Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134382e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3134382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          +tp3SSd5YfBa6e2H0xjp23+vtOdwDBbY30JmqE+aLt0=
Subject key identifier:   6D:1A:14:9F:51:74:99:BD:4A:9C:59:C5:86:F7:77:51:21:7D:A5:55
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2C9341400991A78783BB04B16965B6099D678ACE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:05 +0000
ROA not before:           Wed 29 Sep 2021 23:55:05 +0000
ROA not after:            Fri 30 Sep 2022 00:00:05 +0000
asID:                     17451
IP address blocks:        112.78.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:93:41:40:09:91:a7:87:83:bb:04:b1:69:65:b6:09:9d:67:8a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:05 2021 GMT
            Not After : Sep 30 00:00:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:56:4f:66:a5:49:e5:f7:79:7e:dc:98:9e:
                    f2:8b:c0:96:05:81:cd:2e:b2:e0:a3:21:23:d0:b2:
                    5f:ca:39:e0:12:47:a1:e5:6d:0c:a3:bb:f1:f4:b7:
                    cb:ad:c4:96:47:cd:35:7c:a5:4b:77:9f:13:e6:81:
                    37:09:f0:ef:cc:e1:2b:96:b6:c7:f8:c8:a8:33:3a:
                    21:56:05:71:ac:ac:73:81:78:ad:81:77:55:82:c0:
                    85:c0:79:b9:5a:80:1a:3c:e3:cd:a6:6e:b9:b7:f3:
                    e5:fe:07:23:60:82:46:55:92:cf:dd:10:55:49:37:
                    00:3a:e3:c6:34:71:f8:d5:d9:63:cd:f3:76:3e:78:
                    d0:ca:cc:84:61:d3:bc:c6:a3:87:fd:19:47:0b:49:
                    c3:7e:90:3f:c3:05:1b:57:ca:e8:ec:8f:f0:35:62:
                    9e:e7:00:59:ce:de:3d:b6:01:17:b2:84:5f:77:24:
                    8f:ac:34:ab:bd:34:67:8a:77:4f:d0:90:9d:15:fe:
                    f5:d3:3c:1c:27:55:f0:94:bb:21:41:3c:97:2c:e2:
                    be:b8:20:a3:3c:48:34:fe:d9:e5:64:f6:51:1f:c4:
                    da:36:5b:ca:6f:56:c1:df:d3:fa:61:e9:bb:79:74:
                    d8:1e:f4:55:b7:56:6b:6b:6d:06:db:3a:56:03:8a:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1A:14:9F:51:74:99:BD:4A:9C:59:C5:86:F7:77:51:21:7D:A5:55
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b7:d7:96:5a:d6:e8:52:5f:e6:61:40:5f:3c:ff:9d:88:62:
         23:64:00:8f:fe:61:cb:08:dc:7c:c5:da:44:de:1b:19:17:b7:
         a4:8b:69:fc:12:13:62:10:41:f7:f1:7a:ca:e6:d3:11:8b:e4:
         f0:79:81:d1:13:fa:9c:ff:68:77:49:88:77:b9:81:28:ad:ae:
         f8:c3:b1:0b:30:24:b0:34:f3:9d:48:15:25:18:f9:31:67:36:
         91:ce:49:c4:85:fc:f1:9d:e5:2d:58:af:07:23:5c:a6:cc:54:
         65:63:2b:9a:81:fd:2e:6a:40:d9:4f:f0:f2:0a:ee:e1:ae:41:
         6a:fa:2c:4f:c8:79:b5:1c:ca:7a:87:15:3b:88:44:37:0d:34:
         7c:23:0e:38:45:80:02:38:6d:35:a4:41:ac:12:4f:90:81:6e:
         33:06:4f:99:a6:63:35:dd:90:17:af:53:3e:82:82:6c:11:d4:
         bb:5a:7b:50:ba:0c:5a:5a:cd:df:25:7a:a0:6e:c7:9b:75:61:
         f4:f4:62:3d:53:fe:71:a8:c4:d4:67:2b:0f:b3:c5:a7:eb:6f:
         b7:8d:fb:e7:68:35:04:5f:ff:54:9b:c5:7a:00:b9:1e:5c:94:
         53:20:e6:f0:7e:ee:79:db:db:67:f5:b2:31:92:88:11:ea:7e:
         4e:1b:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----