Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134312e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3134312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Wp/ZjZcejECM9MeIqb5QCkRb7k503qMPSemm19n9lp8=
Subject key identifier:   79:B8:1F:5D:CA:68:07:B8:39:33:02:19:F5:FE:42:C3:3A:C7:71:9B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       758942CC69B2DB86B29DBD632A5D46813F51B17C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:46 +0000
ROA not before:           Wed 29 Sep 2021 23:55:46 +0000
ROA not after:            Fri 30 Sep 2022 00:00:46 +0000
asID:                     17451
IP address blocks:        112.78.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:89:42:cc:69:b2:db:86:b2:9d:bd:63:2a:5d:46:81:3f:51:b1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:46 2021 GMT
            Not After : Sep 30 00:00:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7e:aa:7e:d8:a1:df:23:b2:92:0c:44:82:7f:
                    28:05:ac:ee:38:9c:ee:66:1b:b7:8d:b5:8c:53:57:
                    11:0c:25:a8:e0:16:e7:3c:92:e1:12:8d:75:cf:aa:
                    00:8e:e4:5c:8e:cd:95:c3:21:4e:8e:78:a2:7c:a5:
                    2e:23:fa:0f:2d:57:de:a6:6b:25:66:51:3c:a4:df:
                    bd:9c:94:b2:72:d9:e2:2a:d1:a1:24:d9:d2:59:74:
                    d4:5e:b7:b2:ca:75:34:88:10:7b:f0:ab:bc:53:54:
                    75:76:23:2f:4f:b7:2d:6d:e7:33:6e:76:06:75:13:
                    ee:fa:60:71:77:f7:69:fe:f7:cf:f0:02:c0:8c:9f:
                    10:a8:27:8b:b1:5c:62:45:3b:9a:81:e2:5b:d0:77:
                    73:80:27:de:ca:e5:13:9e:40:46:71:2b:d9:3b:b4:
                    4c:9c:1e:62:9a:e1:3d:11:58:c5:ff:07:b0:1a:92:
                    75:6e:e7:26:82:1b:41:83:d1:da:8c:9b:ad:a0:02:
                    eb:68:16:9f:7d:3b:0d:10:fe:e3:69:66:b9:43:bd:
                    82:3a:a9:99:62:c0:72:4a:43:10:55:f3:cf:5b:4f:
                    99:2f:43:7f:b0:b8:de:fc:b7:7b:a1:df:aa:a2:33:
                    b2:9c:65:79:26:2d:27:2f:c0:7f:0b:14:08:45:97:
                    a8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B8:1F:5D:CA:68:07:B8:39:33:02:19:F5:FE:42:C3:3A:C7:71:9B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:fb:6f:a7:9a:99:f8:8c:57:cf:f8:1c:06:bc:bf:76:2f:48:
         53:05:d8:3d:a1:ca:0c:1c:01:21:93:48:e3:ba:21:19:e9:5f:
         1d:e4:56:f9:42:3a:5c:6c:d7:ed:da:00:5a:4b:b1:18:7a:36:
         4e:42:99:a4:1e:ca:d7:a2:35:d3:c9:37:41:d4:ba:94:aa:c2:
         d2:81:92:94:0a:11:cf:ee:bc:7e:ac:9f:e7:ff:37:f9:ed:25:
