Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37392e302f32342d3234203d3e203338343832.roa
File:                     3131372e3130322e37392e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          PyDBPKPoHOqcpte0GY7XsjNYvx7yBuKAjXrocIh4AeE=
Subject key identifier:   7C:79:4C:67:AD:E1:C4:54:DA:0B:F7:8D:52:A4:2B:B0:66:A4:0A:0C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       78BCEAFC1FC9A6BCC052755A93B0FFD2DE58C77F
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37392e302f32342d3234203d3e203338343832.roa
Signing time:             Fri 24 Sep 2021 01:18:32 +0000
ROA not before:           Fri 24 Sep 2021 01:13:32 +0000
ROA not after:            Sat 24 Sep 2022 01:18:32 +0000
asID:                     38482
IP address blocks:        117.102.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bc:ea:fc:1f:c9:a6:bc:c0:52:75:5a:93:b0:ff:d2:de:58:c7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 24 01:13:32 2021 GMT
            Not After : Sep 24 01:18:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:66:15:95:69:28:b0:46:b6:b3:81:f8:fc:
                    63:96:e8:c5:a1:76:de:f9:b4:6b:f1:c6:61:2c:36:
                    8e:3e:71:d2:c1:6a:0c:17:66:81:f4:f1:10:15:fa:
                    40:e5:54:5f:a0:f8:69:fd:a4:d7:04:2c:57:03:14:
                    00:8d:40:d2:b8:12:bf:91:1d:b5:bb:b4:96:b7:db:
                    70:91:a8:00:2b:24:bc:81:07:a7:07:0d:3b:e7:73:
                    e0:94:1e:25:01:ec:ce:7c:69:a6:8b:7f:a0:f5:f7:
                    48:92:a9:6d:54:e2:5e:8b:fd:ce:29:d3:f7:b3:91:
                    10:e8:b0:1e:1e:93:2c:60:4f:a0:31:16:3a:6c:af:
                    b6:03:ba:6b:64:a1:30:db:13:92:fc:de:9b:17:f9:
                    f1:a4:da:23:9c:04:4f:8b:9a:89:5f:a9:cf:f0:76:
                    8a:25:91:7f:37:be:1b:84:f0:86:8e:1f:44:e9:2c:
                    3d:f0:bb:3a:0c:a7:70:58:a4:61:4e:91:3c:ef:ee:
                    46:b7:d0:6d:0d:56:48:0d:9b:d6:12:03:be:ce:3d:
                    20:7c:21:39:a3:f9:a6:ea:f0:80:73:de:0a:60:72:
                    f4:fc:60:80:71:d0:ec:8a:a3:08:e0:f6:8a:2e:4c:
                    a9:ea:2c:e0:ee:c0:0c:72:88:57:26:56:ba:f9:15:
                    68:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:79:4C:67:AD:E1:C4:54:DA:0B:F7:8D:52:A4:2B:B0:66:A4:0A:0C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37392e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:0e:5b:b5:ff:bb:0d:8e:fc:2e:b2:32:50:1d:d6:ff:e3:cd:
         ac:36:d8:7f:a2:6a:c2:8c:67:71:63:a6:3b:36:d6:be:61:6e:
         5f:07:bd:bd:01:d3:40:01:e9:ac:5f:d5:2e:bb:9f:3c:30:bb:
         84:45:85:c7:05:fb:47:60:9f:f4:e5:22:84:7e:4e:10:a2:1e:
         58:d7:15:fa:1c:12:dd:3a:7b:ab:25:67:4b:ef:94:75:f4:cb:
         47:46:da:73:a0:94:6e:2e:c4:29:ef:73:1b:30:d7:30:e5:b2:
         f3:11:12:ad:d1:ac:52:37:10:3d:b6:87:7a:29:d1:42:92:aa:
         a6:56:f4:a6:74:09:b2:7a:eb:16:36:13:5a:56:f1:7a:5a:96:
         07:ef:81:5d:b7:dc:c9:9f:bd:df:47:42:d3:4d:ae:cb:14:62:
         d6:ba:27:ae:0f:09:94:ae:1d:84:c4:8b:d4:d7:20:66:02:db:
         d0:a8:69:36:00:2e:cd:c6:f8:0c:15:d1:74:4e:0f:7a:9a:2d:
         f0:ae:c3:aa:b7:61:e4:6c:10:c0:d3:27:c8:c8:2c:7c:f3:31:
         10:c1:b3:8a:ea:94:9d:08:94:84:3a:25:1f:17:98:34:1e:0b:
         91:a7:76:f3:c1:f2:2b:64:8a:3e:ce:e7:b2:b7:c4:98:3d:d0:
         de:0d:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----