Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130362e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3130362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          NSjYf3D7IcVTwY6j0Vc4nR/FHjQGeZmwmZxy49hi5/c=
Subject key identifier:   D0:A1:11:23:3C:9A:D8:57:2B:B3:E4:EB:52:0F:1F:DE:BB:B9:61:A5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       37D3AB031750D79D318A403DE34A2DAE3F5C973A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:23 +0000
ROA not before:           Wed 29 Sep 2021 23:55:23 +0000
ROA not after:            Fri 30 Sep 2022 00:00:23 +0000
asID:                     17451
IP address blocks:        117.102.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d3:ab:03:17:50:d7:9d:31:8a:40:3d:e3:4a:2d:ae:3f:5c:97:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:23 2021 GMT
            Not After : Sep 30 00:00:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:fb:a4:3c:46:7f:c9:a9:a8:73:0d:a1:3c:
                    8c:a2:9c:91:6e:34:4f:e5:66:74:73:9a:37:cf:f4:
                    5f:bf:cb:7b:79:c6:1c:f2:35:2b:f6:af:16:fe:e4:
                    df:41:5f:de:a5:73:1f:68:7e:35:6e:63:3c:f2:f1:
                    02:3d:fe:eb:06:94:2d:ca:23:d5:f5:49:4b:13:6a:
                    08:c6:35:e5:24:37:91:74:5e:f2:f1:33:63:06:81:
                    a1:99:ca:bf:f9:d2:c9:ef:88:75:93:b2:90:dc:61:
                    b0:2a:7a:0e:2b:ae:08:d6:42:e4:8c:3e:07:48:45:
                    e4:2e:24:45:a8:8e:4f:10:81:80:fc:39:fa:3a:b6:
                    27:71:f3:83:d2:61:d9:ea:d4:32:b4:61:fd:64:5d:
                    76:af:0c:07:7b:22:d2:49:3f:23:74:d3:7c:cb:0d:
                    09:56:39:09:7f:51:65:e0:87:d7:27:ec:f3:a0:22:
                    1e:5e:da:37:c9:df:49:b6:40:a0:08:22:17:df:66:
                    2d:3c:d5:a7:d5:68:ad:14:7b:1b:4a:b1:a5:e7:0b:
                    ea:20:43:8d:02:73:d4:ec:de:2e:9f:05:5d:1b:3c:
                    c0:53:d5:8d:cb:03:8e:6c:fa:be:cf:a7:41:5c:24:
                    68:3f:cd:63:64:ce:8e:4b:c1:8d:eb:b0:0d:c4:5a:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A1:11:23:3C:9A:D8:57:2B:B3:E4:EB:52:0F:1F:DE:BB:B9:61:A5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:5c:92:b1:1f:c2:e7:51:33:a9:5a:67:25:52:51:11:8c:c1:
         30:d3:5e:07:9b:c5:b4:e3:20:92:ba:95:e6:fa:29:f7:3a:e1:
         4d:03:1f:7a:50:e1:2f:8a:f2:de:31:54:c0:82:ae:30:1b:c3:
         9b:d8:85:90:a0:1a:8b:23:b6:21:b1:85:6c:68:49:16:e6:37:
         99:dc:fc:1d:60:7e:90:24:1c:d4:41:cd:8c:3b:c5:80:16:0c:
         db:93:9c:19:89:ce:37:43:8c:7b:c8:33:0f:f1:b7:78:35:b3:
         d9:fd:89:c6:c3:20:3f:10:71:bf:65:12:34:68:d6:5e:33:ab:
         1a:16:70:c4:a2:b9:ed:20:a8:9a:8c:db:bc:12:f4:d8:b6:80:
         da:49:04:b4:b7:30:99:66:86:9c:d1:56:c3:79:62:b9:5d:b9:
         a6:2c:98:d8:95:20:50:c1:0c:7f:62:40:4b:f2:68:24:15:92:
         90:cf:47:fa:78:50:6c:59:64:f3:be:02:42:a6:ad:9a:b3:ea:
         8e:f2:5d:76:69:e2:95:58:c0:5c:a1:0f:f2:7c:0a:02:c9:86:
         7e:25:16:57:6c:7f:d5:1d:68:83:28:f3:0f:9f:62:fa:a6:28:
         6c:d5:75:5e:f5:89:59:a8:1f:c3:a5:01:6f:03:7e:84:09:c3:
         7d:e9:97:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----