Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130302e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3130302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          2RG0/lD9vEwkUhRW6LYC1lVmJfzky9pOHzkoulWAZbk=
Subject key identifier:   D3:3C:56:5D:29:DB:EE:4D:29:56:EF:E7:38:1E:F4:65:B3:A4:34:7D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2BEFD728BC322431A4AD47F36EECD9C38A11E388
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:21 +0000
ROA not before:           Wed 29 Sep 2021 23:56:21 +0000
ROA not after:            Fri 30 Sep 2022 00:01:21 +0000
asID:                     17451
IP address blocks:        117.102.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ef:d7:28:bc:32:24:31:a4:ad:47:f3:6e:ec:d9:c3:8a:11:e3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:21 2021 GMT
            Not After : Sep 30 00:01:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:0e:09:9d:a5:12:8f:e0:00:bb:9a:b9:07:
                    d7:ae:99:75:72:17:df:e9:a4:40:0f:c8:3a:9b:c6:
                    11:0d:2c:cc:de:ac:cd:f6:43:3e:b0:c3:2b:af:a4:
                    ce:b1:b4:dc:e0:f7:1c:cf:30:80:6b:7a:66:48:53:
                    37:12:2c:56:16:34:a0:07:cf:87:5b:b4:35:9f:76:
                    4b:f4:3a:43:fb:b9:9a:11:b5:23:c3:29:e6:21:35:
                    34:ea:b9:c8:b1:ba:c3:3d:f2:49:9c:92:8b:1c:1c:
                    30:13:08:8c:15:56:43:fd:c1:67:e4:b8:36:f8:d7:
                    70:8f:5e:d7:48:b2:0e:16:60:63:2a:78:f5:83:a0:
                    cf:86:88:fa:32:03:ed:98:80:e9:28:3a:d3:fd:37:
                    b1:0a:b8:c4:0e:35:a5:7b:f7:d7:19:9f:9f:bf:d6:
                    9a:de:1f:d2:29:cd:86:9b:f5:c9:08:eb:9a:00:8d:
                    93:ac:17:35:30:9c:b1:93:52:e9:bc:fb:57:70:5d:
                    4f:f8:b6:8e:38:95:49:5d:19:d1:a9:5f:18:86:9f:
                    c8:55:31:51:dd:f6:97:60:f3:6e:58:ab:e2:c6:31:
                    66:7a:fd:c2:1f:86:0c:9b:a2:9d:f5:c5:55:a7:a7:
                    52:51:61:56:b7:71:f0:88:26:e9:7e:70:17:08:15:
                    3f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3C:56:5D:29:DB:EE:4D:29:56:EF:E7:38:1E:F4:65:B3:A4:34:7D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:06:64:7b:47:02:16:4d:2b:42:a1:fc:c7:95:de:5b:0d:
         b1:d7:a5:32:72:ec:c1:f7:c5:75:7e:18:7e:3b:0f:2c:2b:84:
         e8:2b:45:2b:81:c1:41:b0:4c:d1:55:d1:fc:a3:6f:48:c1:cd:
         da:f3:fb:43:a1:20:ba:61:02:f7:4f:e5:a1:c2:1e:aa:f7:85:
         6d:86:e7:f5:2f:a6:2d:5d:13:41:5d:c8:d0:f6:32:2c:e4:c7:
         c0:df:9d:d5:f5:66:56:ca:21:09:46:2d:ee:18:ca:b3:a6:98:
         87:85:5a:58:a2:ef:a5:63:c7:85:00:63:54:ab:d4:80:0a:11:
         c8:44:5d:24:1b:f4:3e:c7:94:86:61:1b:0f:77:10:59:84:88:
         69:e5:7b:26:6d:fa:35:2d:19:49:45:0f:52:ea:6c:48:66:01:
         fb:fa:cd:57:ca:4d:44:fa:81:41:a7:27:a2:ca:f5:a4:a2:40:
         fe:ee:9e:21:7a:89:98:10:97:7c:63:85:01:b8:6e:26:e0:d2:
         be:af:63:af:e1:49:9c:04:66:6f:93:ec:17:1d:f7:41:4d:12:
         01:df:b7:fe:e3:c3:bd:77:23:2d:08:9a:61:d5:9a:77:6b:bf:
         3a:26:6d:84:08:50:9e:82:8a:53:cc:ea:a8:11:79:a0:2e:23:
         eb:24:f1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----