Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137302e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3137302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          tAdHwNnvBlqRv18G6xd4RRt3b4wDmFER4PETSn7UeY8=
Subject key identifier:   93:0F:71:67:2C:E5:DC:45:3E:B9:20:4A:BC:F9:D7:FD:1D:F5:BA:96
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       78CB276979C30820E6089E0A1AA01F2583FE3937
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:13 +0000
ROA not before:           Wed 29 Sep 2021 23:55:13 +0000
ROA not after:            Fri 30 Sep 2022 00:00:13 +0000
asID:                     17451
IP address blocks:        112.78.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cb:27:69:79:c3:08:20:e6:08:9e:0a:1a:a0:1f:25:83:fe:39:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:13 2021 GMT
            Not After : Sep 30 00:00:13 2022 GMT
        Subject: CN=3082010A0282010100A70C3F7A41989839408234A862807468EA2F6101F6923B9F0914FB60A92F0D2BF9CD38A44CA2EE289F9BFCC332F4D1A2091309A42634B6B9C8260D9B37456B0C214C1706EAD7D141DB21BBA2A73B40E37280B13A4DA8ED7DC25AE30B1E4FF0E2BB7F8D539F73636E7730CB440DEBE3ADAC26E0070A9C8CEC9C57871EAA0A2473F101E898DB6E0A998DFEFD50D64910AB6A1920F4CAC910BBAC534F4ED7F0E2FE03B5124235EACBA2567580CFA14DE3098F4D6D479A477774E6F0F2645F2D1EBE9E223C9BA1763FFEA27A6974F14761210F10A231893B319CDBFBF2AB03DE2806379A1C7350AC589DCDC97886C1E1783CF42D070D0E2D0968BC1719BB9DD67B010203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:3f:7a:41:98:98:39:40:82:34:a8:62:80:
                    74:68:ea:2f:61:01:f6:92:3b:9f:09:14:fb:60:a9:
                    2f:0d:2b:f9:cd:38:a4:4c:a2:ee:28:9f:9b:fc:c3:
                    32:f4:d1:a2:09:13:09:a4:26:34:b6:b9:c8:26:0d:
                    9b:37:45:6b:0c:21:4c:17:06:ea:d7:d1:41:db:21:
                    bb:a2:a7:3b:40:e3:72:80:b1:3a:4d:a8:ed:7d:c2:
                    5a:e3:0b:1e:4f:f0:e2:bb:7f:8d:53:9f:73:63:6e:
                    77:30:cb:44:0d:eb:e3:ad:ac:26:e0:07:0a:9c:8c:
                    ec:9c:57:87:1e:aa:0a:24:73:f1:01:e8:98:db:6e:
                    0a:99:8d:fe:fd:50:d6:49:10:ab:6a:19:20:f4:ca:
                    c9:10:bb:ac:53:4f:4e:d7:f0:e2:fe:03:b5:12:42:
                    35:ea:cb:a2:56:75:80:cf:a1:4d:e3:09:8f:4d:6d:
                    47:9a:47:77:74:e6:f0:f2:64:5f:2d:1e:be:9e:22:
                    3c:9b:a1:76:3f:fe:a2:7a:69:74:f1:47:61:21:0f:
                    10:a2:31:89:3b:31:9c:db:fb:f2:ab:03:de:28:06:
                    37:9a:1c:73:50:ac:58:9d:cd:c9:78:86:c1:e1:78:
                    3c:f4:2d:07:0d:0e:2d:09:68:bc:17:19:bb:9d:d6:
                    7b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0F:71:67:2C:E5:DC:45:3E:B9:20:4A:BC:F9:D7:FD:1D:F5:BA:96
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:73:6b:f3:33:4a:df:8e:b5:41:e1:fc:54:a9:6a:c3:b7:9f:
         84:23:34:52:ed:d2:39:82:e2:2e:79:18:f8:47:b2:68:40:ab:
         83:41:d9:2d:8b:aa:b7:b2:15:4f:f5:ce:75:19:23:97:c5:0a:
         44:45:48:de:ce:bb:01:b9:71:22:2a:6f:8c:e3:54:f7:55:72:
         65:33:81:29:25:6b:26:e8:17:63:70:0c:26:25:66:9c:dc:f3:
         ff:2c:37:64:95:cf:a0:72:13:af:1d:32:c7:55:9a:58:b9:db:
         94:7c:3c:7d:9e:da:6d:0d:4f:a7:20:4a:f7:9e:a4:44:b1:b1:
         bb:17:69:ec:df:07:a3:53:8a:82:0a:ad:a7:82:98:53:48:2a:
         d3:58:95:a2:c5:8d:9b:c1:c3:87:6d:4b:a8:77:d5:ad:cf:5d:
         89:a5:e5:3b:8d:ea:bb:25:68:e8:32:14:69:a3:1f:0a:b5:5a:
         30:6b:e1:25:7e:b9:ce:53:b0:70:70:cb:df:99:8c:14:45:66:
         d3:a4:16:9d:5d:04:12:ba:40:0b:f7:a7:77:0b:83:84:08:5e:
         58:ca:49:07:69:97:91:04:1d:4c:cb:23:a5:a1:08:9a:c5:88:
         a0:cf:99:b4:84:56:f0:5d:cb:a1:2a:03:6e:89:d6:8a:04:29:
         38:3d:e3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----