Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133332e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3133332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          dVgFvLj5NagGsYepQ2+Yy4JP5sL9ZIJuPw9E5eVqbwk=
Subject key identifier:   DB:FD:AC:C9:63:73:DA:A0:72:FB:6F:FE:34:0F:B3:F1:0E:D5:97:AB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       41154B18C98B2CA1C7D77C03EB7C6E7216F0EA22
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:01 +0000
ROA not before:           Wed 29 Sep 2021 23:56:01 +0000
ROA not after:            Fri 30 Sep 2022 00:01:01 +0000
asID:                     17451
IP address blocks:        112.78.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:15:4b:18:c9:8b:2c:a1:c7:d7:7c:03:eb:7c:6e:72:16:f0:ea:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:01 2021 GMT
            Not After : Sep 30 00:01:01 2022 GMT
        Subject: CN=3082010A0282010100A61C25F25F8AC827D83E655E27765D54902C502F28A2363BB5A89C80F8AC6BC7CCCCA973C7330C0D20D09EAC9FF08F6A15F2FAF7701AB42890E137AC0C2145897722FAAEF65E341C995046174054A45290C228E78D231125D94E1EC2BCEF61F0C3193CDCE32812A6CC5BB2226E22AAF923A15FCC985402590FB7EFEE6090648538B7EF3A7A772A4EB32A267BE714379F40E7EED670BDF6CD3503B5C0EA86FADBBF66EBE727091CC27474DAF362BF3043372DC5B30E99DA7583B389E1CC5E19936F81040EA440ACA14E8EE311C57B39060FCAF30CA8DCD6C89F5942EB0C5BBE2AD6A687AC4E8A7E88F88828A3103ACD3D8F4E1ECC3320380F15E6262DA64F4FA30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:25:f2:5f:8a:c8:27:d8:3e:65:5e:27:76:
                    5d:54:90:2c:50:2f:28:a2:36:3b:b5:a8:9c:80:f8:
                    ac:6b:c7:cc:cc:a9:73:c7:33:0c:0d:20:d0:9e:ac:
                    9f:f0:8f:6a:15:f2:fa:f7:70:1a:b4:28:90:e1:37:
                    ac:0c:21:45:89:77:22:fa:ae:f6:5e:34:1c:99:50:
                    46:17:40:54:a4:52:90:c2:28:e7:8d:23:11:25:d9:
                    4e:1e:c2:bc:ef:61:f0:c3:19:3c:dc:e3:28:12:a6:
                    cc:5b:b2:22:6e:22:aa:f9:23:a1:5f:cc:98:54:02:
                    59:0f:b7:ef:ee:60:90:64:85:38:b7:ef:3a:7a:77:
                    2a:4e:b3:2a:26:7b:e7:14:37:9f:40:e7:ee:d6:70:
                    bd:f6:cd:35:03:b5:c0:ea:86:fa:db:bf:66:eb:e7:
                    27:09:1c:c2:74:74:da:f3:62:bf:30:43:37:2d:c5:
                    b3:0e:99:da:75:83:b3:89:e1:cc:5e:19:93:6f:81:
                    04:0e:a4:40:ac:a1:4e:8e:e3:11:c5:7b:39:06:0f:
                    ca:f3:0c:a8:dc:d6:c8:9f:59:42:eb:0c:5b:be:2a:
                    d6:a6:87:ac:4e:8a:7e:88:f8:88:28:a3:10:3a:cd:
                    3d:8f:4e:1e:cc:33:20:38:0f:15:e6:26:2d:a6:4f:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FD:AC:C9:63:73:DA:A0:72:FB:6F:FE:34:0F:B3:F1:0E:D5:97:AB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:15:ec:b5:f1:16:0b:a9:84:48:26:7a:d1:75:ee:0a:b5:ed:
         d0:d1:94:46:66:83:14:9e:02:08:cc:b9:9f:21:0b:d3:2c:29:
         9d:6d:cd:9c:8f:5e:1b:0e:d9:06:6c:64:b1:c1:d5:ca:b9:83:
         50:28:a7:ea:1f:45:fb:2b:de:2d:c3:62:de:bd:83:fa:10:04:
         46:7f:82:b3:33:b4:d6:5e:f1:36:bf:b6:66:2d:13:d8:74:37:
         7b:b2:30:14:4c:2a:fa:85:81:86:b3:ed:3c:bc:2f:52:95:9c:
         58:ed:c0:63:47:b0:52:a6:60:5e:b3:6e:ba:eb:c0:7d:98:3c:
         53:7a:80:ec:4d:1c:7a:8e:e8:69:5b:0e:55:1a:36:0f:af:c2:
         e6:90:c4:3e:e7:42:49:9c:ab:cc:44:24:d0:4f:1f:ce:79:3f:
         60:87:16:0a:86:93:46:21:65:d2:67:6b:c4:46:a7:44:54:4b:
         94:38:f4:9c:56:6d:78:d7:cb:8b:c8:0b:7b:55:50:21:bd:37:
         83:fe:fb:51:24:54:e8:5b:e8:a1:ec:11:b7:6e:32:d5:fe:34:
         58:c7:43:0b:97:86:fc:9f:a8:b6:db:fd:ed:15:40:ac:69:eb:
         1c:6b:94:df:60:d1:b0:5f:a3:bc:94:77:57:04:92:02:e9:0c:
         4a:d4:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----