Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37312e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e37312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          gALMDwQ9zxrmEQ7OMNzxGxef1hGb6X4QH7pBKM8Kig4=
Subject key identifier:   AD:1A:EC:77:E2:11:5B:86:5E:44:FB:F5:0A:06:D6:85:D6:8D:F5:3E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6F8029280A535E34014C5CA23AD0E77C9D48C15A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:07 +0000
ROA not before:           Wed 29 Sep 2021 23:56:07 +0000
ROA not after:            Fri 30 Sep 2022 00:01:07 +0000
asID:                     17451
IP address blocks:        117.102.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:80:29:28:0a:53:5e:34:01:4c:5c:a2:3a:d0:e7:7c:9d:48:c1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:07 2021 GMT
            Not After : Sep 30 00:01:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:54:9b:da:69:e2:c3:32:97:b2:4f:fc:0c:
                    2f:a4:f7:63:e1:a4:44:f7:2b:14:db:33:a8:5e:e0:
                    c8:66:96:fc:e1:b2:8d:1e:5e:17:44:43:c7:21:b5:
                    26:fc:f1:b4:16:fb:7d:c5:0b:81:28:31:72:f3:e8:
                    e5:e8:6d:26:49:30:3d:62:71:3f:e8:2a:73:02:7e:
                    33:32:f2:80:e9:ae:fd:ce:c4:5b:f9:3b:7c:9d:a5:
                    17:ee:09:f5:65:55:ae:a1:ca:71:89:ff:d2:59:86:
                    cf:98:d8:c0:75:48:84:b2:ee:77:78:76:e0:e8:37:
                    8c:d9:6c:41:26:7d:48:4a:e9:37:96:a5:ce:35:02:
                    4c:28:9c:47:a7:e3:2f:99:6e:68:e4:b7:38:79:f0:
                    cd:4b:0e:fa:4e:c6:5f:c0:e5:65:3f:c3:6d:e5:b6:
                    5e:d1:82:c9:6e:aa:c3:4a:31:2c:70:af:7a:b3:b1:
                    04:6c:6b:44:b7:b9:97:35:35:8e:d6:46:f4:7e:73:
                    ef:ea:63:ce:a4:0f:d3:67:5e:f1:d6:12:c3:64:98:
                    f4:1c:5e:ad:98:8e:d7:df:70:44:e9:32:bf:2f:51:
                    c4:eb:22:41:05:46:62:92:28:7d:43:b3:84:d9:2f:
                    a1:b3:b7:ab:54:53:e3:7b:b0:41:51:f0:bd:8a:b9:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1A:EC:77:E2:11:5B:86:5E:44:FB:F5:0A:06:D6:85:D6:8D:F5:3E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:fd:82:06:02:3e:b3:a3:e1:a5:25:60:2c:da:1d:b6:66:af:
         d2:13:2c:e2:d2:cc:39:52:8b:8f:e2:c6:8f:1f:56:1b:de:cf:
         4d:d6:fd:a6:1d:9e:9b:10:6f:17:34:5b:89:a2:80:a8:93:8a:
         b5:76:68:f3:0f:47:c0:ab:d0:c3:95:bc:a7:5c:d8:b6:f5:d0:
         7c:7d:b4:d9:4c:2e:9a:ae:e5:65:1d:c3:25:cd:b8:af:1c:7c:
         77:aa:7c:06:e4:79:5a:6a:5b:58:bf:a0:55:73:01:80:41:8d:
         e8:2d:1c:74:45:54:a9:57:55:62:9c:34:b2:a7:64:d1:8c:60:
         dc:ab:d2:83:0d:c1:31:a6:80:cc:db:94:8c:41:49:51:f6:9d:
         d2:1b:a1:b3:f6:9a:6c:dd:20:e2:c8:ab:c6:0e:25:97:22:a4:
         c7:3b:7b:f8:20:79:39:13:a4:36:63:1e:7c:bb:1c:d1:71:dc:
         5c:63:d6:15:aa:0c:14:6a:86:69:e8:b8:27:37:56:71:24:c9:
         42:b9:d3:00:98:06:18:7c:c5:15:22:da:a7:b8:9e:38:5f:2a:
         f1:37:ec:c7:56:a7:28:0a:27:e3:f5:ce:03:32:20:fd:f8:73:
         a1:51:87:53:f3:1f:32:29:43:90:70:1f:38:9f:5c:d0:11:e4:
         f0:d9:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----