Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3132382e302f31382d3138203d3e203137343531.roa
File:                     3131322e37382e3132382e302f31382d3138203d3e203137343531.roa (raw, json)
Hash identifier:          RkT2a5M9L2hNKbdDRqTE28CwOsHHmo1+TIzf/YSz4ME=
Subject key identifier:   90:E9:C7:32:65:E1:A0:DC:9D:19:BE:55:47:F9:DA:CA:90:D2:73:C5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       592DA8E2E1E8704E2CC882606AA6F7BC8443F517
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3132382e302f31382d3138203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:19 +0000
ROA not before:           Wed 29 Sep 2021 23:55:19 +0000
ROA not after:            Fri 30 Sep 2022 00:00:19 +0000
asID:                     17451
IP address blocks:        112.78.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2d:a8:e2:e1:e8:70:4e:2c:c8:82:60:6a:a6:f7:bc:84:43:f5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:19 2021 GMT
            Not After : Sep 30 00:00:19 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:9a:75:e6:2f:a1:6e:6a:5e:c4:4c:51:eb:
                    88:32:0c:85:22:7d:6e:ef:16:7e:e7:a7:39:22:07:
                    1c:ff:d2:b2:f2:97:a6:7d:51:a8:3d:ef:77:c0:5c:
                    a1:39:92:a9:c1:39:08:81:89:07:f1:41:77:2c:3f:
                    dc:1a:68:e6:8b:94:b6:62:a6:cb:7b:26:8a:a1:8d:
                    17:ef:8d:09:47:6f:61:a6:d8:0c:16:61:b6:fe:1f:
                    14:7f:70:f5:eb:de:ba:ba:9a:21:46:0a:c4:81:c9:
                    03:ea:26:33:b1:03:e9:65:a0:b4:68:12:14:01:6e:
                    9e:06:1c:28:d6:7b:5a:75:27:9d:ee:77:b8:54:a6:
                    02:d3:e3:cb:25:8c:90:3f:77:ec:60:b4:7b:9b:29:
                    bb:79:67:69:51:16:a5:63:7c:21:c7:6a:3f:9b:04:
                    f6:fe:23:b2:be:cb:4c:16:82:f3:cd:69:8c:37:04:
                    31:3c:84:3b:e2:90:49:04:2f:b9:6f:3a:9a:51:c1:
                    0a:5c:27:74:92:16:82:95:21:0a:35:3d:a6:49:d9:
                    2c:98:6a:11:d8:46:27:47:49:94:dc:77:fb:18:f6:
                    d9:68:e5:43:0e:1e:e7:76:b6:ee:84:9c:f2:2b:a0:
                    65:ad:02:6d:80:a8:0a:63:b5:83:fe:2d:7c:74:28:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E9:C7:32:65:E1:A0:DC:9D:19:BE:55:47:F9:DA:CA:90:D2:73:C5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3132382e302f31382d3138203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2c:a1:06:76:a5:d6:10:b2:e8:cf:9d:f5:8e:ad:bc:fd:86:7a:
         d8:fe:05:96:d6:32:0f:bc:f0:ae:b7:52:ec:f8:42:ac:39:80:
         6b:71:a8:aa:71:3e:4b:86:e2:18:ee:a9:4e:98:c8:9d:c6:92:
         a0:01:98:8f:c2:ba:56:8d:88:c3:1a:78:f1:65:d7:ed:01:c8:
