Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134352e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3134352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          oPF+qlNdzZFMm03yglGtTWIHaigzo+q1Mu0gfz+WKJM=
Subject key identifier:   70:D9:08:06:4B:2C:79:1A:95:9D:0B:FE:EE:CE:BC:1A:0B:EF:1C:16
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       46C4A7CDE9CA2F16663D893C0D498136C1BF929D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:58 +0000
ROA not before:           Wed 29 Sep 2021 23:55:58 +0000
ROA not after:            Fri 30 Sep 2022 00:00:58 +0000
asID:                     17451
IP address blocks:        112.78.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c4:a7:cd:e9:ca:2f:16:66:3d:89:3c:0d:49:81:36:c1:bf:92:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:58 2021 GMT
            Not After : Sep 30 00:00:58 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:db:86:e5:2c:c9:59:72:87:54:56:77:ac:
                    d5:a0:cb:39:61:6c:a1:22:16:b6:33:50:96:cd:1b:
                    b5:74:1d:29:d8:fc:fb:c8:31:b0:06:59:42:56:c8:
                    f7:60:b1:c6:41:d2:e0:9a:3e:b6:fb:6f:cc:f5:0e:
                    71:30:33:61:3c:a5:e8:ed:19:dd:d3:59:e7:d6:ce:
                    dc:ef:38:ac:74:2a:f6:bb:1a:ca:a9:89:18:9f:06:
                    4f:c7:8e:7e:8b:10:f1:13:f1:8d:10:b1:0a:e1:69:
                    9d:c7:8b:f7:6b:b2:28:c3:4d:7f:63:17:c1:2f:b7:
                    ed:2d:c8:0b:d0:8d:dd:48:e0:5f:4b:13:d9:03:dc:
                    3e:98:e4:55:26:a3:8d:12:75:42:06:3b:3c:dc:4e:
                    70:79:33:40:78:43:47:bd:38:ef:e1:61:d2:ae:10:
                    6a:b5:8a:97:47:a5:a3:11:bb:3e:76:64:d7:28:a4:
                    5a:8b:99:41:9c:d1:79:b6:7c:85:be:44:35:72:c4:
                    08:e6:a4:ea:f7:7f:de:26:a0:fd:52:c9:83:22:b6:
                    ac:49:16:04:41:f5:40:d8:70:d4:3a:48:be:9c:8c:
                    43:d5:1c:3e:ea:74:b9:44:0c:c5:8e:e0:97:24:56:
                    ce:eb:5f:10:ef:80:53:45:89:cd:ee:3f:e2:7f:bb:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D9:08:06:4B:2C:79:1A:95:9D:0B:FE:EE:CE:BC:1A:0B:EF:1C:16
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ce:f4:ee:c9:05:a3:06:57:16:47:43:11:96:cd:2b:83:0b:
         8c:e2:04:8c:6d:90:d5:3b:eb:b9:a8:e0:4a:bc:9f:ae:69:28:
         6a:61:d2:da:d4:e1:4c:f9:71:4f:ca:7f:8a:66:58:47:be:93:
         08:8f:cf:4c:bb:bd:04:80:87:b4:a9:02:19:b2:77:75:8d:8b:
         41:05:d2:08:34:7c:cc:8e:4f:68:df:65:c3:5d:d8:9b:75:92:
         b8:ad:be:b3:a8:36:e1:29:7f:5f:b8:6b:33:2f:fc:cc:06:d4:
         83:03:33:bd:c9:c8:5a:da:0e:f1:eb:ec:c5:95:96:ae:ea:e1:
         39:df:44:f5:ab:7f:c3:82:f0:0f:55:48:a3:ec:3e:8e:42:98:
         3c:0e:b7:78:ec:6c:ae:d8:df:a6:73:40:a1:97:6f:e8:cc:0d:
         86:51:8f:99:5f:ea:cc:a6:15:3a:cc:dc:d4:66:d6:c9:94:3f:
         10:33:e6:24:aa:d9:70:ab:00:38:5e:a5:34:a5:12:e8:42:d7:
         eb:da:fa:b0:99:64:1c:0a:4a:bf:85:46:f9:49:17:32:73:ac:
         2e:45:c7:17:56:30:0b:fe:64:fe:13:31:fb:0a:45:88:60:16:
         bb:0b:ba:b9:26:d4:84:6e:31:de:e6:05:a2:38:b4:fc:a6:e6:
         dd:55:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----