Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132372e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3132372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ZtFrqDj8HSZBCN4Q7sQpYo9RAon7sAENtjHSQaioetA=
Subject key identifier:   86:D4:A7:CF:FC:4D:F7:17:E6:31:A9:5B:78:E5:57:ED:BF:F3:DD:10
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6EB3D8A018755210B80011C6A5F5142D7F267419
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:16 +0000
ROA not before:           Wed 29 Sep 2021 23:55:16 +0000
ROA not after:            Fri 30 Sep 2022 00:00:16 +0000
asID:                     17451
IP address blocks:        117.102.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b3:d8:a0:18:75:52:10:b8:00:11:c6:a5:f5:14:2d:7f:26:74:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:16 2021 GMT
            Not After : Sep 30 00:00:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:3b:d8:82:8e:d5:54:9f:fc:30:ea:8f:a5:
                    87:b7:79:27:e4:a5:03:f5:a8:2a:68:74:ae:2d:8f:
                    c8:8c:f1:e6:06:39:e4:d9:43:44:8d:bf:08:09:35:
                    ed:dc:aa:12:4a:dd:4f:f7:26:bd:10:c5:5e:e9:17:
                    9a:ed:56:0c:1c:f4:ac:d3:20:61:ad:ef:bd:39:42:
                    f7:99:c2:b8:7a:7c:93:44:5b:62:87:ec:8f:50:97:
                    7b:fa:65:73:6f:a1:7a:a5:98:54:0f:26:ed:1f:3e:
                    ee:fb:2b:fc:af:19:7c:59:d5:74:21:c7:ea:90:0a:
                    70:8e:51:28:c8:54:44:54:2a:33:fd:53:0e:99:07:
                    73:7b:a9:6a:81:d1:b4:be:2a:40:c8:ae:62:d0:4f:
                    bf:33:52:6c:98:96:7f:8f:f1:aa:10:99:f7:b6:89:
                    9d:70:fc:95:f0:33:03:93:23:5e:c7:7c:be:79:05:
                    a7:ab:b0:6c:c4:1e:fb:25:70:f6:a2:40:1c:08:70:
                    71:5d:5a:93:bd:fd:98:98:23:0b:c1:5e:e8:0b:b8:
                    f1:ed:60:c0:66:e1:82:29:1a:47:ef:a6:d8:e3:9c:
                    81:41:df:7b:34:76:84:1d:a6:68:2b:cc:3f:57:35:
                    63:7b:de:47:58:f2:a7:f5:a9:da:88:dc:27:72:4f:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D4:A7:CF:FC:4D:F7:17:E6:31:A9:5B:78:E5:57:ED:BF:F3:DD:10
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:63:c7:a0:34:68:20:d1:6f:0b:ea:e5:41:a8:a9:3a:e7:
         20:72:17:d1:4c:5b:ed:5d:e0:be:d0:bc:07:d9:c5:95:82:5e:
         e3:72:cd:94:bc:47:8f:3b:62:92:7a:2a:28:20:2a:97:e5:af:
         15:51:58:fa:47:aa:e4:58:1b:5b:16:30:a5:77:5b:e4:ca:55:
         de:0b:ab:ef:a4:25:5b:fd:92:d2:6a:13:ec:83:7b:41:50:fe:
         d5:af:e8:c1:3d:1f:bf:9c:4e:e3:91:f5:56:b8:8c:e6:aa:b7:
         25:f6:e6:04:d5:b3:11:36:69:3d:1b:7b:07:59:af:1f:f3:1f:
         22:e6:31:56:44:b8:f0:73:58:7f:00:46:3a:6d:97:11:a1:c2:
         de:0a:95:90:a3:a9:56:ec:ab:76:00:ba:74:79:b3:8e:a2:b2:
         97:69:6d:b4:b2:3d:46:e4:4d:bc:38:6d:b9:7f:68:c7:c6:ca:
         1b:04:6c:6c:00:b6:b8:ae:38:91:e1:c5:85:a1:ed:5f:f7:d4:
         a2:b4:67:6b:fe:57:28:71:87:ca:d0:0d:98:35:0d:d8:68:68:
         7c:c8:d6:1d:cd:fd:6b:df:b6:72:4f:fc:c9:55:1d:24:33:a0:
         75:ae:55:37:31:41:ec:2e:9a:56:e4:65:a0:8d:90:04:40:97:
         32:0e:f5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----