Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133322e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3133322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          3eRGt8crUMxCsQNXl/1+8zVPsPFv9xzcAGcueuqezRg=
Subject key identifier:   CD:5C:FF:EB:43:E0:F8:31:5D:A1:CC:7B:51:E1:E7:0E:94:42:46:13
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       187EB566ED74BC662DDDB9AEB10706AA1DF88130
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:51 +0000
ROA not before:           Wed 29 Sep 2021 23:55:51 +0000
ROA not after:            Fri 30 Sep 2022 00:00:51 +0000
asID:                     17451
IP address blocks:        112.78.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7e:b5:66:ed:74:bc:66:2d:dd:b9:ae:b1:07:06:aa:1d:f8:81:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:51 2021 GMT
            Not After : Sep 30 00:00:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:22:39:f4:a2:7a:4c:f7:27:b3:48:02:e9:
                    a4:49:19:69:95:4e:7f:e8:7b:12:47:1d:16:3b:fa:
                    ff:9a:aa:93:e5:fa:8b:73:e6:44:1b:b0:5f:eb:41:
                    a5:7c:2e:14:64:3d:80:d0:aa:81:0b:98:05:cc:53:
                    e6:37:1a:42:94:c2:15:b1:c8:59:bd:56:84:75:6d:
                    39:e1:66:7f:60:9b:42:ca:d4:ee:36:85:20:56:b1:
                    65:87:4d:c8:de:29:49:c6:64:cb:2e:cc:06:3e:08:
                    73:3d:b1:6a:a9:9d:f7:ac:15:21:15:48:3f:d4:e4:
                    b4:1b:c4:2a:39:a5:07:b4:8c:e0:34:75:8b:d2:f4:
                    b0:07:01:4d:fe:3a:e0:18:d3:c0:7c:19:fe:18:bc:
                    d9:d6:e5:fe:5e:c2:71:07:54:86:1b:81:4d:62:d1:
                    d6:4c:32:2b:ce:83:13:f6:e9:f7:1d:cc:b7:ae:8a:
                    0e:84:8c:63:7f:a8:8d:aa:26:79:e7:62:83:a1:08:
                    08:f6:3c:47:4b:7f:b9:ba:77:38:09:a0:8e:9e:76:
                    d7:e3:2b:30:dd:16:cc:72:f9:77:ce:7a:7f:7a:a9:
                    67:a1:db:fa:0a:7c:37:e5:f2:ee:6c:81:7d:74:01:
                    6d:33:0e:9b:13:ed:47:0e:bc:67:da:65:aa:d8:dd:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5C:FF:EB:43:E0:F8:31:5D:A1:CC:7B:51:E1:E7:0E:94:42:46:13
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4d:d9:79:15:8d:20:a2:2e:05:d6:36:c0:fe:92:7c:4d:49:
         90:8f:13:5a:a4:24:33:79:86:18:3c:50:36:ce:d4:12:2a:39:
         77:5f:58:2d:7f:ac:81:54:49:44:b9:76:55:ed:68:44:bc:26:
         8c:ad:20:11:7d:b2:02:f5:b7:b0:b6:38:78:4c:d2:d2:f7:b5:
         f9:70:ca:8b:fb:3e:84:91:39:45:0a:0b:16:c2:6f:9b:6c:cf:
