Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134332e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3134332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          r4Wqspj9EC0OAECRmltAQqZBbIWVQUEi0RzCIBfvYAk=
Subject key identifier:   EC:C2:DC:79:3E:1D:E6:87:15:F8:27:66:1E:33:1D:E2:50:87:FC:7C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4372D682CB9A383E0DEB22F406BF0B05DD8DEE3D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:20 +0000
ROA not before:           Wed 29 Sep 2021 23:56:20 +0000
ROA not after:            Fri 30 Sep 2022 00:01:20 +0000
asID:                     17451
IP address blocks:        112.78.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:72:d6:82:cb:9a:38:3e:0d:eb:22:f4:06:bf:0b:05:dd:8d:ee:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:20 2021 GMT
            Not After : Sep 30 00:01:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:5f:63:9b:3a:2c:07:b7:76:2f:c2:94:24:
                    c5:62:a5:bf:9e:22:99:76:3a:02:4e:02:bd:7f:0c:
                    a1:91:b7:8e:64:ec:eb:dc:d4:20:4a:38:6e:85:a3:
                    a3:31:87:61:3b:c7:11:99:0f:c1:88:de:0a:fa:88:
                    51:ae:d6:57:d9:b3:d3:ce:b3:b0:ca:19:29:73:f8:
                    1c:72:8c:df:e3:1a:c8:b7:c9:ec:a3:bb:30:bc:74:
                    9f:fc:cc:f0:92:6d:b5:90:80:97:6f:9c:e1:13:43:
                    67:de:07:d2:5e:d7:d4:d4:ba:de:01:d6:ba:1a:15:
                    3c:c0:e5:50:03:ae:38:a0:01:5a:80:d1:dc:99:8c:
                    8c:65:e4:ee:e6:20:86:90:62:a1:b7:8d:ab:fd:4d:
                    ca:d4:e4:f3:20:10:cc:29:b5:3c:69:5a:45:c3:d7:
                    24:c3:e1:46:57:90:41:1d:bf:e6:28:83:ca:8c:9c:
                    34:06:79:fe:bb:ab:7d:be:dd:5c:a2:f5:25:96:8d:
                    c6:e3:46:0f:2a:2c:16:0b:5e:97:e7:3c:1a:e4:f5:
                    9f:b2:6a:b6:bb:48:c6:35:86:29:98:2c:22:26:32:
                    ac:26:7c:be:e3:8a:0c:21:cb:56:6e:c7:d9:09:c9:
                    b2:cf:71:ce:3e:05:cb:52:0e:64:e9:a3:ba:c6:8c:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:DC:79:3E:1D:E6:87:15:F8:27:66:1E:33:1D:E2:50:87:FC:7C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:5a:e3:22:72:01:16:3a:96:1a:83:1c:c5:0e:6d:32:25:
         29:af:be:b5:d5:97:97:98:8a:b5:ca:df:11:d8:fa:d1:e2:31:
         75:e2:aa:e6:b5:77:db:7e:e1:e1:c6:e4:18:87:fc:7a:02:f9:
         78:86:25:2d:54:84:b2:3b:54:43:b3:a7:d5:74:71:22:1e:45:
         3b:04:0f:9b:71:c8:96:08:14:7b:fa:dd:17:ef:15:4e:03:92:
         20:d4:34:a1:51:94:60:5b:f3:c2:90:be:69:b1:71:b4:6b:d2:
         c9:38:c7:da:66:05:ba:20:94:04:89:6c:a1:d6:15:d4:d3:b7:
         d0:9e:f9:7c:8b:4e:1e:ac:52:80:17:e6:56:91:02:aa:aa:e8:
         5f:86:f9:50:22:60:3d:7e:52:9c:46:db:ee:5d:13:d4:f3:ec:
         62:8b:a3:a8:08:d2:c4:50:f1:d6:cb:7c:d0:b1:36:a2:50:f7:
         ee:78:88:7e:a8:1f:11:c1:9a:ee:fe:3b:93:6f:34:f7:0b:c8:
         1c:d6:a0:85:33:41:b6:e8:bc:32:90:7a:ee:ff:b5:c4:03:aa:
         0e:cb:0c:c5:d7:c0:73:a5:b8:c1:ba:28:93:cc:7e:c1:5a:cf:
         c0:9b:05:ee:62:47:c2:4a:f9:65:8c:ce:4c:14:f6:ae:3d:4c:
         a4:dd:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----