Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132352e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3132352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          sl3FIOgqqB7Qg+8Yt47QYp5npByMnfdLErQuHTu60dk=
Subject key identifier:   E7:F3:77:CF:3E:76:D1:4E:75:9F:F1:CD:0A:A3:F7:E2:7A:38:B4:9A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7326C5DC828595603033ADDFEEA3564EEFFE931E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:01 +0000
ROA not before:           Wed 29 Sep 2021 23:56:01 +0000
ROA not after:            Fri 30 Sep 2022 00:01:01 +0000
asID:                     17451
IP address blocks:        117.102.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:26:c5:dc:82:85:95:60:30:33:ad:df:ee:a3:56:4e:ef:fe:93:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:01 2021 GMT
            Not After : Sep 30 00:01:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:85:0c:33:b7:a3:67:c8:30:24:1d:fa:bc:
                    09:4a:72:57:b3:35:31:a0:61:2c:7c:c2:e9:35:da:
                    04:56:54:97:76:51:0c:c3:eb:84:80:2d:24:ac:d1:
                    37:1c:98:95:fc:ed:4d:3d:fe:34:c3:d7:bd:ce:a1:
                    a4:70:a6:e1:7b:92:8d:b1:f4:48:ed:d9:b2:16:ad:
                    2c:c7:03:d7:60:d3:5c:6e:7d:93:d0:dc:e0:d9:e0:
                    20:8b:0b:3c:4a:0d:d9:00:ea:4f:7e:5a:5d:e1:93:
                    21:10:36:3b:c7:47:c8:66:40:50:1f:1d:e7:1c:bb:
                    cf:db:36:a6:1f:dc:39:19:9a:11:3a:8a:24:cf:7e:
                    75:57:56:44:38:8b:3f:64:ac:f8:94:4e:3a:e1:6d:
                    32:af:0b:13:1e:e9:0c:cc:25:54:4a:b2:20:83:e9:
                    e4:55:ea:18:90:ed:91:56:94:80:a8:f0:35:90:e9:
                    39:e8:c7:d8:82:e8:e2:9a:d6:0c:bc:3c:a9:05:77:
                    a7:b4:0a:4e:d8:a6:18:9f:d1:d8:72:2a:63:f7:39:
                    19:b6:28:af:0d:a6:7a:d7:04:6c:7e:19:67:2c:0e:
                    21:7d:a6:0e:a6:bf:ba:5f:22:ec:91:f4:39:0e:7f:
                    e7:dc:9c:ad:60:2e:f6:d6:8f:76:8e:e7:69:08:81:
                    4d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F3:77:CF:3E:76:D1:4E:75:9F:F1:CD:0A:A3:F7:E2:7A:38:B4:9A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:59:d0:f5:f3:9f:33:99:0b:13:4d:bb:ef:0f:98:b0:84:
         f6:6c:4f:a7:28:66:9f:54:59:a9:3b:dd:84:e7:03:c5:0e:62:
         f9:2a:b9:ff:26:75:32:be:24:44:83:02:f4:95:d3:23:49:aa:
         00:3c:0a:16:b8:96:cf:51:d5:2e:a0:ce:f5:66:08:f6:95:eb:
         4e:80:b3:65:2f:7b:db:c7:73:02:c7:15:8c:f0:12:6c:a3:f9:
         15:d8:e8:14:16:03:6a:a1:6b:3b:e2:92:22:31:58:ee:c1:98:
         0f:30:4c:73:01:c8:82:f1:cf:63:80:2a:a0:4a:74:ae:f8:b6:
         a7:f8:5d:9e:11:b3:52:05:42:54:56:a9:88:d1:bc:9f:b0:a2:
         4b:9d:f5:c9:28:34:69:33:93:1f:70:e2:7b:c0:8f:ca:24:85:
         e8:ea:a7:48:d6:89:3f:83:4a:c6:5a:07:29:c6:b3:30:59:49:
         a8:2e:1a:42:25:d5:3c:4b:d5:fc:6f:44:38:74:aa:fc:f0:21:
         24:75:62:a0:05:78:f2:ef:b2:3c:d7:6d:d3:3b:43:58:ad:0c:
         b8:27:d4:8d:2f:bf:9e:da:b7:95:ac:3c:0a:a6:54:c2:c2:49:
         7b:f4:0b:9e:0e:67:9c:fe:32:d8:93:f9:b3:2d:57:33:f1:4a:
         e9:a8:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----