Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38352e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e38352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          eGqvRSpj+3xgdSjw6TGBPCB+mizTSuiYH++QaaCzVJ4=
Subject key identifier:   F5:27:D6:1C:E7:05:0B:A8:B0:45:D1:79:7B:16:D6:F0:3A:49:59:8E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       05F12BC3632DFE1D0C846A916C6B20CFC3F6E7B9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:10 +0000
ROA not before:           Wed 29 Sep 2021 23:55:10 +0000
ROA not after:            Fri 30 Sep 2022 00:00:10 +0000
asID:                     17451
IP address blocks:        117.102.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f1:2b:c3:63:2d:fe:1d:0c:84:6a:91:6c:6b:20:cf:c3:f6:e7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:10 2021 GMT
            Not After : Sep 30 00:00:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:4a:ca:ac:3b:bf:38:8b:a7:90:81:87:4d:
                    58:43:f5:55:6b:0c:a1:63:0f:2a:d8:a3:e1:c4:21:
                    f1:31:e6:64:88:a6:4a:c4:86:ee:0f:bf:dd:d6:6a:
                    0b:21:6c:83:6a:8a:34:f0:65:dc:b9:3b:74:ff:80:
                    65:5d:e5:07:12:fc:b5:c8:b6:04:5a:78:df:43:65:
                    ed:dd:54:04:ff:e3:63:7c:29:90:36:83:c4:f8:fc:
                    f1:83:0d:82:f6:78:90:77:07:27:7f:08:20:ba:74:
                    01:e2:09:72:5e:20:e0:ab:df:d5:88:ef:67:37:9e:
                    ff:f7:80:25:42:d9:bb:8c:5d:ba:13:5c:40:bb:5f:
                    53:0a:57:80:8d:41:26:56:d4:e1:e0:60:91:3a:23:
                    49:6c:fc:21:f2:52:e3:dc:00:f2:8d:43:6b:63:f1:
                    20:e4:3e:8d:b7:09:14:2b:84:f3:3b:6a:03:18:e7:
                    9f:ee:18:1b:61:6e:e8:a1:ec:dd:d5:ce:77:7b:74:
                    8b:ef:11:d3:e5:15:99:f9:77:9f:a9:93:41:68:fa:
                    a6:e6:f6:65:6a:ec:e3:27:6b:66:93:21:41:14:f0:
                    f4:da:ae:b8:55:c0:8c:32:f4:ee:77:d5:4e:80:b1:
                    a5:be:9e:76:65:53:ef:7d:94:f3:17:b1:29:0a:b4:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:27:D6:1C:E7:05:0B:A8:B0:45:D1:79:7B:16:D6:F0:3A:49:59:8E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:da:59:ab:af:29:2f:15:8e:56:a0:cc:90:5e:6e:11:b4:e5:
         41:1b:09:cc:b3:9c:e8:8b:72:63:f6:43:2f:33:c0:db:8a:f8:
         d3:1d:d4:e9:54:4b:6a:ce:d1:f1:3a:e2:99:fd:31:59:d7:d4:
         71:dd:27:66:02:fa:15:ad:dc:ae:85:15:77:0b:cd:8e:28:9c:
         af:79:18:0b:10:f7:b1:30:9f:d3:a6:5b:0a:b7:bd:6b:02:74:
