Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133312e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3133312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          nr7xge5TpyPyqIU+quKzVUnSz0BLQ+qHy8T3ZLW4Ux8=
Subject key identifier:   A5:FA:F5:E8:EE:BA:0E:1E:B0:73:E5:53:F8:E8:BE:75:E7:4B:BF:BB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       36E5B0A27411BDB03B9E5C891705620D3DCF2AD2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:05 +0000
ROA not before:           Wed 29 Sep 2021 23:56:05 +0000
ROA not after:            Fri 30 Sep 2022 00:01:05 +0000
asID:                     17451
IP address blocks:        112.78.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e5:b0:a2:74:11:bd:b0:3b:9e:5c:89:17:05:62:0d:3d:cf:2a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:05 2021 GMT
            Not After : Sep 30 00:01:05 2022 GMT
        Subject: CN=3082010A0282010100C6219E625FC73CFE5BBA13124EC3612BC6820ED9B8AF9D046D20E2B4338B88376020362F1F783FD04AE207851725E45F8CDAABAD9F3851095CF54FF716D1F25E4E6D8C4C6905CBEC36D0F9D72E1FCD96F7B7BC679929B4D337344AFC78758D96372F77011FC5CC2C4CCEAEB70EDA5B9968E9DAE0E6B5FE13DD9BB63B4E90FEBD4588EAFD3C0FD69312A624D9785166316F72F7EE06C5DECE543F068B59C18EC1C9AD4949F97AD1E00D68A2AC81676ADF5E70D129FFE005A53A22A8E11313146CFD904A775ABB3AC94E3ECE1B58C44120A1273B2AD5EC45ED206A0DD07AF417A14424A8BCF0F5B37067FC07017DB82F8C79CA57CC374E25C05F9E8D7A7D61EF230203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:9e:62:5f:c7:3c:fe:5b:ba:13:12:4e:c3:
                    61:2b:c6:82:0e:d9:b8:af:9d:04:6d:20:e2:b4:33:
                    8b:88:37:60:20:36:2f:1f:78:3f:d0:4a:e2:07:85:
                    17:25:e4:5f:8c:da:ab:ad:9f:38:51:09:5c:f5:4f:
                    f7:16:d1:f2:5e:4e:6d:8c:4c:69:05:cb:ec:36:d0:
                    f9:d7:2e:1f:cd:96:f7:b7:bc:67:99:29:b4:d3:37:
                    34:4a:fc:78:75:8d:96:37:2f:77:01:1f:c5:cc:2c:
                    4c:ce:ae:b7:0e:da:5b:99:68:e9:da:e0:e6:b5:fe:
                    13:dd:9b:b6:3b:4e:90:fe:bd:45:88:ea:fd:3c:0f:
                    d6:93:12:a6:24:d9:78:51:66:31:6f:72:f7:ee:06:
                    c5:de:ce:54:3f:06:8b:59:c1:8e:c1:c9:ad:49:49:
                    f9:7a:d1:e0:0d:68:a2:ac:81:67:6a:df:5e:70:d1:
                    29:ff:e0:05:a5:3a:22:a8:e1:13:13:14:6c:fd:90:
                    4a:77:5a:bb:3a:c9:4e:3e:ce:1b:58:c4:41:20:a1:
                    27:3b:2a:d5:ec:45:ed:20:6a:0d:d0:7a:f4:17:a1:
                    44:24:a8:bc:f0:f5:b3:70:67:fc:07:01:7d:b8:2f:
                    8c:79:ca:57:cc:37:4e:25:c0:5f:9e:8d:7a:7d:61:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FA:F5:E8:EE:BA:0E:1E:B0:73:E5:53:F8:E8:BE:75:E7:4B:BF:BB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:4e:36:59:15:34:ef:73:af:93:1f:fd:18:cb:31:53:25:e7:
         3e:e8:78:cd:af:c2:d7:b8:b5:3d:ff:ec:2e:10:f3:48:ee:2b:
         4c:3e:d2:20:90:1b:8c:72:1c:68:ac:bc:5c:2b:32:4f:6f:90:
         64:ec:23:04:d5:3f:c2:ae:b6:f5:12:f4:99:2e:65:a1:c2:05:
         5e:c8:0b:53:af:1b:aa:9c:03:65:e4:fa:ad:5f:db:85:4f:f6:
         bc:05:54:4b:92:94:f5:7e:9c:e2:ad:80:19:b8:bf:e0:c5:62:
         e4:3f:53:7f:f2:67:1c:91:c3:82:80:eb:97:6c:b8:d3:a8:20:
         51:8a:2b:d5:f9:96:9b:c8:a3:54:ed:7b:19:14:da:65:f1:46:
         65:e4:9a:90:85:de:f8:f0:6c:93:5c:05:18:6f:ea:ef:a6:a9:
         12:57:19:ad:ba:b8:aa:2a:13:5c:a9:f7:4b:51:9a:64:f0:aa:
         18:5b:7c:3d:f9:f1:60:73:19:c4:4d:fc:e6:07:74:d0:49:90:
         36:2f:e5:83:aa:33:ed:e9:2e:55:89:bd:dd:5c:cc:cd:7b:45:
         41:96:3e:82:26:28:97:e8:29:b1:ad:7c:75:80:bf:40:8e:04:
         59:dc:2e:bb:79:87:0c:46:32:a7:7b:cb:22:f5:b2:30:13:ec:
         da:36:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----