Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134362e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3134362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          sq7a6mbTRD9jKZynKbWmVmcYZnwEi7RvwPpMdxsh84g=
Subject key identifier:   8E:97:F2:6F:FE:78:A6:1E:8D:0D:FE:7C:0F:24:7A:D8:87:8D:18:0A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       46FFD83FE630F3ABAF0D8C43C1D5371A5DC70242
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:56 +0000
ROA not before:           Wed 29 Sep 2021 23:55:56 +0000
ROA not after:            Fri 30 Sep 2022 00:00:56 +0000
asID:                     17451
IP address blocks:        112.78.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ff:d8:3f:e6:30:f3:ab:af:0d:8c:43:c1:d5:37:1a:5d:c7:02:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:56 2021 GMT
            Not After : Sep 30 00:00:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:f7:dd:75:4b:c9:06:00:40:c4:0c:d5:b9:
                    8c:16:93:ce:17:12:ea:f0:48:d5:55:3a:a6:c0:4a:
                    46:82:6f:43:65:0a:96:b9:2e:69:bb:14:b5:a9:a5:
                    2e:42:e8:0e:5b:00:ad:d8:6b:c7:4d:ca:cd:7a:c7:
                    7a:c3:ff:1a:a9:e8:5b:0d:d7:65:ba:d8:67:6d:9b:
                    18:11:74:e2:8b:e7:2e:4c:45:8a:f5:13:32:a6:dd:
                    78:49:e0:a0:74:12:00:c4:41:d5:19:33:a4:fd:9b:
                    d3:84:58:c9:46:6e:68:b3:00:58:ab:e9:ef:cb:77:
                    79:92:e0:cf:3d:65:83:b6:a8:ed:5e:b4:6e:f6:d3:
                    60:e1:4f:59:6c:6d:b6:37:17:7d:a2:3d:a3:f8:89:
                    8c:9a:1a:a8:78:54:3d:06:1b:e4:4f:56:52:85:17:
                    c6:c8:df:6e:24:e3:d5:fb:15:4d:d2:ef:b5:3b:ac:
                    61:fd:f3:4c:9f:dc:03:dd:f7:36:0c:d8:a5:eb:01:
                    44:12:33:28:e0:46:fe:2a:aa:7f:9d:c6:11:b6:7e:
                    52:d0:8b:a6:2d:d1:e0:04:9a:85:04:fd:88:ec:62:
                    e2:a0:2b:d2:7a:c4:5c:71:0b:9c:17:f9:e3:5d:dd:
                    fd:84:0d:b4:21:cd:cc:86:d4:4a:e8:f5:aa:59:ad:
                    0f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:97:F2:6F:FE:78:A6:1E:8D:0D:FE:7C:0F:24:7A:D8:87:8D:18:0A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:11:f1:db:43:23:6c:0e:22:6d:ff:4f:40:55:d8:e0:64:f8:
         50:e5:50:f6:19:14:b6:d6:a4:90:08:e3:ca:df:9c:96:58:5e:
         32:59:48:d8:e6:51:c9:81:85:a5:67:76:07:95:65:d7:96:4a:
         a7:d5:25:2d:02:cb:5d:84:16:53:27:3b:11:34:95:ab:70:b7:
         8e:37:94:f5:e5:cd:cb:a2:b5:b1:be:86:69:95:6b:0e:6b:db:
         79:27:f1:02:9b:50:dd:8d:27:4e:fa:b9:e9:d6:4a:e7:ea:95:
         15:86:e2:e1:3a:23:50:f0:4f:df:46:46:90:fd:b6:a9:8d:d4:
         2c:28:36:5d:26:b0:a3:22:48:c9:89:5b:e2:39:e9:79:32:8b:
         c7:30:59:e6:5c:c7:85:d5:3b:d5:bd:5f:03:ef:16:d0:0f:2a:
         e7:e8:00:6b:39:7f:7e:6f:aa:4f:f6:fa:7a:13:13:de:55:99:
         89:f6:a8:be:ef:2c:3b:29:52:d6:6b:bd:b7:d6:f1:7c:60:2d:
         b9:e6:d0:57:17:a9:d6:a4:43:61:b0:45:b2:86:f7:3e:99:d3:
         bd:89:31:bd:92:32:f8:6f:40:96:71:15:a9:08:64:47:54:9b:
         93:61:75:18:c8:4e:20:93:e2:0e:4d:fe:43:d3:e2:1d:7d:32:
         e4:ec:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----