Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35302e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e35302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          g9rZSvLQbTgQnJ1cTd5B9WZCS3LFb9GifvCLeDdA/YI=
Subject key identifier:   20:1B:60:FE:A2:DA:38:73:DC:B2:0A:B7:F8:E5:02:F0:D6:64:4E:B5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7B4EFB396918730B86B07040EA2EAC6A9C96165C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:56 +0000
ROA not before:           Wed 29 Sep 2021 23:55:56 +0000
ROA not after:            Fri 30 Sep 2022 00:00:56 +0000
asID:                     17451
IP address blocks:        202.169.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4e:fb:39:69:18:73:0b:86:b0:70:40:ea:2e:ac:6a:9c:96:16:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:56 2021 GMT
            Not After : Sep 30 00:00:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:d4:eb:e4:1f:89:8c:11:1a:1a:eb:07:7b:
                    3a:b2:bf:c5:a9:81:34:cd:a6:61:4d:5f:ea:ed:b1:
                    73:c0:e7:03:7c:f9:e8:e1:ad:ab:d9:c2:34:7f:fc:
                    75:0d:ec:7c:1f:86:0d:77:07:7f:8a:50:43:e7:5b:
                    04:6a:b5:eb:23:c8:8a:66:61:bd:30:98:c2:28:9f:
                    d0:3d:63:46:09:ae:da:92:55:4a:3b:10:37:34:3f:
                    87:fd:7e:24:66:5c:0f:e2:cb:ec:bc:ce:d4:42:ee:
                    6f:8f:71:ad:50:86:d4:ee:24:ec:75:bc:7d:e4:9c:
                    3a:19:9e:55:5b:a9:74:17:94:7b:64:71:1a:8f:ee:
                    6d:75:17:8d:6c:c1:4a:2f:e0:f3:3c:dc:a5:ec:99:
                    7e:ac:ea:ab:4b:8b:35:0c:4a:9c:7f:16:c0:23:a8:
                    70:9f:bd:5f:8c:dd:e9:9f:93:43:e5:d4:7c:de:05:
                    cb:f1:21:06:ff:cd:bf:19:89:e3:85:a9:9d:00:88:
                    3e:3c:7c:44:3a:8a:da:8e:2a:c3:5d:b5:8f:66:12:
                    58:91:0b:c6:cb:5d:33:2b:a1:86:15:1a:d1:32:d1:
                    e8:93:b9:67:6e:87:4a:7d:02:07:73:b2:4f:c6:68:
                    22:af:79:46:1d:0f:96:72:f0:cf:f6:7c:bd:92:5e:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1B:60:FE:A2:DA:38:73:DC:B2:0A:B7:F8:E5:02:F0:D6:64:4E:B5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f7:f5:b6:70:0d:64:48:8a:ed:01:11:9c:72:3b:9d:59:c1:
         45:5f:32:97:0d:86:ae:5e:fd:e2:2d:62:fa:60:c1:0a:81:a0:
         54:fc:ec:ed:ff:2d:11:bd:cf:b0:1b:18:33:6b:d1:db:f9:0e:
         46:87:c7:b9:c5:a1:5f:15:5c:49:7e:64:65:b4:26:5a:e3:09:
         13:87:16:3b:58:e1:1b:59:a8:b5:d8:75:f5:52:70:28:03:d6:
         3f:33:40:ee:bf:b2:5c:94:81:80:15:18:a7:ad:ac:cf:12:67:
         f1:48:30:78:87:57:fb:8a:da:1e:94:12:b2:7d:77:24:f3:0f:
         28:33:a7:0a:ad:47:c1:d5:ac:02:8d:59:49:58:ea:20:0b:d5:
         fb:38:1d:71:84:5d:62:b0:e5:85:fd:3d:53:36:ac:fd:f5:a7:
         91:02:84:36:c4:d6:c2:44:da:ea:74:73:41:97:b9:f4:0b:b9:
         b6:a9:e1:eb:8f:09:52:16:0d:2f:02:f9:f4:d7:50:74:10:28:
         32:0f:57:0d:10:c7:23:88:85:9a:4a:17:43:ff:66:89:19:3e:
         c8:ae:b6:a5:5e:2b:3e:59:a2:a1:cc:41:5c:0f:69:bf:9d:be:
         4b:ba:0a:76:43:76:b0:d5:27:c1:dd:28:a2:20:b3:64:68:c7:
         aa:9d:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----