Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138352e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3138352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          se1LnPLS5647rXhtfeChowMjmOsQvn7BKvxd90LcOXI=
Subject key identifier:   E3:78:F1:11:C7:97:60:49:B8:83:D0:3F:80:FA:4A:53:AC:E7:D7:31
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       463D2BA2FE5AE6930886BB131C22E1B2393CC4EE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:23 +0000
ROA not before:           Wed 29 Sep 2021 23:55:23 +0000
ROA not after:            Fri 30 Sep 2022 00:00:23 +0000
asID:                     17451
IP address blocks:        112.78.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3d:2b:a2:fe:5a:e6:93:08:86:bb:13:1c:22:e1:b2:39:3c:c4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:23 2021 GMT
            Not After : Sep 30 00:00:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:ed:87:02:3b:0a:14:da:fa:36:95:39:02:
                    89:c2:ba:d2:69:36:fd:01:0e:01:09:7c:7a:3b:60:
                    a0:7a:5b:38:33:2a:39:b7:74:40:4e:b6:39:b7:e6:
                    4c:bb:59:72:95:88:75:86:8c:f3:dc:33:64:46:45:
                    ab:e4:c6:dd:26:64:58:a9:e7:95:42:dd:68:eb:f8:
                    50:ab:6b:74:07:50:08:78:eb:97:4a:a4:53:ee:64:
                    9a:79:dc:ad:d0:65:ce:4a:fd:66:9f:3b:37:70:e2:
                    27:eb:71:6b:b7:1c:9a:23:e2:76:c2:cd:8b:7a:92:
                    df:ad:c7:ad:d9:1f:4a:8e:48:0d:d5:12:96:ed:bb:
                    42:af:c3:15:55:d9:c9:c2:e9:52:1e:5b:bb:ef:c7:
                    59:47:21:73:82:ed:eb:b2:ed:a9:8e:5d:76:9d:63:
                    e9:9d:11:86:ea:2c:3e:f7:42:4c:e9:91:f0:3e:4b:
                    a8:01:a1:93:0d:d3:54:a1:82:2a:d2:73:2b:87:bf:
                    d4:16:bd:dc:e5:84:eb:ef:ad:48:97:03:c7:a7:77:
                    40:88:95:ad:f2:99:ab:c1:a9:ef:1b:5e:3a:f5:c4:
                    96:03:47:3e:38:bb:44:c5:ac:b8:42:11:87:6f:6a:
                    37:49:64:67:37:50:e5:8c:94:0c:6f:40:87:df:93:
                    a2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:78:F1:11:C7:97:60:49:B8:83:D0:3F:80:FA:4A:53:AC:E7:D7:31
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:30:5c:e1:7c:39:d9:d4:38:25:f8:7d:07:89:41:ff:23:58:
         b2:10:35:a9:14:df:a5:84:a1:4d:ec:01:36:f9:79:fa:c4:f4:
         8f:e0:20:f2:4b:b2:27:44:ce:11:ae:ad:93:ee:ca:dd:f9:c8:
         b7:31:5c:28:c4:05:ef:f2:4d:c8:a8:f5:ee:40:d4:8e:1d:b6:
         3d:28:37:af:db:96:a3:98:6f:31:f8:4d:55:d3:f4:5d:c4:bc:
         21:2c:7e:45:0b:11:14:1e:41:0b:16:84:ca:e0:89:2b:49:09:
         f0:3c:58:29:35:41:48:12:2e:ae:d8:86:9c:41:d5:ae:53:32:
         d3:be:91:27:00:c1:23:c8:c9:2b:7c:c0:6e:06:3c:d2:57:6f:
         fa:dc:58:39:cf:de:6a:4f:de:c8:b8:e7:76:28:e0:c0:f9:7d:
         8a:d3:ec:cc:7d:af:91:7c:fc:25:c8:7d:16:77:59:46:a3:cb:
         ca:14:0d:9e:f0:50:c4:f7:72:b4:10:ca:3d:98:fd:1f:9e:60:
         eb:53:92:13:ff:67:bf:f2:db:8c:3a:34:c7:f2:61:22:2f:70:
         c6:79:7f:4a:da:fc:1f:b1:92:c8:6a:95:51:e2:18:99:a3:8e:
         59:de:42:b7:d8:09:92:88:3f:b4:56:58:83:f2:12:db:50:76:
         33:a1:83:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----