Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134342e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3134342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          UJBln2TJcyHRFl+WCKlVL4vADpx0hC+/a0g3G+2/tY0=
Subject key identifier:   07:DE:54:7D:7C:97:6B:15:92:32:93:79:BB:46:49:5D:88:2F:90:12
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2DE0EC06CA7F1D6510F1D77FAAD2E215ADD257EB
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 27 Jan 2022 06:32:59 +0000
ROA not before:           Thu 27 Jan 2022 06:27:59 +0000
ROA not after:            Fri 27 Jan 2023 06:32:59 +0000
asID:                     17451
IP address blocks:        112.78.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e0:ec:06:ca:7f:1d:65:10:f1:d7:7f:aa:d2:e2:15:ad:d2:57:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan 27 06:27:59 2022 GMT
            Not After : Jan 27 06:32:59 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:56:cb:e1:3b:61:dd:05:e1:26:b5:d7:7a:
                    ba:7f:46:48:e2:a5:56:3b:6a:32:bf:56:d3:5d:62:
                    0b:01:6a:20:71:df:30:25:f4:df:e2:86:7e:4a:6f:
                    c9:fe:87:fd:75:75:9c:d4:95:19:ea:89:6e:fe:89:
                    16:a3:fd:07:82:c3:d8:82:77:22:87:d3:bb:45:e3:
                    25:ce:b7:0c:81:11:66:04:0a:ca:b4:05:98:05:4c:
                    db:f8:90:2c:9c:85:3e:2d:30:7a:27:e6:02:1d:2d:
                    04:8a:41:30:d1:7e:98:6c:e3:7c:e8:ed:3d:0b:96:
                    48:c0:f4:73:9f:70:b1:d0:27:da:7b:02:eb:f1:dd:
                    13:75:9e:69:9b:d2:75:a7:7f:9b:c2:46:13:64:94:
                    76:6c:d0:27:15:85:22:58:9a:52:79:f7:83:43:8a:
                    ff:e6:b2:cc:f3:a5:e2:8e:c6:75:fd:43:47:d9:ff:
                    35:b9:0c:d4:86:b0:53:a5:05:84:25:e8:23:67:1f:
                    5e:c0:52:55:2e:5e:df:3c:98:da:d1:55:be:e5:97:
                    81:a8:15:bb:72:02:c3:8d:6c:2f:ac:44:a4:df:8c:
                    1f:03:a7:fe:62:92:7b:53:2b:ff:f3:c0:b4:cd:c2:
                    5b:71:c2:11:fb:17:38:11:ae:ed:1b:a2:2e:be:7c:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DE:54:7D:7C:97:6B:15:92:32:93:79:BB:46:49:5D:88:2F:90:12
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:77:ef:eb:fd:4e:7c:6c:0c:2d:71:12:bf:8d:c2:11:ae:37:
         8e:8c:e9:72:7f:49:97:a4:1a:9c:46:63:54:87:47:c3:7a:88:
         b6:46:a5:ad:52:e9:59:b6:6a:96:30:69:a1:3b:7f:49:5e:07:
         2f:77:79:d1:49:c0:84:99:9c:e8:94:a3:08:cb:08:66:08:53:
         43:42:f2:92:3f:e3:a7:b8:32:a2:31:2b:20:b5:e6:25:d9:94:
         fd:11:df:a0:cf:dd:0a:12:56:a8:8e:29:5b:25:fd:6f:9f:06:
         b6:6c:4e:9b:27:a0:87:9e:3b:71:b7:34:84:c4:b6:2e:db:e7:
         fb:b2:04:7e:51:6d:c6:69:cf:eb:c2:e4:52:30:71:f5:ff:d4:
         67:d1:56:b2:0a:c8:ec:ba:15:f2:63:3b:fd:31:32:f3:66:94:
         25:43:05:23:f6:d2:e6:0c:de:c6:4d:59:70:4e:57:c5:c5:a4:
         6a:e6:6f:15:a3:af:50:2d:ef:9a:96:70:ec:95:f6:1e:05:db:
         ff:69:50:0c:c3:66:60:0c:a2:f0:08:eb:71:09:33:7a:1a:08:
         4c:8c:a8:f7:99:8a:b7:85:1e:00:81:35:e6:a8:19:92:74:a7:
         1a:5e:0d:6c:8f:77:cc:f4:18:16:84:9b:37:d9:4b:0d:b3:c9:
         07:3f:2d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----