         84:06:7a:d2:50:7d:64:eb:65:58:47:22:99:c3:07:79:9f:14:
         2b:49:d1:f2:f0:96:64:09:7d:29:fc:10:4f:b6:a0:d4:01:d2:
         f7:a9:f5:2a:36:46:53:c4:b4:61:42:86:12:a4:8c:51:79:78:
         32:79:00:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----