         f3:ce:de:1e:f6:ad:a4:3b:88:08:d1:24:d4:64:50:24:71:70:
         4a:25:58:50:df:24:83:2e:c1:53:07:6c:7f:f4:47:64:e3:a6:
         5b:b2:d6:c4:8d:23:71:a0:71:53:a4:53:f3:47:cd:24:35:1a:
         fd:69:41:0a:25:29:87:49:b9:94:39:d6:ff:ad:e8:55:b6:98:
         27:d7:ad:0f:e3:c7:c9:8f:e8:80:13:f1:59:7b:f1:e8:e3:7c:
         69:c5:6b:d9:53:07:fb:f5:18:da:61:07:53:63:5a:7a:93:a0:
         c3:ac:a4:73:30:41:ff:87:40:27:70:4a:c6:67:37:b5:2b:49:
         66:dc:7e:d1:95:2d:fe:89:f8:2b:67:3e:ed:76:00:77:eb:11:
         21:69:3a:24:2a:f0:e1:6e:9c:5a:1f:18:e0:b2:20:64:43:a7:
         a1:b5:c3:41
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUBfErw2Mt/h0MhGqRbGsgz8P257kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTBaFw0yMjA5MzAwMDAwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFEMDRBQ0FBQzNCQkYzODhC
QTc5MDgxODc0RDU4NDNGNTU1NkIwQ0ExNjMwRjJBRDhBM0UxQzQyMUYxMzFFNjY0
ODhBNjRBQzQ4NkVFMEZCRkRERDY2QTBCMjE2QzgzNkE4QTM0RjA2NURDQjkzQjc0
RkY4MDY1NURFNTA3MTJGQ0I1QzhCNjA0NUE3OERGNDM2NUVEREQ1NDA0RkZFMzYz
N0MyOTkwMzY4M0M0RjhGQ0YxODMwRDgyRjY3ODkwNzcwNzI3N0YwODIwQkE3NDAx
RTIwOTcyNUUyMEUwQUJERkQ1ODhFRjY3Mzc5RUZGRjc4MDI1NDJEOUJCOEM1REJB
MTM1QzQwQkI1RjUzMEE1NzgwOEQ0MTI2NTZENEUxRTA2MDkxM0EyMzQ5NkNGQzIx
RjI1MkUzREMwMEYyOEQ0MzZCNjNGMTIwRTQzRThEQjcwOTE0MkI4NEYzM0I2QTAz
MThFNzlGRUUxODFCNjE2RUU4QTFFQ0RERDVDRTc3N0I3NDhCRUYxMUQzRTUxNTk5
Rjk3NzlGQTk5MzQxNjhGQUE2RTZGNjY1NkFFQ0UzMjc2QjY2OTMyMTQxMTRGMEY0
REFBRUI4NTVDMDhDMzJGNEVFNzdENTRFODBCMUE1QkU5RTc2NjU1M0VGN0Q5NEYz
MTdCMTI5MEFCNDdCMEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwdBKyqw7vziLp5CBh01YQ/VVawyhYw8q2KPhxCHxMeZkiKZKxIbu
D7/d1moLIWyDaoo08GXcuTt0/4BlXeUHEvy1yLYEWnjfQ2Xt3VQE/+NjfCmQNoPE
+Pzxgw2C9niQdwcnfwggunQB4glyXiDgq9/ViO9nN57/94AlQtm7jF26E1xAu19T
CleAjUEmVtTh4GCROiNJbPwh8lLj3ADyjUNrY/Eg5D6NtwkUK4TzO2oDGOef7hgb
YW7ooezd1c53e3SL7xHT5RWZ+XefqZNBaPqm5vZlauzjJ2tmkyFBFPD02q64VcCM
MvTud9VOgLGlvp52ZVPvfZTzF7EpCrR7DwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FPUn1hznBQuosEXReXsW1vA6SVmOMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzcyZTMxMzAzMjJlMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAB1ZlUwDQYJKoZIhvcNAQELBQADggEBACbaWauvKS8V
jlagzJBebhG05UEbCcyznOiLcmP2Qy8zwNuK+NMd1OlUS2rO0fE64pn9MVnX1HHd
J2YC+hWt3K6FFXcLzY4onK95GAsQ97Ewn9OmWwq3vWsCdPPO3h72raQ7iAjRJNRk
UCRxcEolWFDfJIMuwVMHbH/0R2Tjpluy1sSNI3GgcVOkU/NHzSQ1Gv1pQQolKYdJ
uZQ51v+t6FW2mCfXrQ/jx8mP6IAT8Vl78ejjfGnFa9lTB/v1GNphB1NjWnqToMOs
pHMwQf+HQCdwSsZnN7UrSWbcftGVLf6J+CtnPu12AHfrESFpOiQq8OFunFofGOCy
IGRDp6G1w0E=
-----END CERTIFICATE-----