Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3139382e302f32342d3234203d3e203234323033.roa
File:                     3131322e3231352e3139382e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          O3AEIEavVjBspyL3WVVMw8Dtzl/INPNPpJMc+EGyceI=
Subject key identifier:   BE:70:34:F4:E6:AF:A4:D3:D4:87:B6:18:B8:E8:11:34:00:7D:0F:00
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       011561C34B53863886159FABCCC07046C208EEDC
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3139382e302f32342d3234203d3e203234323033.roa
Signing time:             Fri 10 Sep 2021 02:31:36 +0000
ROA not before:           Fri 10 Sep 2021 02:26:36 +0000
ROA not after:            Sat 10 Sep 2022 02:31:36 +0000
asID:                     24203
IP address blocks:        112.215.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:15:61:c3:4b:53:86:38:86:15:9f:ab:cc:c0:70:46:c2:08:ee:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Sep 10 02:26:36 2021 GMT
            Not After : Sep 10 02:31:36 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:60:50:fa:2e:af:59:12:71:13:cb:a2:b4:db:
                    33:30:97:bc:ba:83:ef:2e:91:7e:18:fe:26:b6:49:
                    8f:64:39:d8:3d:35:68:9c:68:b3:de:a6:b3:e1:87:
                    3c:7e:a2:d9:13:65:e8:92:e2:c6:3a:df:06:4d:ce:
                    f8:e5:eb:79:4f:f0:58:29:cc:59:8e:93:70:b8:a2:
                    cb:38:38:dd:8a:db:cf:21:5b:06:38:35:ed:6b:0d:
                    24:9b:0f:ab:2c:ec:49:f1:6a:e2:03:3b:6f:5f:1f:
                    d0:d3:63:fc:46:22:e9:70:ab:03:d6:fd:81:85:0d:
                    ef:be:e9:e9:6f:98:e8:71:ed:c0:9e:4d:38:c0:f6:
                    75:ed:cb:0e:db:c0:65:60:1f:d4:ce:64:65:a0:68:
                    62:fa:a0:4d:45:69:97:e2:84:12:9c:79:01:9f:74:
                    87:9e:c9:2b:c0:58:66:4f:26:9f:36:3d:08:85:e3:
                    ef:2c:64:32:5f:72:ee:85:5b:84:7c:41:26:e4:0e:
                    91:02:82:f5:89:92:df:6c:26:52:1c:21:53:ac:ec:
                    48:18:28:07:3b:50:71:c5:43:e5:ff:0e:7e:fd:2a:
                    98:9f:1a:44:c1:85:73:d8:dd:2a:5d:92:f9:a6:b8:
                    93:1b:6e:e6:d8:09:9f:09:98:cc:15:64:0f:cd:9a:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:70:34:F4:E6:AF:A4:D3:D4:87:B6:18:B8:E8:11:34:00:7D:0F:00
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e3139382e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.215.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:af:5b:2c:bd:75:62:dc:cf:8f:00:e8:44:82:b8:8f:b1:
         47:0a:0c:41:62:74:fe:cb:83:67:d1:36:66:c1:71:b2:f3:3a:
         e2:3c:88:ca:2f:52:63:28:c1:0e:21:88:2f:5a:44:67:b1:0a:
         fc:ae:13:43:b4:84:88:f7:84:b1:1c:49:dc:7c:f8:76:4f:60:
         f6:d8:c2:3a:f2:24:07:b5:ef:da:eb:23:a1:7f:5e:b7:55:c8:
         82:df:e2:df:e5:81:a8:4c:95:f3:ec:b2:84:7b:f0:12:c6:9e:
         fc:2b:b3:93:33:4f:ef:02:f0:74:a5:6b:ba:39:d5:f8:65:c6:
         24:82:b0:99:73:85:63:86:0e:3f:af:8c:c5:e8:7f:7a:d6:f2:
         86:42:a7:f2:87:c8:66:78:df:b9:68:7d:f2:0a:c0:c7:68:3a:
         5a:e3:8f:d4:f5:b0:bb:d8:cb:21:07:f0:9e:66:5e:b4:55:56:
         5e:f7:55:bb:23:27:6c:2f:10:3f:e3:19:82:f9:1a:c4:b6:14:
         d8:7c:86:62:64:4e:b9:6e:6d:7e:d0:bb:7c:64:fa:24:ab:90:
         66:c4:90:b9:d6:85:cb:38:8c:b2:0b:02:40:2f:3e:a0:8f:9d:
         5d:0b:9f:26:f0:05:85:f6:93:d0:a6:05:92:04:10:0d:4e:dd:
         52:42:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----