Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38342e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e38342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          gHB3bzTY6JrItuPnSlT18S6XllC+8EfDqcbfbFXNEfc=
Subject key identifier:   53:0B:55:36:5E:12:7D:AE:6B:E7:5A:3C:F6:87:70:07:E3:D3:44:0A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       43301D6DD28480AE8A5DEF6B843794ED745EEF02
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:02 +0000
ROA not before:           Wed 29 Sep 2021 23:55:02 +0000
ROA not after:            Fri 30 Sep 2022 00:00:02 +0000
asID:                     17451
IP address blocks:        203.142.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:30:1d:6d:d2:84:80:ae:8a:5d:ef:6b:84:37:94:ed:74:5e:ef:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:02 2021 GMT
            Not After : Sep 30 00:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:e9:cb:e3:b4:e7:9b:fd:47:82:da:c2:62:
                    dd:54:cf:b9:9b:0c:23:4b:33:9b:75:81:6d:81:02:
                    4e:15:82:db:92:b9:fb:8b:ec:43:a1:ed:65:ee:fa:
                    d9:65:a4:ed:70:b9:b9:e8:7e:5b:1a:f0:43:c0:3e:
                    b6:93:22:dc:c0:df:e5:c8:7e:ab:81:9d:b5:d4:86:
                    20:99:1c:72:55:17:1e:ab:a5:ab:ee:c9:51:4c:77:
                    f9:c4:37:8c:33:3e:0a:ac:2c:43:51:e3:85:8f:28:
                    91:2d:7e:09:69:ac:65:eb:e2:a8:b6:98:51:6a:1c:
                    01:6d:86:86:23:dd:c6:67:60:3a:11:81:0d:2b:65:
                    34:97:ce:9e:3f:f2:5b:1c:86:1b:1c:fd:fa:32:7c:
                    2c:94:74:00:e2:f0:53:ab:ae:ce:37:bd:7b:a5:f5:
                    49:97:1f:c4:02:d1:c4:09:ca:c0:7e:e1:cf:0f:91:
                    81:87:d6:b1:8c:8a:ab:43:92:59:29:6a:3d:3e:4e:
                    47:ae:7c:ef:04:84:41:4e:96:35:88:55:b3:56:bc:
                    61:86:bd:7d:b7:0a:32:ab:c5:20:b7:02:50:67:e9:
                    78:48:34:ac:7d:39:12:a0:6e:d2:f0:ef:18:17:81:
                    6e:1f:0a:6b:9b:04:27:58:84:88:b1:13:2f:4b:5e:
                    72:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0B:55:36:5E:12:7D:AE:6B:E7:5A:3C:F6:87:70:07:E3:D3:44:0A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:27:89:3c:ff:84:a3:04:a4:06:8f:87:ed:b4:b6:80:61:
         e2:a4:e2:ad:05:d7:2d:e2:43:4b:85:91:f8:0f:f9:d7:63:e6:
         9a:eb:56:17:45:99:ad:a4:8b:7e:52:b6:d8:45:e7:f9:ac:b5:
         ab:57:8f:f7:5d:32:5d:b6:5e:34:dd:89:5d:55:de:bc:20:c0:
         e9:53:c2:e3:12:16:51:44:9e:42:7b:92:06:ea:42:6a:7b:19:
         b2:b1:90:89:86:24:7d:96:80:ae:02:21:cc:12:e1:a5:91:f0:
         d2:4d:bf:b5:4c:d7:cc:e5:82:c4:66:d7:70:a5:01:d4:ab:15:
         ba:c7:7c:64:8d:ce:2b:7c:af:77:46:d8:e0:c5:ef:1c:83:42:
         6c:18:ca:34:31:fc:4f:8c:5e:54:2f:a2:c2:fb:d7:99:a7:35:
         54:d4:58:27:fb:d8:d5:20:99:14:3d:17:45:54:af:e3:73:cb:
         ff:4f:42:7d:3d:0c:16:d7:c8:79:69:bd:fb:2f:14:d9:50:ba:
         68:97:72:44:df:83:87:7a:b6:f8:8d:31:a9:6c:f8:f2:ea:1f:
         f6:45:36:be:1c:17:c1:37:14:e4:f7:6c:c3:17:ca:b9:98:b8:
         ee:de:d0:e1:cb:33:86:49:e3:1c:ae:b1:db:46:b7:47:98:5d:
         59:a4:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----