Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37362e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e37362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          anhFvfb6lbk3ipmm7PM0q5GKZS+D5aCWL7Vea9U5vAE=
Subject key identifier:   52:72:7F:93:04:99:39:5B:E6:2E:FF:74:D0:5A:FC:45:A8:C8:51:03
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7E2DDE27A1BCC348D9DD19CD5223D3FBE2993485
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:25 +0000
ROA not before:           Wed 29 Sep 2021 23:55:25 +0000
ROA not after:            Fri 30 Sep 2022 00:00:25 +0000
asID:                     17451
IP address blocks:        203.142.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2d:de:27:a1:bc:c3:48:d9:dd:19:cd:52:23:d3:fb:e2:99:34:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:25 2021 GMT
            Not After : Sep 30 00:00:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:ca:a4:84:c2:24:39:cf:7b:cc:0e:ff:99:
                    c3:3e:a5:8c:73:5d:29:7c:d3:fc:3f:97:78:46:8e:
                    79:91:67:9e:a9:f2:2c:35:a4:a5:61:9e:90:08:02:
                    33:79:d0:0c:fc:1a:96:13:2a:4d:b8:ef:cf:21:86:
                    10:59:10:00:d3:36:01:6c:a5:58:b3:66:d7:06:c6:
                    0e:4c:ce:61:ec:ce:82:bb:3c:9c:5a:bf:63:da:a7:
                    ba:24:34:19:55:3d:da:d4:83:9c:16:75:13:d8:f3:
                    ab:19:cf:08:46:27:76:a9:36:8d:69:e6:c5:19:4c:
                    6d:9b:d9:15:a0:2e:01:89:56:e6:a7:fc:a3:d2:f9:
                    f2:6c:59:a0:b1:c8:25:8d:71:ad:b5:9c:1d:10:eb:
                    b0:f9:53:1f:a5:81:66:22:17:2e:96:33:6b:f4:3f:
                    2c:30:1a:8e:15:37:54:16:b4:70:37:a0:fa:7d:24:
                    c3:e5:e7:71:9f:55:26:c8:09:6a:72:5d:72:f2:b9:
                    c4:79:6c:16:2b:be:b4:77:5f:e9:e4:a3:f6:fc:be:
                    17:7b:98:f9:73:2d:ed:57:cc:3d:71:fb:96:a4:61:
                    24:1e:f6:de:11:7e:f5:40:cb:ba:e3:63:89:28:1c:
                    11:80:f2:05:95:35:ba:d2:b8:e1:52:b5:a3:90:d4:
                    53:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:72:7F:93:04:99:39:5B:E6:2E:FF:74:D0:5A:FC:45:A8:C8:51:03
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:3c:82:3a:35:99:49:e1:80:0c:cd:eb:a3:66:a6:bc:c9:50:
         7d:55:28:33:31:5a:16:a0:d9:3f:21:fc:b7:96:ca:74:e0:13:
         0a:ae:b4:a5:9b:a6:37:32:4b:5f:16:0f:f4:0b:4b:a2:43:ea:
         6a:15:f4:fe:ac:1d:cd:2d:31:84:ed:68:65:3d:07:96:4b:d6:
         22:e9:16:6e:84:7f:6a:3a:04:40:77:45:65:cd:ce:b4:5b:e8:
         48:58:0a:61:12:7f:c7:2e:1f:e4:83:08:0b:12:39:78:c0:99:
         20:7b:41:23:a4:dd:98:56:9d:d7:5b:cb:c5:f4:52:5b:cc:f8:
         48:54:b6:48:ce:d7:a5:07:87:74:ce:5d:d5:40:b8:21:e5:6c:
         f1:26:bb:5d:32:d2:37:42:80:86:7d:d8:db:3c:39:ba:4d:ea:
         78:57:72:cd:de:69:b7:ff:a3:0c:94:ca:3f:9c:a6:8a:68:7f:
         c0:cf:c4:db:58:5e:ff:e7:9d:a6:d4:2c:16:73:2d:6f:69:12:
         6c:f6:88:1d:24:8d:7a:c1:ca:77:0f:ec:3d:cf:28:33:b4:c5:
         f7:d7:ee:11:0b:c6:a4:17:c2:6c:cb:32:55:d5:ae:86:c9:71:
         15:d8:3f:53:57:fe:09:32:9a:96:c5:c8:71:4c:8d:00:20:fc:
         48:07:f7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----