Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132312e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3132312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          rsHnsyUCDO7MhPyW5TAA0f4RMIv0I5LCryFacUu1ZNg=
Subject key identifier:   97:75:C4:F6:EC:67:B8:49:27:A2:AC:59:F9:8F:C2:D3:74:B3:EF:6E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       067C16B6A23AB873577BC4A39F858014954914BF
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:25 +0000
ROA not before:           Wed 29 Sep 2021 23:55:25 +0000
ROA not after:            Fri 30 Sep 2022 00:00:25 +0000
asID:                     17451
IP address blocks:        117.102.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7c:16:b6:a2:3a:b8:73:57:7b:c4:a3:9f:85:80:14:95:49:14:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:25 2021 GMT
            Not After : Sep 30 00:00:25 2022 GMT
        Subject: CN=3082010A0282010100BFB2039DFF7B6864425C10DD91AB9F77ECA22E44453E43E981D13372AA0D99C64E80B6837D5FC218815DF43F79DB937B41E499391EA380F6F58E8EF5124B6FF94401D3DF9156843807FA8090645B4B03014F124DC3CCC527B0080D487804E199782758FE547E5364AD957E4B6516480EA00227C7BCE21602D6CC7E5C6E501A96C0DAD235EA747CB72D45437F2E8EDC57269018F23526BF1A57817F338EA6965C9A89F477D16F0D4A696ABAD7E6207720B509DF3C82E695B8C2705B03DD321263D27D60DA3E432892512D8C8E992BB3359C9B1285C587F4D783DCD87E4F5A4E5C7FF3043BE1879F334AF88D85595D1FB197ECA03565BC8605AA8BC9933600A7210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:03:9d:ff:7b:68:64:42:5c:10:dd:91:ab:
                    9f:77:ec:a2:2e:44:45:3e:43:e9:81:d1:33:72:aa:
                    0d:99:c6:4e:80:b6:83:7d:5f:c2:18:81:5d:f4:3f:
                    79:db:93:7b:41:e4:99:39:1e:a3:80:f6:f5:8e:8e:
                    f5:12:4b:6f:f9:44:01:d3:df:91:56:84:38:07:fa:
                    80:90:64:5b:4b:03:01:4f:12:4d:c3:cc:c5:27:b0:
                    08:0d:48:78:04:e1:99:78:27:58:fe:54:7e:53:64:
                    ad:95:7e:4b:65:16:48:0e:a0:02:27:c7:bc:e2:16:
                    02:d6:cc:7e:5c:6e:50:1a:96:c0:da:d2:35:ea:74:
                    7c:b7:2d:45:43:7f:2e:8e:dc:57:26:90:18:f2:35:
                    26:bf:1a:57:81:7f:33:8e:a6:96:5c:9a:89:f4:77:
                    d1:6f:0d:4a:69:6a:ba:d7:e6:20:77:20:b5:09:df:
                    3c:82:e6:95:b8:c2:70:5b:03:dd:32:12:63:d2:7d:
                    60:da:3e:43:28:92:51:2d:8c:8e:99:2b:b3:35:9c:
                    9b:12:85:c5:87:f4:d7:83:dc:d8:7e:4f:5a:4e:5c:
                    7f:f3:04:3b:e1:87:9f:33:4a:f8:8d:85:59:5d:1f:
                    b1:97:ec:a0:35:65:bc:86:05:aa:8b:c9:93:36:00:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:75:C4:F6:EC:67:B8:49:27:A2:AC:59:F9:8F:C2:D3:74:B3:EF:6E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:04:db:c8:46:94:e2:67:39:3f:dd:ac:99:e8:20:b5:34:
         cb:3c:d4:22:8c:97:45:82:2b:2b:74:94:21:fe:1f:65:6f:5d:
         b9:63:ce:55:73:ed:a3:53:e5:c3:05:80:bb:f3:fb:3b:c3:63:
         c4:85:df:67:72:d3:73:0d:49:e5:0a:28:f4:8a:e4:24:9e:22:
         29:36:ea:a9:3f:b5:c8:f2:72:c4:40:85:72:bd:c8:91:20:94:
         7d:05:ff:76:07:0d:29:09:40:fd:cd:83:2a:49:47:c8:7b:f5:
         b7:58:e2:ca:e9:69:6b:8e:db:73:fa:18:4b:11:7a:c1:37:dd:
         08:bd:4d:78:a0:7d:8c:0a:bb:20:ef:f2:50:7f:20:77:64:67:
         31:16:f1:4f:53:83:9b:09:6d:92:26:b9:e0:fb:87:da:a6:43:
         cd:4f:45:a6:49:7a:ac:a7:ca:0b:08:79:c1:ab:59:51:9e:f1:
         de:d2:63:72:a5:03:88:b9:1d:8d:f1:f0:35:c1:73:ef:d1:b6:
         fe:3f:1d:62:1a:9e:df:1d:d6:27:c0:c3:6b:df:38:9a:25:d8:
         cf:a9:05:bf:93:e0:e2:76:cc:c5:2b:3c:29:71:33:6b:7b:5d:
         36:c8:a0:0e:d1:39:5e:e2:a2:a1:9b:d9:81:d8:b6:1f:fa:91:
         22:ba:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----