Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133362e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3133362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          S2XNmpIc3qJtB8aLsfUNW5p4kqpiThEzzsPXJmL0V44=
Subject key identifier:   AB:52:69:38:44:27:B1:D7:80:1D:4F:FF:62:EB:F5:E2:B6:D4:46:04
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       410C9294838562A41B6F5B8CDC6D683488FBBFEC
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:07 +0000
ROA not before:           Wed 29 Sep 2021 23:55:07 +0000
ROA not after:            Fri 30 Sep 2022 00:00:07 +0000
asID:                     17451
IP address blocks:        112.78.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0c:92:94:83:85:62:a4:1b:6f:5b:8c:dc:6d:68:34:88:fb:bf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:07 2021 GMT
            Not After : Sep 30 00:00:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:9c:51:49:ea:40:5c:94:2f:10:6a:b2:7d:
                    2c:b5:ad:df:38:f3:51:0c:58:88:55:4b:7c:c1:c2:
                    1e:52:3e:6d:1d:dd:62:b6:95:92:42:ae:1b:3e:32:
                    14:62:80:7f:e3:b7:32:16:aa:38:17:53:6a:95:96:
                    63:b3:96:89:48:27:80:44:8b:eb:b6:c0:36:27:2e:
                    0b:96:e8:74:61:b3:7b:72:2e:ff:24:9b:4a:a3:f0:
                    ac:fe:59:cb:39:05:3f:7f:9f:f0:a3:d9:88:8b:60:
                    24:4b:41:f7:22:3f:a9:47:3a:ac:d3:32:d4:ed:cc:
                    73:26:c8:dd:13:4d:a5:97:64:5a:d5:94:8e:c4:a1:
                    55:76:cd:82:97:4c:bf:a0:74:1b:6a:db:5c:3e:b7:
                    79:2f:1b:12:9c:3e:b2:c5:9b:aa:d0:a1:cc:42:51:
                    36:0e:1e:3d:32:43:26:a8:7d:43:17:f7:d2:d7:e3:
                    b5:59:80:3e:b2:e0:69:18:98:af:55:3c:a9:3a:b4:
                    45:90:be:d9:0f:e2:63:5c:25:e7:d0:c7:67:6b:4f:
                    5a:67:43:4e:7e:48:03:bc:f0:9d:17:2a:05:4e:09:
                    ec:b1:ca:f9:18:90:9c:7b:a3:ed:23:a4:79:38:ca:
                    fe:be:54:b4:4b:e1:98:a3:0e:a9:de:e5:f4:f3:e9:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:52:69:38:44:27:B1:D7:80:1D:4F:FF:62:EB:F5:E2:B6:D4:46:04
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:4c:47:61:ef:dc:18:80:e0:e2:0b:b3:6b:64:d9:15:67:d3:
         06:bd:63:c1:2d:3d:e9:d7:c7:10:6e:2f:97:d4:67:22:3c:c2:
         2f:d8:99:9b:4f:7d:b1:07:56:68:0f:74:7a:8f:93:b3:8d:93:
         70:ec:60:8b:25:8e:3d:92:7d:22:ca:ee:fd:bd:8f:62:2b:e6:
         c2:bd:ad:37:77:71:85:07:3f:ef:8d:10:f3:79:2f:60:a8:68:
         39:8c:bd:71:11:b8:5c:bd:79:96:21:72:05:8b:68:64:75:77:
         69:e8:30:55:51:03:a3:e8:d1:eb:f8:4d:ac:43:42:f6:32:9a:
         b9:11:26:a1:42:a8:c2:61:01:52:d9:69:de:dd:52:12:b9:4e:
         40:2d:bf:39:66:3d:b5:5f:a7:a3:b4:a4:3d:ec:cd:ae:c1:40:
         d7:df:b5:03:2a:f3:d8:c6:1b:13:fc:33:69:27:0f:20:11:4c:
         9c:ce:13:3a:d9:54:20:d9:65:92:b3:34:b7:43:56:2b:b2:95:
         01:3f:11:ea:7c:d1:45:4f:83:60:03:b9:86:72:6a:9b:d9:c4:
         96:a3:6c:5d:dd:74:6f:71:22:29:71:84:f7:a9:ce:bd:e8:0b:
         48:af:ce:2d:9b:7b:17:b1:73:26:f6:a8:e1:32:92:82:28:b9:
         59:41:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org