Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36382e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e36382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          BtsOsLbUG6Ea4OUes7mWrqncqEypoEPT3z5CSPuYqeY=
Subject key identifier:   33:5F:FF:77:34:80:FB:4A:37:4D:D0:D0:2D:AD:10:5A:50:79:46:6A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       32B3040805241D4FCF30365D02F69661DC96FE34
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:06 +0000
ROA not before:           Wed 29 Sep 2021 23:56:06 +0000
ROA not after:            Fri 30 Sep 2022 00:01:06 +0000
asID:                     17451
IP address blocks:        117.102.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b3:04:08:05:24:1d:4f:cf:30:36:5d:02:f6:96:61:dc:96:fe:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:06 2021 GMT
            Not After : Sep 30 00:01:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:77:c0:b4:2c:93:6a:cb:ac:fd:a9:d3:93:91:
                    3e:04:75:ff:ef:5d:d4:16:2b:c2:ec:56:ac:1f:a7:
                    1d:0e:5b:ae:95:9d:f1:bc:f1:2e:fe:60:3d:6a:35:
                    ee:e4:54:aa:44:94:b1:c6:b1:6b:7e:a8:88:46:fc:
                    1d:61:c0:e6:99:4b:40:7b:89:31:29:bb:5f:b1:08:
                    39:24:25:51:d9:27:51:2a:58:2c:95:95:29:d0:c2:
                    1d:01:de:b9:5c:af:86:ee:12:04:fc:7f:91:cd:78:
                    f8:c4:92:cd:b3:05:0d:72:7e:34:55:a3:ef:c0:06:
                    5b:8c:14:cc:fa:05:88:b9:d2:22:30:c4:c9:f9:c5:
                    0a:1b:d7:70:b6:6e:bb:51:2a:77:f7:a0:fe:79:b6:
                    32:f1:ff:f3:7c:d2:2b:e9:25:54:1b:6a:d2:9e:89:
                    0d:4f:4a:8d:96:21:2b:d7:06:6b:91:59:2f:7e:8e:
                    49:0c:0c:f2:14:46:b4:c3:92:0b:87:3e:83:6c:12:
                    8e:ef:7e:0c:e9:b9:f5:f2:17:0b:24:d9:76:e2:64:
                    02:d8:ce:aa:07:4f:7b:ae:55:87:95:12:0e:db:06:
                    db:b3:7e:8c:e0:12:66:f5:2d:0b:a5:98:5a:16:8f:
                    8d:35:88:f4:53:8d:74:d7:c6:48:23:45:c2:11:8e:
                    5f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:FF:77:34:80:FB:4A:37:4D:D0:D0:2D:AD:10:5A:50:79:46:6A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:d7:10:5c:47:d4:26:f6:11:f7:d3:54:54:c5:aa:08:aa:67:
         0c:c8:a3:60:85:9a:e8:1c:d0:c3:12:de:3a:1a:c2:1a:7d:5e:
         9f:5b:ec:0e:06:1d:d2:7d:f3:88:35:fd:56:31:11:d9:74:de:
         b7:70:d4:50:3f:2e:38:80:f9:47:e1:7b:33:60:1b:bc:67:01:
         01:f8:d0:e8:b6:82:29:e0:75:7a:33:ae:8f:39:21:29:54:7d:
         9c:bb:42:67:31:45:da:aa:2e:28:30:43:4a:ce:a1:22:d9:8a:
         65:d6:ed:70:85:a4:74:6d:57:50:4c:01:14:cb:cb:ca:9a:f3:
         bc:20:c2:10:d5:e1:03:ce:ee:ef:7f:a6:dd:96:4d:66:88:dd:
         dc:75:91:61:5c:93:ea:c4:7d:1c:36:16:da:96:65:1d:49:68:
         ab:ec:1a:c2:c9:e1:9c:ef:a5:43:d7:51:8b:50:e9:5f:de:7f:
         29:37:97:39:fc:af:5a:fa:4a:4d:90:59:9a:ff:fa:5c:c8:26:
         74:96:b2:14:2d:51:84:d6:a3:8b:1a:8b:6f:4a:ef:0f:f5:48:
         79:71:94:d8:0c:bc:dd:83:3c:a7:86:b8:fd:8f:ad:29:6b:46:
         b6:f3:f3:d4:7a:76:54:17:2e:18:3e:18:80:8a:ae:06:fa:66:
         57:3b:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----