Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138302e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3138302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          l0t08dqPx/FNMIqMhj8x3GyOcT7VeE1BtXqfgveSkME=
Subject key identifier:   79:A1:B6:DB:98:66:01:59:1B:3E:80:D7:B9:7A:56:12:99:03:23:9E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       214BD66D3E06D37CFECD5871389AE1116F6111BA
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:26 +0000
ROA not before:           Wed 29 Sep 2021 23:55:26 +0000
ROA not after:            Fri 30 Sep 2022 00:00:26 +0000
asID:                     17451
IP address blocks:        112.78.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4b:d6:6d:3e:06:d3:7c:fe:cd:58:71:38:9a:e1:11:6f:61:11:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:26 2021 GMT
            Not After : Sep 30 00:00:26 2022 GMT
        Subject: CN=3082010A0282010100A9A942F0A58DFE9A48F88290B0B942985D0F96E98C903B69E38695501CD7E9E069D1428889CC54A33D66CFBE13C7A9DC6888C23953A81BA6B6723E4796D9E8D063018A3DD97D60658839A598EC729DDE5F7377099205CB98982F812BEA21500D08528532743FAB51FE1D3531E83E6AFBFFFAD27736372B2995A00564E15D4D8A40CDE2F7876951282BFA29A3A9EA70330BCFC0D56F2F8D038BC26A6221319D0254D832562F60544057A7E285E961F60D319053518A14CFD89D83B8E1A35FC0AC6EF1419EAA41848AAF138BBD2FEC61A3072F25CC8BE84481C32AEA53F6148394583ADFF6D8D900554F23A33511B2DC3FE5987A8B9A4C637742A0128C08788E8F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:42:f0:a5:8d:fe:9a:48:f8:82:90:b0:b9:
                    42:98:5d:0f:96:e9:8c:90:3b:69:e3:86:95:50:1c:
                    d7:e9:e0:69:d1:42:88:89:cc:54:a3:3d:66:cf:be:
                    13:c7:a9:dc:68:88:c2:39:53:a8:1b:a6:b6:72:3e:
                    47:96:d9:e8:d0:63:01:8a:3d:d9:7d:60:65:88:39:
                    a5:98:ec:72:9d:de:5f:73:77:09:92:05:cb:98:98:
                    2f:81:2b:ea:21:50:0d:08:52:85:32:74:3f:ab:51:
                    fe:1d:35:31:e8:3e:6a:fb:ff:fa:d2:77:36:37:2b:
                    29:95:a0:05:64:e1:5d:4d:8a:40:cd:e2:f7:87:69:
                    51:28:2b:fa:29:a3:a9:ea:70:33:0b:cf:c0:d5:6f:
                    2f:8d:03:8b:c2:6a:62:21:31:9d:02:54:d8:32:56:
                    2f:60:54:40:57:a7:e2:85:e9:61:f6:0d:31:90:53:
                    51:8a:14:cf:d8:9d:83:b8:e1:a3:5f:c0:ac:6e:f1:
                    41:9e:aa:41:84:8a:af:13:8b:bd:2f:ec:61:a3:07:
                    2f:25:cc:8b:e8:44:81:c3:2a:ea:53:f6:14:83:94:
                    58:3a:df:f6:d8:d9:00:55:4f:23:a3:35:11:b2:dc:
                    3f:e5:98:7a:8b:9a:4c:63:77:42:a0:12:8c:08:78:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A1:B6:DB:98:66:01:59:1B:3E:80:D7:B9:7A:56:12:99:03:23:9E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:64:6a:5a:a8:56:3f:28:b0:07:1c:fc:06:c9:a6:5a:91:dc:
         11:fa:cc:34:5b:e8:2f:2b:57:ce:ca:c0:b1:ce:3c:aa:d3:ec:
         4b:b1:0b:c6:43:5e:78:0c:88:8c:f9:2f:f5:17:97:60:64:7b:
         fe:eb:d5:f0:ef:98:86:c0:47:bb:9c:3c:4b:ae:c1:af:4d:e3:
         7e:9a:dd:a8:b0:ca:95:86:22:9e:06:46:5f:5b:51:1c:cd:34:
         66:5c:a1:79:ed:00:71:43:1f:08:e4:f1:74:ac:13:75:53:bf:
         94:bc:fc:90:6b:7c:3b:fd:62:b0:4e:4f:f5:5c:52:fd:1d:75:
         67:ba:c3:5e:c2:98:62:35:06:79:46:07:cd:0b:e6:a3:e9:32:
         ab:96:e1:f6:38:d4:8b:a2:ff:ff:52:03:91:64:2b:ba:b4:aa:
         99:db:fe:2d:2c:53:c6:4a:18:82:1b:b3:f5:33:a6:8f:65:4f:
         6b:8b:ea:72:83:c9:2e:75:8f:22:84:ab:d0:83:70:94:60:13:
         53:22:7a:70:dd:f2:fb:b3:24:9a:c3:72:d2:9b:7c:77:de:f3:
         6f:ed:2a:e9:cb:f7:be:69:ce:7d:1c:41:b8:05:e5:8b:41:c2:
         45:c8:ed:56:61:23:9b:e3:44:40:53:dd:47:2d:51:fe:af:af:
         69:d7:a7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----