Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131302e302f32342d3234203d3e203338343832.roa
File:                     3131372e3130322e3131302e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          pO1FxxenaMQis69stEaWZJ/5gYe/zObG2fzA+ufp2lw=
Subject key identifier:   90:78:23:0F:1E:33:48:BB:5B:DD:C0:24:8F:8C:82:85:5C:03:C4:02
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3A8ECDC1BF010729AB6639C141DD527F0FA5BB26
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131302e302f32342d3234203d3e203338343832.roa
Signing time:             Sat 02 Oct 2021 00:27:31 +0000
ROA not before:           Sat 02 Oct 2021 00:22:31 +0000
ROA not after:            Sun 02 Oct 2022 00:27:31 +0000
asID:                     38482
IP address blocks:        117.102.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8e:cd:c1:bf:01:07:29:ab:66:39:c1:41:dd:52:7f:0f:a5:bb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Oct  2 00:22:31 2021 GMT
            Not After : Oct  2 00:27:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:61:ec:46:c4:8b:6d:01:94:18:81:1f:55:
                    02:57:6f:31:85:9c:96:b5:f1:74:11:78:7a:de:c1:
                    02:69:d8:2c:fb:24:be:38:c5:35:21:b1:4d:ad:c7:
                    00:38:5a:0d:6f:63:7b:bf:aa:09:dc:f8:fd:6e:9f:
                    59:b8:de:45:f7:8e:15:83:f8:f0:22:e1:39:ec:4e:
                    bd:e1:e1:cc:19:87:e9:8f:f9:b1:e0:e7:4d:ec:2d:
                    42:f8:20:e5:2c:f7:81:98:ee:c3:9d:65:fe:51:b3:
                    a8:f8:00:5c:0b:f6:17:a3:7b:d9:70:27:f9:62:57:
                    39:f9:ca:24:11:0c:bc:56:13:37:4b:48:31:fd:11:
                    d3:3f:d5:38:3f:a7:b7:0c:ad:1c:86:10:01:71:fb:
                    33:05:6f:ff:48:32:09:35:31:49:0f:cb:17:54:00:
                    c4:05:b2:a5:48:a4:2e:fe:4a:fd:0f:8a:1b:30:0a:
                    a3:8d:11:5a:6c:58:00:20:19:a5:d6:b7:9b:1e:7c:
                    1b:fd:47:e6:94:31:40:d8:fb:77:5f:6e:5c:17:bc:
                    28:c0:98:87:05:f3:bf:7b:5d:7d:a7:fe:6c:3d:9b:
                    e7:05:bd:a9:7e:8a:77:7a:de:01:1b:c5:2d:40:59:
                    f5:2e:4a:67:d6:ff:6d:5e:9a:c2:70:ac:01:86:1c:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:78:23:0F:1E:33:48:BB:5B:DD:C0:24:8F:8C:82:85:5C:03:C4:02
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131302e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:fd:d1:dc:9a:25:0c:06:b8:7c:b3:86:33:88:2b:70:a8:
         ba:d4:bc:e6:a3:72:17:93:52:27:84:93:35:41:e3:1b:8e:d6:
         dd:10:77:a7:52:4b:ce:98:bc:d4:5e:70:91:34:cc:00:ac:40:
         e9:91:28:38:04:29:fe:cc:5f:2d:9a:e9:23:71:b9:cc:47:6a:
         63:21:59:f3:f3:54:de:bc:99:79:2b:08:37:41:5c:9d:92:a1:
         8b:e2:b5:d1:f3:7e:cb:72:71:02:83:60:ed:53:b9:f7:f9:58:
         de:66:ba:9e:b1:16:ea:3f:06:42:00:42:2a:14:68:68:65:2a:
         97:f3:b2:1c:4b:a4:ff:2b:ba:70:97:a3:03:78:b1:f6:0d:82:
         53:30:d0:b1:6e:e3:28:65:9f:5d:ac:24:2b:b5:a7:6e:ca:bb:
         2b:b3:14:2f:d0:9c:f4:ad:d3:7f:d6:67:28:96:45:5c:e7:37:
         97:67:82:df:9b:5c:37:87:9d:1e:b5:df:38:c1:db:f3:c1:87:
         a3:21:84:60:fe:7b:56:8f:49:ad:bc:cb:ee:94:97:0b:9f:27:
         8f:ba:6a:88:da:f4:0f:d3:b8:5d:3d:c1:72:8c:64:c4:70:a6:
         8b:c2:c3:e1:5e:57:32:c9:cc:93:77:17:0d:d7:36:18:1e:83:
         4b:9b:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----