         cf:a3:6b:4d:2c:6b:dc:22:94:0e:bc:0b:97:89:76:34:fe:ca:
         05:5b:81:b1:77:38:3e:2e:3d:36:f1:ec:a2:98:1a:3d:bf:1d:
         b2:00:1d:65:35:5b:f7:68:00:92:44:2b:48:c3:c6:03:09:9b:
         5e:7d:e1:56:7f:91:de:13:8d:5e:77:21:23:70:9d:46:34:47:
         76:ac:08:9f:f2:e6:c0:2f:ee:3b:2e:99:fb:1a:cd:e9:8b:42:
         6f:e0:25:e9:82:b0:6f:a8:66:0a:f8:6e:ca:53:c0:a6:9d:ff:
         46:3d:23:b3:ee:f3:60:a3:89:c3:ce:ab:a8:71:99:94:85:70:
         17:36:91:3c:bd:ac:b1:2a:69:25:37:db:68:3f:ff:42:75:19:
         ec:db:30:28:d6:4d:32:95:e1:a6:bc:7f:a8:98:f6:42:56:9c:
         4a:28:7f:e3
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUdYlCzGmy24aynb1jKl1GgT9RsXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDZaFw0yMjA5MzAwMDAwNDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUQ3RUFBN0VEOEExREYyM0Iy
OTIwQzQ0ODI3RjI4MDVBQ0VFMzg5Q0VFNjYxQkI3OERCNThDNTM1NzExMEMyNUE4
RTAxNkU3M0M5MkUxMTI4RDc1Q0ZBQTAwOEVFNDVDOEVDRDk1QzMyMTRFOEU3OEEy
N0NBNTJFMjNGQTBGMkQ1N0RFQTY2QjI1NjY1MTNDQTRERkJEOUM5NEIyNzJEOUUy
MkFEMUExMjREOUQyNTk3NEQ0NUVCN0IyQ0E3NTM0ODgxMDdCRjBBQkJDNTM1NDc1
NzYyMzJGNEZCNzJENkRFNzMzNkU3NjA2NzUxM0VFRkE2MDcxNzdGNzY5RkVGN0NG
RjAwMkMwOEM5RjEwQTgyNzhCQjE1QzYyNDUzQjlBODFFMjVCRDA3NzczODAyN0RF
Q0FFNTEzOUU0MDQ2NzEyQkQ5M0JCNDRDOUMxRTYyOUFFMTNEMTE1OEM1RkYwN0Iw
MUE5Mjc1NkVFNzI2ODIxQjQxODNEMURBOEM5QkFEQTAwMkVCNjgxNjlGN0QzQjBE
MTBGRUUzNjk2NkI5NDNCRDgyM0FBOTk5NjJDMDcyNEE0MzEwNTVGM0NGNUI0Rjk5
MkY0MzdGQjBCOERFRkNCNzdCQTFERkFBQTIzM0IyOUM2NTc5MjYyRDI3MkZDMDdG
MEIxNDA4NDU5N0E4MTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7X6qftih3yOykgxEgn8oBazuOJzuZhu3jbWMU1cRDCWo4BbnPJLh
Eo11z6oAjuRcjs2VwyFOjniifKUuI/oPLVfepmslZlE8pN+9nJSyctniKtGhJNnS
WXTUXreyynU0iBB78Ku8U1R1diMvT7ctbeczbnYGdRPu+mBxd/dp/vfP8ALAjJ8Q
qCeLsVxiRTuageJb0HdzgCfeyuUTnkBGcSvZO7RMnB5imuE9EVjF/wewGpJ1bucm
ghtBg9HajJutoALraBaffTsNEP7jaWa5Q72COqmZYsBySkMQVfPPW0+ZL0N/sLje
/Ld7od+qojOynGV5Ji0nL8B/CxQIRZeoEQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FHm4H13KaAe4OTMCGfX+QsM6x3GbMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzIyZTM3MzgyZTMxMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABwTo0wDQYJKoZIhvcNAQELBQADggEBAKn7b6eamfiM
V8/4HAa8v3YvSFMF2D2hygwcASGTSOO6IRnpXx3kVvlCOlxs1+3aAFpLsRh6Nk5C
maQeyteiNdPJN0HUupSqwtKBkpQKEc/uvH6sn+f/N/ntJc+ja00sa9wilA68C5eJ
djT+ygVbgbF3OD4uPTbx7KKYGj2/HbIAHWU1W/doAJJEK0jDxgMJm1594VZ/kd4T
jV53ISNwnUY0R3asCJ/y5sAv7jsumfsazemLQm/gJemCsG+oZgr4bspTwKad/0Y9
I7Pu82CjicPOq6hxmZSFcBc2kTy9rLEqaSU322g//0J1GezbMCjWTTKV4aa8f6iY
9kJWnEoof+M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org