Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37362e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e37362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          aghExlQT78Rs6yljhyoeZGWFx7aYTkqxXbWDh/fJdFo=
Subject key identifier:   25:0A:68:98:AF:C0:65:FC:AE:63:DE:D2:01:BF:BF:D6:67:93:9D:43
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       213257336B336CD8333E169DEE67619787ADE871
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:33 +0000
ROA not before:           Wed 29 Sep 2021 23:55:33 +0000
ROA not after:            Fri 30 Sep 2022 00:00:33 +0000
asID:                     17451
IP address blocks:        117.102.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:32:57:33:6b:33:6c:d8:33:3e:16:9d:ee:67:61:97:87:ad:e8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:33 2021 GMT
            Not After : Sep 30 00:00:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:a7:50:7b:85:ed:f8:55:d3:42:d7:17:24:
                    ff:6c:f1:cc:70:9a:bc:a6:c9:5c:09:ea:fc:9b:8a:
                    53:4d:a7:ad:08:92:c6:77:5c:14:54:7d:27:d5:54:
                    55:26:85:89:fb:6c:a6:c9:2a:ae:1b:58:1a:d2:87:
                    a3:a0:08:15:90:1a:0a:73:3d:03:f1:67:7e:5d:7f:
                    0b:e5:ad:a2:b4:1a:f1:2d:5e:fb:39:98:32:78:af:
                    8c:4b:a1:7f:8d:67:b2:92:ee:e8:b4:39:8f:98:40:
                    52:d3:24:bb:1b:49:cc:0b:06:99:9f:e1:f2:d0:b1:
                    1c:84:43:d8:e8:92:91:77:9f:9d:27:1d:b4:fc:32:
                    d2:dd:53:34:a4:e8:2f:8f:24:3e:42:fc:37:41:b3:
                    a6:e9:d1:2d:7e:4c:ef:61:0b:78:75:62:a8:26:ee:
                    74:6e:67:be:b6:1d:14:57:99:d0:f4:f0:80:f6:13:
                    be:91:74:11:e1:94:30:15:3b:fd:63:04:26:30:13:
                    c8:80:15:fa:be:56:95:f8:d9:08:59:a9:6b:86:4a:
                    6a:9e:56:20:b6:c2:b5:78:76:11:14:5f:3f:5d:d5:
                    5c:bf:ca:93:9e:d4:47:86:3f:5f:85:df:eb:e5:1c:
                    60:3a:03:b8:72:0a:6d:bf:4f:1a:e9:7e:be:7e:c3:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0A:68:98:AF:C0:65:FC:AE:63:DE:D2:01:BF:BF:D6:67:93:9D:43
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:4e:3f:b5:c4:f6:16:c9:4c:ea:e5:00:fe:76:f4:21:73:8c:
         ce:a8:d7:eb:91:17:5d:b7:a0:f2:90:4a:79:c2:f8:3e:17:0c:
         0d:5b:b1:46:ab:e2:a1:95:f0:be:ec:a0:c1:ac:53:18:10:af:
         ae:dd:55:86:2a:c3:1f:e1:15:21:7c:31:f9:d9:0c:99:8f:1c:
         81:c5:14:e3:4d:d4:b9:77:14:65:90:fb:f6:1e:29:b7:69:9a:
         70:13:78:38:f7:30:81:ab:71:8e:d7:bd:5d:0f:e2:88:19:ed:
         cb:05:b1:83:1e:ee:50:e1:1f:8b:2a:35:f3:79:a0:b3:b9:45:
         3c:f8:d7:a1:04:29:46:55:84:03:a4:17:43:f2:2e:08:b0:10:
         f8:d0:ed:b4:2f:09:fe:be:15:d7:b3:f9:02:24:53:4e:8a:ff:
         bc:74:ea:ed:85:41:6b:f0:12:24:2b:ed:b6:dd:c9:b3:61:40:
         1b:3a:b7:48:43:81:57:39:ab:f0:0e:00:19:15:24:db:9a:0a:
         e4:a1:98:7a:71:93:7a:71:28:54:49:d4:95:91:7c:68:56:6c:
         71:ea:00:65:d4:79:5a:fc:4c:a9:ea:27:80:8b:53:02:98:ed:
         b2:43:f9:15:52:61:44:4e:5c:6c:22:c6:8e:4c:c2:c6:f6:96:
         0e:1c:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----