Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35342e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e35342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Chq9EvaUwDgyXuBKTiXvT4+iCJXOdoojQuGsPuFHEb0=
Subject key identifier:   16:1E:14:6C:E0:83:7C:E1:3A:ED:3E:30:EF:66:3D:C5:E8:48:8F:01
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       622BBF531FF77DB9FB0A41D446B9DF425D5B429A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:11 +0000
ROA not before:           Wed 29 Sep 2021 23:56:11 +0000
ROA not after:            Fri 30 Sep 2022 00:01:11 +0000
asID:                     17451
IP address blocks:        202.169.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2b:bf:53:1f:f7:7d:b9:fb:0a:41:d4:46:b9:df:42:5d:5b:42:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:11 2021 GMT
            Not After : Sep 30 00:01:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:21:ad:0a:b9:f7:20:80:54:57:fe:5f:5d:
                    c6:f9:1a:c5:7f:72:54:8f:fd:c5:d7:f1:bd:17:32:
                    85:24:b1:01:e8:5e:a5:28:e4:77:cf:9d:e4:7d:c9:
                    28:12:6d:16:c8:9b:93:03:4a:0f:ae:71:8c:08:af:
                    9f:0e:d8:7d:e6:2a:9c:f0:33:06:00:40:6a:9e:4f:
                    7c:0a:c5:95:2d:dd:ce:77:0e:18:10:aa:5b:50:69:
                    01:c6:d7:04:eb:59:63:c7:29:da:c1:69:4e:8c:60:
                    8a:e9:c6:1c:8f:55:6a:a8:3e:29:a8:26:5c:49:c3:
                    9c:15:2e:ce:35:ee:68:11:ee:50:65:3d:44:24:b4:
                    ca:b8:2f:16:d0:e3:92:4e:82:26:d6:fa:09:3c:72:
                    d2:7e:75:49:6d:ff:70:32:08:fa:72:22:c6:a6:91:
                    71:01:c1:c8:63:4a:82:d5:0e:f7:24:a4:af:46:25:
                    97:47:31:43:3d:40:24:1a:ab:d1:f8:7f:69:df:cc:
                    02:47:ac:6c:6d:cf:63:0b:33:f1:33:77:13:04:b2:
                    02:f3:62:f7:18:9d:28:fa:82:23:ef:eb:7d:5f:7b:
                    fc:0f:7d:50:6f:64:cf:75:f4:7b:e7:e9:35:1e:0b:
                    51:69:91:2f:9f:a7:14:26:db:41:7e:d9:7d:88:55:
                    3e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1E:14:6C:E0:83:7C:E1:3A:ED:3E:30:EF:66:3D:C5:E8:48:8F:01
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e35342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:a0:c2:fd:e4:e0:4a:f8:78:a4:2b:65:24:6f:50:db:11:41:
         24:a2:38:dd:d3:2c:fd:ce:30:e1:3e:6a:c9:fc:b4:3f:b4:65:
         28:2b:85:96:d4:e7:fa:0d:db:cf:26:c8:53:2e:66:44:fa:68:
         46:b4:15:55:ba:5a:a9:79:06:19:ed:5e:67:ec:34:e3:08:d2:
         d8:56:60:91:22:67:7e:9e:9b:61:ec:ec:f8:58:e5:92:f1:36:
         e1:17:d5:e2:64:55:cd:7b:31:db:11:97:36:2a:52:c8:ba:6c:
         59:56:61:83:b0:3e:47:61:3d:32:11:62:ef:ca:7d:92:16:b2:
         5f:d3:4a:96:2c:b6:e7:df:6c:60:dc:81:9c:37:0c:5a:fd:24:
         fa:c9:bc:f5:d2:d1:98:a8:61:c3:d0:e3:8c:68:0d:14:a1:09:
         97:9f:29:d8:a0:4b:0f:b8:81:86:2e:a3:d9:98:0f:c6:6d:4d:
         6d:65:62:d7:bf:a1:48:be:13:7c:85:f3:4e:4d:aa:3f:b6:92:
         41:9d:2f:55:5c:ee:2a:62:08:9f:ae:ac:44:60:17:8d:e9:95:
         76:44:cb:cf:97:ce:27:6b:cb:0f:1f:ca:fd:14:a5:47:e6:de:
         21:dd:69:e6:c1:cb:04:a8:d2:4b:2e:74:c2:8b:71:b8:ea:32:
         4e:ca:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----