Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138342e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3138342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          qfb3P5+91sC4hIKUwmPZjZRRlZOMhKzvPsB+IvhQ0Tg=
Subject key identifier:   E8:4C:DC:08:AE:1E:17:78:79:02:28:7A:65:BD:08:7B:9A:F7:54:FB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4D38FF71260E0FD78B3D065C0D40AB1EEF5FBD3C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:15 +0000
ROA not before:           Wed 29 Sep 2021 23:56:15 +0000
ROA not after:            Fri 30 Sep 2022 00:01:15 +0000
asID:                     17451
IP address blocks:        112.78.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:38:ff:71:26:0e:0f:d7:8b:3d:06:5c:0d:40:ab:1e:ef:5f:bd:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:15 2021 GMT
            Not After : Sep 30 00:01:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:c0:1b:e4:ab:b3:7c:e3:f1:d4:03:1d:f2:
                    58:0e:c2:bd:15:2e:30:d0:5d:c1:27:f9:cd:ff:1c:
                    85:8c:f1:3a:91:12:05:92:76:25:60:47:3d:ad:ad:
                    18:77:5c:03:ac:d9:ef:f1:aa:97:a4:1c:64:cf:da:
                    ff:68:f2:21:f6:31:60:3c:65:df:43:bf:f1:aa:f9:
                    10:f2:90:ed:9e:41:c8:74:58:04:49:6f:df:1f:f5:
                    9c:73:ea:0a:20:82:69:51:d4:3f:67:1e:78:37:aa:
                    cc:46:e6:f2:6b:a6:0b:10:c2:f9:9c:ca:c3:bb:f7:
                    e2:54:6c:31:46:77:6f:e3:32:f3:a6:d7:a5:98:35:
                    0b:bd:26:7d:b0:49:a5:61:84:31:54:8d:60:43:36:
                    b8:a5:eb:47:1f:89:23:ec:5b:b4:0d:a9:c2:c5:eb:
                    83:eb:a0:52:d7:aa:7a:ec:8a:95:ac:8f:d0:f4:d1:
                    02:e9:73:82:b8:62:98:71:cc:51:22:6e:ac:6b:6e:
                    5e:4d:d5:e7:35:c2:89:f3:ea:a4:b9:a5:2a:06:12:
                    b4:25:a8:53:ea:c8:fe:fe:11:6b:08:c3:b8:29:34:
                    9b:36:b6:88:88:1b:f4:9b:f5:d4:47:e5:e3:34:5e:
                    6a:a5:9c:bc:c9:b3:14:8a:01:3c:3f:5d:eb:be:cc:
                    75:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4C:DC:08:AE:1E:17:78:79:02:28:7A:65:BD:08:7B:9A:F7:54:FB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:d8:53:3e:98:d2:67:7d:38:50:f0:c0:d2:5d:73:8b:f6:b4:
         25:ed:61:d9:67:04:e4:d7:28:ce:1b:1d:32:8e:49:4a:ff:c1:
         2a:e2:77:32:40:d2:3b:a7:eb:6b:e5:c5:1a:d0:19:bd:22:c3:
         9c:62:a7:02:ac:75:22:20:cc:08:b4:d4:9d:06:ab:4c:9d:df:
         1d:9a:f5:31:c1:5b:51:da:c8:53:e0:fb:88:62:64:37:0c:5e:
