Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135332e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3135332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          O6dOYBmZDcekw9xvDlceFHmSXCYYSxWum7wLDQGeOuA=
Subject key identifier:   5F:93:61:F4:FF:BD:8F:DF:16:79:E7:BF:A9:67:7E:55:05:15:58:D9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       797C17CB2407938CEC6B05EC457C53DE1BFF6533
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:02 +0000
ROA not before:           Wed 29 Sep 2021 23:55:02 +0000
ROA not after:            Fri 30 Sep 2022 00:00:02 +0000
asID:                     17451
IP address blocks:        112.78.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7c:17:cb:24:07:93:8c:ec:6b:05:ec:45:7c:53:de:1b:ff:65:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:02 2021 GMT
            Not After : Sep 30 00:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:04:15:9b:a2:fe:9e:53:44:35:a1:8b:4b:
                    f6:49:f8:60:80:09:17:29:a6:1a:43:31:04:ef:93:
                    ce:ab:0e:3a:d3:d7:84:2e:6d:ef:ee:e8:ca:4f:92:
                    d9:2a:fc:f7:ec:72:9d:4a:07:d7:d6:98:0f:81:32:
                    a1:a4:2a:76:74:08:c4:df:5b:7f:5b:b3:55:22:ea:
                    ea:d0:4b:6b:2c:26:ab:59:28:d3:63:93:b7:db:0b:
                    96:6b:9a:1a:e8:e0:06:e5:15:3b:f8:86:f2:a5:84:
                    42:bb:4a:91:26:fe:ea:6a:74:23:45:bd:56:63:09:
                    0f:8f:dc:9f:c9:84:d3:61:38:74:85:7f:fc:a5:24:
                    53:bc:47:3c:52:9b:9a:d1:f4:26:46:64:97:86:d7:
                    48:02:ef:52:a6:02:76:9f:ba:5c:e0:7d:0c:e3:1d:
                    58:7b:65:16:4e:0c:7e:6b:5e:25:95:e9:4f:68:b6:
                    7f:d7:84:96:00:71:df:71:91:31:06:ac:8f:ce:ea:
                    2a:ec:2c:ee:60:30:9b:11:14:bc:55:ae:15:ea:45:
                    c4:0b:d1:d3:2d:41:45:7d:e8:3c:45:c0:ec:e0:3a:
                    4a:eb:73:f4:37:dc:9e:8d:3f:a5:67:a5:39:ff:63:
                    eb:09:7a:48:b0:be:55:41:7f:fe:da:42:30:12:e4:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:61:F4:FF:BD:8F:DF:16:79:E7:BF:A9:67:7E:55:05:15:58:D9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:6a:bd:69:3d:80:6e:b7:06:37:76:31:92:e6:fb:94:45:be:
         50:55:67:f8:f0:b2:11:33:21:98:a9:70:c9:34:2d:88:57:3c:
         e4:8a:b6:e9:9b:e6:45:c0:14:e4:04:56:88:11:cb:74:90:1e:
         b8:66:e9:48:40:68:b2:dd:10:0a:93:8f:61:71:c7:cc:fa:81:
         fe:e0:3f:17:a8:32:71:a7:ed:9b:46:2b:db:08:f6:ce:43:91:
         b5:ba:c6:99:76:2e:66:51:ff:49:be:ef:3b:ff:04:76:ad:78:
         d9:9f:4a:22:02:64:b7:22:70:c9:9d:e9:55:d3:f2:85:8a:6f:
         00:eb:f8:62:3b:a0:ea:b1:22:a4:97:41:44:1b:32:c2:52:1e:
         80:f1:14:92:34:d7:c3:f5:c8:2b:4a:42:3e:c4:66:b7:2d:6d:
         44:a2:c1:a7:24:89:4f:5b:6b:6a:df:d8:53:d2:67:9c:e0:76:
         ca:69:98:b0:5f:dd:9e:37:45:6d:86:6c:d2:78:1f:b3:0a:dc:
         a9:ab:ab:70:bc:af:28:21:e7:42:57:88:d3:1c:d4:57:35:11:
         ca:79:9e:be:ca:b8:86:e1:ff:2b:67:fb:a3:88:b6:fd:e8:83:
         ee:5e:c3:c7:ee:98:79:8e:4a:90:6e:eb:50:06:98:7a:18:08:
         6e:e9:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----