Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37302e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e37302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          G5xnyji7oDknwAh2GUnmMf0XBYv3LSI6IIaqCT4ul84=
Subject key identifier:   43:48:72:04:1D:14:A0:F8:2A:49:13:45:18:65:86:74:93:28:71:A7
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       10638E2774208672B561AEB76FF4E9E9BC7CCE53
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:08 +0000
ROA not before:           Wed 29 Sep 2021 23:56:08 +0000
ROA not after:            Fri 30 Sep 2022 00:01:08 +0000
asID:                     17451
IP address blocks:        117.102.70.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:63:8e:27:74:20:86:72:b5:61:ae:b7:6f:f4:e9:e9:bc:7c:ce:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:08 2021 GMT
            Not After : Sep 30 00:01:08 2022 GMT
        Subject: CN=3082010A0282010100BC4A46D8C1DD31B029EF5E51663CBAD5A2015AA0BD3FFC8D6A8B9CE4CB22A2CAED3127EC21693E9EE127937DB33816921E317F42B222BB40EE6B9366AC05D9C612AA7057F4E5B068E88899F790A3FB98ABD464DC8AE027AEA3264DB9DE9FAC53A20ACC6A17A293918EE563B53EC928D202259CB46B6D196BC74259BF8FD8C8DB408C81E5D9B03377A08D6F5AFFB6318A19DBC312F9F936519B77B6F6841681FC99BDD63A4CCAE6E6A5CC6B030D5DB17ED3A3347FF69495A224792990638153A28AD1CF10B38D8AD6AC7F6FFDA2980E5FA326DEE27D9667C930F75CC17EBED1E74A02D46C694B6C710A693920AE8500596F8C96CE1A76E8AA67D238B49FAA512D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:46:d8:c1:dd:31:b0:29:ef:5e:51:66:3c:
                    ba:d5:a2:01:5a:a0:bd:3f:fc:8d:6a:8b:9c:e4:cb:
                    22:a2:ca:ed:31:27:ec:21:69:3e:9e:e1:27:93:7d:
                    b3:38:16:92:1e:31:7f:42:b2:22:bb:40:ee:6b:93:
                    66:ac:05:d9:c6:12:aa:70:57:f4:e5:b0:68:e8:88:
                    99:f7:90:a3:fb:98:ab:d4:64:dc:8a:e0:27:ae:a3:
                    26:4d:b9:de:9f:ac:53:a2:0a:cc:6a:17:a2:93:91:
                    8e:e5:63:b5:3e:c9:28:d2:02:25:9c:b4:6b:6d:19:
                    6b:c7:42:59:bf:8f:d8:c8:db:40:8c:81:e5:d9:b0:
                    33:77:a0:8d:6f:5a:ff:b6:31:8a:19:db:c3:12:f9:
                    f9:36:51:9b:77:b6:f6:84:16:81:fc:99:bd:d6:3a:
                    4c:ca:e6:e6:a5:cc:6b:03:0d:5d:b1:7e:d3:a3:34:
                    7f:f6:94:95:a2:24:79:29:90:63:81:53:a2:8a:d1:
                    cf:10:b3:8d:8a:d6:ac:7f:6f:fd:a2:98:0e:5f:a3:
                    26:de:e2:7d:96:67:c9:30:f7:5c:c1:7e:be:d1:e7:
                    4a:02:d4:6c:69:4b:6c:71:0a:69:39:20:ae:85:00:
                    59:6f:8c:96:ce:1a:76:e8:aa:67:d2:38:b4:9f:aa:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:48:72:04:1D:14:A0:F8:2A:49:13:45:18:65:86:74:93:28:71:A7
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:6e:f5:c5:ce:5d:48:81:3c:e4:f6:dc:b7:1b:9c:62:4f:f5:
         d9:6c:b4:7e:14:29:53:5c:ea:93:67:f5:cf:e1:82:a4:a0:c4:
         ba:1d:0d:1f:83:ca:71:4c:89:0d:3e:36:25:49:59:47:d6:ac:
         8f:85:ac:d9:c3:a9:c6:3d:38:23:d0:4a:68:96:a8:25:1a:cc:
         28:28:85:8d:bb:f8:06:ef:ad:b9:02:50:3c:4b:20:01:ec:6e:
         4a:46:8a:f0:68:df:a9:7d:e2:e4:7d:87:a1:70:aa:37:1a:76:
         b6:81:98:0b:c0:61:19:da:07:9a:00:76:cb:7c:27:f8:e9:6c:
         73:34:93:c8:0b:f9:17:e7:78:5d:a4:a4:8d:51:a4:5b:f4:51:
         56:21:fd:c0:48:d3:81:7e:cd:82:ad:df:96:4b:28:07:6b:20:
         5e:14:f3:34:a5:04:23:9d:44:45:85:c9:96:ed:a4:40:6e:a0:
         ca:54:26:c2:11:82:4f:9b:31:b1:fa:c1:0d:89:9b:5f:40:03:
         9c:bc:26:e8:d0:00:5f:f4:1e:03:19:14:48:51:43:66:cb:f4:
         7a:f4:bc:64:f0:b8:41:be:7e:8f:c1:0f:d4:20:13:5f:eb:f3:
         bb:bf:24:f5:5b:19:e2:c6:87:9b:f0:c4:9a:60:5e:bb:97:b0:
         e6:c3:6a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----