         3b:c2:4c:b5:b0:ac:8d:8d:4e:e3:92:ef:bb:74:b2:41:48:e7:
         08:81:64:4a:99:6a:a2:e2:48:e3:fd:57:38:84:3d:2f:64:72:
         58:22:41:46:61:34:39:36:32:63:2e:c7:b7:32:be:c0:21:64:
         ed:d8:a6:de:7f:1b:18:ee:ea:ff:ee:d6:f7:a9:6b:1d:13:b6:
         0e:8a:73:a2:c2:b1:4f:cf:b1:3c:e5:af:f6:e0:d0:48:52:40:
         f3:69:b0:fd:3f:a1:13:9f:b2:f0:b3:81:db:06:5f:63:6c:da:
         e4:97:eb:e9:0b:5d:3c:fe:32:e7:af:b0:fb:a0:04:14:7a:dc:
         7c:a8:4b:e7:23:4f:ae:c8:ec:ef:a8:ec:6a:15:d9:4b:e8:78:
         9d:02:3c:01:81:49:32:0b:cb:04:68:d3:a8:b0:6c:01:92:0a:
         7f:a5:66:46
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUTTj/cSYOD9eLPQZcDUCrHu9fvTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MTVaFw0yMjA5MzAwMDAxMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDJBRUMwMUJFNEFCQjM3Q0Uz
RjFENDAzMURGMjU4MEVDMkJEMTUyRTMwRDA1REMxMjdGOUNERkYxQzg1OENGMTNB
OTExMjA1OTI3NjI1NjA0NzNEQURBRDE4Nzc1QzAzQUNEOUVGRjFBQTk3QTQxQzY0
Q0ZEQUZGNjhGMjIxRjYzMTYwM0M2NURGNDNCRkYxQUFGOTEwRjI5MEVEOUU0MUM4
NzQ1ODA0NDk2RkRGMUZGNTlDNzNFQTBBMjA4MjY5NTFENDNGNjcxRTc4MzdBQUND
NDZFNkYyNkJBNjBCMTBDMkY5OUNDQUMzQkJGN0UyNTQ2QzMxNDY3NzZGRTMzMkYz
QTZEN0E1OTgzNTBCQkQyNjdEQjA0OUE1NjE4NDMxNTQ4RDYwNDMzNkI4QTVFQjQ3
MUY4OTIzRUM1QkI0MERBOUMyQzVFQjgzRUJBMDUyRDdBQTdBRUM4QTk1QUM4RkQw
RjREMTAyRTk3MzgyQjg2Mjk4NzFDQzUxMjI2RUFDNkI2RTVFNERENUU3MzVDMjg5
RjNFQUE0QjlBNTJBMDYxMkI0MjVBODUzRUFDOEZFRkUxMTZCMDhDM0I4MjkzNDlC
MzZCNjg4ODgxQkY0OUJGNUQ0NDdFNUUzMzQ1RTZBQTU5Q0JDQzlCMzE0OEEwMTND
M0Y1REVCQkVDQzc1NDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0q7AG+Srs3zj8dQDHfJYDsK9FS4w0F3BJ/nN/xyFjPE6kRIFknYl
YEc9ra0Yd1wDrNnv8aqXpBxkz9r/aPIh9jFgPGXfQ7/xqvkQ8pDtnkHIdFgESW/f
H/Wcc+oKIIJpUdQ/Zx54N6rMRubya6YLEML5nMrDu/fiVGwxRndv4zLzptelmDUL
vSZ9sEmlYYQxVI1gQza4petHH4kj7Fu0DanCxeuD66BS16p67IqVrI/Q9NEC6XOC
uGKYccxRIm6sa25eTdXnNcKJ8+qkuaUqBhK0JahT6sj+/hFrCMO4KTSbNraIiBv0
m/XUR+XjNF5qpZy8ybMUigE8P13rvsx1SQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FOhM3AiuHhd4eQIoemW9CHua91T7MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzIyZTM3MzgyZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABwTrgwDQYJKoZIhvcNAQELBQADggEBADTYUz6Y0md9
OFDwwNJdc4v2tCXtYdlnBOTXKM4bHTKOSUr/wSridzJA0jun62vlxRrQGb0iw5xi
pwKsdSIgzAi01J0Gq0yd3x2a9THBW1HayFPg+4hiZDcMXjvCTLWwrI2NTuOS77t0
skFI5wiBZEqZaqLiSOP9VziEPS9kclgiQUZhNDk2MmMux7cyvsAhZO3Ypt5/Gxju
6v/u1vepax0Ttg6Kc6LCsU/PsTzlr/bg0EhSQPNpsP0/oROfsvCzgdsGX2Ns2uSX
6+kLXTz+MuevsPugBBR63HyoS+cjT67I7O+o7GoV2UvoeJ0CPAGBSTILywRo06iw
bAGSCn+lZkY=
-----END CERTIFICATE-----