         91:b6:b8:eb:ee:9e:82:be:79:97:d1:59:7c:3d:20:7d:b2:8f:
         fe:75:ce:96:58:7e:6b:fc:af:d8:9f:15:e9:50:9f:05:a3:4c:
         4f:7d:12:29:db:08:c5:0c:cd:1f:6f:ff:7e:d8:04:dd:76:df:
         15:5c:8c:ed:8b:91:03:3f:f6:c0:21:bf:45:23:f6:d4:81:2f:
         34:f0:ea:b6:ea:db:9a:e0:0a:1a:9b:0e:13:d7:bf:05:df:6f:
         7c:f7:2f:19:0b:7d:9f:7a:a8:83:98:88:90:6c:e6:c1:2b:89:
         33:1c:92:55:d1:b6:c4:4c:87:17:93:f6:fe:d0:94:3d:c2:b6:
         71:46:d5:55:67:5c:1f:36:c8:b6:da:27:3c:84:86:cb:13:ef:
         1a:8e:e5:6c:2f:05:93:90:46:4d:6b:c2:94:a4:dc:0a:da:c7:
         a9:c9:d2:93
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUGH61Zu10vGYt3bmusQcGqh34gTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTFaFw0yMjA5MzAwMDAwNTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjJDQzIyMzlGNEEyN0E0Q0Y3
MjdCMzQ4MDJFOUE0NDkxOTY5OTU0RTdGRTg3QjEyNDcxRDE2M0JGQUZGOUFBQTkz
RTVGQThCNzNFNjQ0MUJCMDVGRUI0MUE1N0MyRTE0NjQzRDgwRDBBQTgxMEI5ODA1
Q0M1M0U2MzcxQTQyOTRDMjE1QjFDODU5QkQ1Njg0NzU2RDM5RTE2NjdGNjA5QjQy
Q0FENEVFMzY4NTIwNTZCMTY1ODc0REM4REUyOTQ5QzY2NENCMkVDQzA2M0UwODcz
M0RCMTZBQTk5REY3QUMxNTIxMTU0ODNGRDRFNEI0MUJDNDJBMzlBNTA3QjQ4Q0Uw
MzQ3NThCRDJGNEIwMDcwMTRERkUzQUUwMThEM0MwN0MxOUZFMThCQ0Q5RDZFNUZF
NUVDMjcxMDc1NDg2MUI4MTRENjJEMUQ2NEMzMjJCQ0U4MzEzRjZFOUY3MURDQ0I3
QUU4QTBFODQ4QzYzN0ZBODhEQUEyNjc5RTc2MjgzQTEwODA4RjYzQzQ3NEI3RkI5
QkE3NzM4MDlBMDhFOUU3NkQ3RTMyQjMwREQxNkNDNzJGOTc3Q0U3QTdGN0FBOTY3
QTFEQkZBMEE3QzM3RTVGMkVFNkM4MTdENzQwMTZEMzMwRTlCMTNFRDQ3MEVCQzY3
REE2NUFBRDhEREM4MzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsswiOfSiekz3J7NIAumkSRlplU5/6HsSRx0WO/r/mqqT5fqLc+ZE
G7Bf60GlfC4UZD2A0KqBC5gFzFPmNxpClMIVschZvVaEdW054WZ/YJtCytTuNoUg
VrFlh03I3ilJxmTLLswGPghzPbFqqZ33rBUhFUg/1OS0G8QqOaUHtIzgNHWL0vSw
BwFN/jrgGNPAfBn+GLzZ1uX+XsJxB1SGG4FNYtHWTDIrzoMT9un3Hcy3rooOhIxj
f6iNqiZ552KDoQgI9jxHS3+5unc4CaCOnnbX4ysw3RbMcvl3znp/eqlnodv6Cnw3
5fLubIF9dAFtMw6bE+1HDrxn2mWq2N3IOQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FM1c/+tD4PgxXaHMe1Hh5w6UQkYTMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzIyZTM3MzgyZTMxMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABwToQwDQYJKoZIhvcNAQELBQADggEBAKZN2XkVjSCi
LgXWNsD+knxNSZCPE1qkJDN5hhg8UDbO1BIqOXdfWC1/rIFUSUS5dlXtaES8Joyt
IBF9sgL1t7C2OHhM0tL3tflwyov7PoSROUUKCxbCb5tsz5G2uOvunoK+eZfRWXw9
IH2yj/51zpZYfmv8r9ifFelQnwWjTE99EinbCMUMzR9v/37YBN123xVcjO2LkQM/
9sAhv0Uj9tSBLzTw6rbq25rgChqbDhPXvwXfb3z3LxkLfZ96qIOYiJBs5sEriTMc
klXRtsRMhxeT9v7QlD3CtnFG1VVnXB82yLbaJzyEhssT7xqO5WwvBZOQRk1rwpSk
3Arax6nJ0pM=
-----END CERTIFICATE-----