Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36342e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e36342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          9rHZpYMjMI6o0AMH8TQw1ooqCHAZclfiWxNWdQPh+Lc=
Subject key identifier:   A0:7D:3E:7B:44:6C:6D:20:3A:AF:10:40:2E:B2:88:93:6A:70:A2:FF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4C864852722D8EF7F4FF1DAA181DF5C61035350D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:14 +0000
ROA not before:           Wed 29 Sep 2021 23:55:14 +0000
ROA not after:            Fri 30 Sep 2022 00:00:14 +0000
asID:                     17451
IP address blocks:        203.142.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:86:48:52:72:2d:8e:f7:f4:ff:1d:aa:18:1d:f5:c6:10:35:35:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:14 2021 GMT
            Not After : Sep 30 00:00:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:89:c8:96:d0:2c:b6:ef:28:1b:a4:e9:3f:
                    be:44:79:a6:f0:1e:80:46:15:cd:a6:ec:b3:c7:01:
                    f5:e7:4f:1d:55:e4:e3:d5:83:dc:04:fc:97:56:6c:
                    1c:2e:31:9a:9e:55:a7:29:17:f8:48:68:de:c2:cd:
                    64:f0:75:5e:31:0e:c7:ff:41:70:9e:bf:75:ea:9a:
                    48:91:73:ec:ef:18:99:55:dc:ac:2e:2c:b4:a3:13:
                    5c:b3:88:58:a0:64:39:22:70:10:c6:40:6e:10:d8:
                    98:26:b2:b9:6d:f2:21:8e:b7:9b:9a:2b:93:f9:38:
                    09:4f:63:ce:8a:93:14:c9:97:cb:cf:ea:c7:8f:1b:
                    31:60:c5:39:bd:51:92:b7:b7:4c:b9:bb:e7:33:80:
                    66:c0:f3:b3:a2:06:03:53:60:a9:64:0d:90:a9:db:
                    d0:b9:11:1f:b9:00:0b:4c:84:5b:27:98:73:19:b9:
                    a1:34:c4:cd:35:25:b6:91:36:20:5c:33:41:ec:4d:
                    b3:e7:65:c0:83:e6:93:14:c5:3f:d5:bc:fc:c2:14:
                    cf:86:d0:66:ed:19:9f:e6:f3:87:12:e2:f3:4c:45:
                    6d:90:7a:1a:37:1b:51:30:0b:79:23:9e:56:9d:17:
                    42:47:69:21:d3:11:72:5f:83:e5:f8:fb:d3:ba:ae:
                    2e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7D:3E:7B:44:6C:6D:20:3A:AF:10:40:2E:B2:88:93:6A:70:A2:FF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:8d:94:46:11:66:ee:5a:f1:82:d7:79:e2:b6:16:cf:04:9f:
         e4:2e:ae:73:aa:1d:58:33:c7:96:6d:eb:da:e1:3c:b2:96:43:
         19:7c:a9:d4:25:c9:15:98:a6:01:4d:c7:68:48:68:1a:9e:d2:
         1a:8b:bd:c3:7f:8a:f5:99:a1:a7:e7:59:02:85:de:46:a7:d2:
         bb:a5:b7:3a:a6:f8:f6:c5:8a:c3:cf:ce:03:be:a0:84:60:5a:
         77:1b:03:7e:b4:78:1f:a7:75:b9:57:04:4f:ed:fb:20:7d:cd:
         90:1b:34:9a:d5:56:52:cd:00:bc:a0:9a:a6:38:19:2a:83:05:
         c4:65:18:f9:ab:6b:e7:81:60:2a:cd:94:1d:e6:54:bc:c3:32:
         8d:6a:de:98:29:5b:99:dc:de:51:3e:1b:66:fe:34:8d:7c:35:
         07:1b:f4:59:35:27:cd:37:16:90:df:07:1a:87:6f:9b:07:8c:
         61:f8:60:52:ab:bd:23:ca:18:fd:dc:01:85:b0:e5:4d:80:bc:
         90:4a:20:52:09:d1:a0:b9:7a:23:e2:0f:37:1f:fc:df:0c:34:
         54:6d:13:08:23:a9:3a:45:dc:58:0f:92:48:03:40:2a:7b:24:
         06:9b:6b:7c:2c:de:70:d8:42:ec:de:62:7d:9b:09:45:0f:1d:
         f5:ed:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----