Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3132382e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3132382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          q7wsGOYJAoFBcHcHYqO/UTpp3pEaDuetqWZgZHWWUdI=
Subject key identifier:   87:8A:9B:ED:56:98:FE:2F:98:C2:F9:1E:77:D9:E4:20:25:01:86:6C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       611F419CF44F35719BCEC167F6E345162D53AA4D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3132382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:50 +0000
ROA not before:           Wed 29 Sep 2021 23:55:50 +0000
ROA not after:            Fri 30 Sep 2022 00:00:50 +0000
asID:                     17451
IP address blocks:        112.78.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1f:41:9c:f4:4f:35:71:9b:ce:c1:67:f6:e3:45:16:2d:53:aa:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:50 2021 GMT
            Not After : Sep 30 00:00:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:de:56:58:da:a6:70:78:79:10:07:54:5f:b8:
                    04:3a:48:b9:f1:79:de:4a:c6:0c:23:fe:30:ba:a0:
                    75:fd:64:24:4d:63:18:ef:45:ca:a8:5a:84:e1:12:
                    f6:4e:fd:ec:08:de:8e:ab:4d:7a:e0:0a:ca:ad:8b:
                    11:36:a6:05:75:5c:66:fd:34:5c:6b:06:e1:13:92:
                    e5:4e:a4:11:50:fd:1f:16:0e:23:d9:07:e4:9b:f7:
                    08:39:ce:93:66:5f:8a:65:a8:42:19:2e:36:86:3d:
                    f4:16:82:15:da:86:b2:3c:12:40:79:1a:51:9a:f6:
                    24:8b:06:79:fc:a7:a7:c4:40:94:a6:bc:19:ba:6e:
                    f8:a3:db:1b:ab:60:38:bf:75:a3:af:db:b9:48:e3:
                    94:15:54:ca:61:ab:1c:1b:eb:11:dd:d9:85:15:c3:
                    ef:35:6d:75:de:af:6b:7c:86:1c:59:3a:b3:55:a8:
                    bf:0d:bb:5d:aa:67:3c:d5:db:0d:23:6d:9c:8a:29:
                    02:b9:76:c6:fe:ea:40:7e:7f:5e:6a:e8:1e:3d:34:
                    8b:eb:03:3a:c3:fb:b0:1a:3c:52:35:d7:02:be:02:
                    a8:88:69:fc:43:07:46:fa:b4:af:88:e9:2f:ba:a2:
                    ac:ab:99:98:40:34:8f:74:a7:f4:8c:c3:2e:aa:23:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:9B:ED:56:98:FE:2F:98:C2:F9:1E:77:D9:E4:20:25:01:86:6C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3132382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:fc:50:98:68:89:31:5b:60:11:77:2a:98:33:9f:45:3a:69:
         f5:65:df:7a:66:85:e7:60:7c:da:5b:63:4e:ad:ce:8f:3c:21:
         2a:ce:d0:18:1e:f1:9c:a9:81:26:20:cc:30:2e:bd:6c:10:2b:
         bb:b7:2f:bf:30:03:b5:b9:10:e5:78:11:5a:c7:bc:f2:1d:00:
         2c:aa:c9:37:dc:9c:bc:c1:e5:5d:2b:fe:fd:fa:33:a8:63:99:
         fc:b2:af:34:cf:dd:fc:88:77:dd:01:92:b4:b7:ca:11:e7:c8:
         a0:fe:87:56:a7:2a:23:ed:ac:6a:9f:38:ed:4d:2f:d4:cc:7c:
         c6:07:ff:aa:cd:dd:7f:b3:94:81:ef:55:48:e5:48:63:de:b1:
         86:7c:fc:04:59:60:80:69:8c:4a:1d:a1:2e:7a:78:03:ac:02:
         55:64:0a:74:2d:6d:4d:2d:fe:65:3a:8d:cd:7f:af:14:2f:42:
         07:47:4c:df:2e:82:c7:ba:48:65:24:b9:bc:29:5a:41:b0:8a:
         f9:e8:fc:d2:6a:b1:12:4d:08:50:21:c0:b2:06:6a:be:0e:72:
         15:bc:0b:37:c9:b0:37:b6:28:2c:77:8b:16:9b:18:80:4f:81:
         4c:9f:cd:57:b8:9a:90:9e:97:f3:49:79:ef:a3:af:61:a9:4c:
         95:db:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----