         c5:7b:08:1e:d8:e5:6e:11:d1:f4:55:42:ee:27:3f:75:15:59:
         77:2e:c4:be:25:ba:b9:21:e0:bd:f5:17:ea:17:de:0c:cf:e8:
         9e:2f:4d:df:b4:97:6c:65:bb:3b:e4:07:cf:42:28:15:19:3d:
         e1:63:c2:ae:e9:75:40:dc:5c:33:57:f1:bf:d2:18:28:bb:bd:
         c6:aa:d4:03:ea:6a:2d:be:08:e9:7b:43:fa:9a:b1:c9:b5:02:
         f1:14:fb:47:dc:19:a6:b9:56:68:31:5e:61:eb:ee:c5:a6:13:
         c7:f1:b5:60:63:28:d7:b2:cb:fd:21:d7:e7:57:e4:9a:a0:01:
         89:38:d0:cd:86:5e:1b:76:fa:5a:e5:dc:b4:69:83:21:06:6e:
         eb:18:1d:d4:03:c5:1b:0a:82:65:b9:ca:da:9e:16:3e:8a:ce:
         b4:fc:af:a9:d7:3a:1d:60:46:08:ed:18:af:29:c6:1c:74:81:
         82:40:4a:4f
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUWS2o4uHocE4syIJgaqb3vIRD9RcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTlaFw0yMjA5MzAwMDAwMTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjhFMTlBNzVFNjJGQTE2RTZB
NUVDNDRDNTFFQjg4MzIwQzg1MjI3RDZFRUYxNjdFRTdBNzM5MjIwNzFDRkZEMkIy
RjI5N0E2N0Q1MUE4M0RFRjc3QzA1Q0ExMzk5MkE5QzEzOTA4ODE4OTA3RjE0MTc3
MkMzRkRDMUE2OEU2OEI5NEI2NjJBNkNCN0IyNjhBQTE4RDE3RUY4RDA5NDc2RjYx
QTZEODBDMTY2MUI2RkUxRjE0N0Y3MEY1RUJERUJBQkE5QTIxNDYwQUM0ODFDOTAz
RUEyNjMzQjEwM0U5NjVBMEI0NjgxMjE0MDE2RTlFMDYxQzI4RDY3QjVBNzUyNzlE
RUU3N0I4NTRBNjAyRDNFM0NCMjU4QzkwM0Y3N0VDNjBCNDdCOUIyOUJCNzk2NzY5
NTExNkE1NjM3QzIxQzc2QTNGOUIwNEY2RkUyM0IyQkVDQjRDMTY4MkYzQ0Q2OThD
MzcwNDMxM0M4NDNCRTI5MDQ5MDQyRkI5NkYzQTlBNTFDMTBBNUMyNzc0OTIxNjgy
OTUyMTBBMzUzREE2NDlEOTJDOTg2QTExRDg0NjI3NDc0OTk0REM3N0ZCMThGNkQ5
NjhFNTQzMEUxRUU3NzZCNkVFODQ5Q0YyMkJBMDY1QUQwMjZEODBBODBBNjNCNTgz
RkUyRDdDNzQyOEE1NUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuOGadeYvoW5qXsRMUeuIMgyFIn1u7xZ+56c5Igcc/9Ky8pemfVGo
Pe93wFyhOZKpwTkIgYkH8UF3LD/cGmjmi5S2YqbLeyaKoY0X740JR29hptgMFmG2
/h8Uf3D16966upohRgrEgckD6iYzsQPpZaC0aBIUAW6eBhwo1ntadSed7ne4VKYC
0+PLJYyQP3fsYLR7mym7eWdpURalY3whx2o/mwT2/iOyvstMFoLzzWmMNwQxPIQ7
4pBJBC+5bzqaUcEKXCd0khaClSEKNT2mSdksmGoR2EYnR0mU3Hf7GPbZaOVDDh7n
drbuhJzyK6BlrQJtgKgKY7WD/i18dCilWwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FJDpxzJl4aDcnRm+VUf52sqQ0nPFMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzIyZTM3MzgyZTMxMzIzODJlMzAyZjMxMzgyZDMxMzgyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAZwToAwDQYJKoZIhvcNAQELBQADggEBACyhBnal1hCy
6M+d9Y6tvP2Getj+BZbWMg+88K63Uuz4Qqw5gGtxqKpxPkuG4hjuqU6YyJ3GkqAB
mI/CulaNiMMaePFl1+0ByMV7CB7Y5W4R0fRVQu4nP3UVWXcuxL4lurkh4L31F+oX
3gzP6J4vTd+0l2xluzvkB89CKBUZPeFjwq7pdUDcXDNX8b/SGCi7vcaq1APqai2+
COl7Q/qascm1AvEU+0fcGaa5VmgxXmHr7sWmE8fxtWBjKNeyy/0h1+dX5JqgAYk4
0M2GXht2+lrl3LRpgyEGbusYHdQDxRsKgmW5ytqeFj6KzrT8r6nXOh1gRgjtGK8p
xhx0gYJASk8=
-----END CERTIFICATE-----