Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137352e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3137352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          +ia7by/FLgOEaq9c1g/R+bxb0L+m6HfS0X54vuom7jU=
Subject key identifier:   0C:B6:DE:38:BD:65:A4:8F:EB:2E:FC:8D:B5:65:D1:89:73:AC:13:FE
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0807A985ADA093F64F08B8E06198EC82E0DE1882
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:19 +0000
ROA not before:           Wed 29 Sep 2021 23:56:19 +0000
ROA not after:            Fri 30 Sep 2022 00:01:19 +0000
asID:                     17451
IP address blocks:        112.78.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:07:a9:85:ad:a0:93:f6:4f:08:b8:e0:61:98:ec:82:e0:de:18:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:19 2021 GMT
            Not After : Sep 30 00:01:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:c6:c9:34:61:45:87:86:7c:b8:34:00:e6:
                    e3:f8:42:b6:7e:e3:57:20:9f:f4:b3:70:58:a9:0f:
                    96:e7:74:74:f3:af:0d:d6:88:5c:85:6e:d4:8b:f4:
                    e9:ad:57:41:b2:f7:b6:e0:9a:94:fc:a3:ff:f0:03:
                    e9:4c:62:0d:9a:33:b7:60:eb:da:18:3d:b8:20:84:
                    a5:14:12:ca:74:7a:65:e4:10:cd:16:17:12:ec:2c:
                    4f:f5:f8:77:7d:d7:bc:f6:72:9a:4d:1e:98:78:6d:
                    46:e3:50:3a:64:4f:83:d4:bc:26:e0:af:af:63:c2:
                    32:71:fe:34:d4:99:e1:34:94:24:cc:d2:cf:13:ea:
                    d5:a4:79:f3:1d:11:4e:84:49:ac:a7:ff:e0:97:d7:
                    a0:d6:45:34:46:fa:d3:a6:f0:3e:a8:4f:d2:7f:16:
                    7a:25:12:72:8b:24:ab:4a:da:7d:c3:27:80:22:35:
                    4e:78:b0:bf:b5:44:f7:cf:45:25:eb:1e:dd:58:f9:
                    5d:00:85:53:7d:65:d5:93:0d:e4:aa:5b:b4:09:9c:
                    4b:13:9f:27:4b:a7:52:9f:69:92:7f:bf:e1:5f:d2:
                    fa:40:7d:db:0b:c8:ad:b7:2b:4e:9c:a7:90:14:36:
                    8b:f9:c5:44:8e:17:53:0c:79:71:61:88:1a:dd:cc:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:DE:38:BD:65:A4:8F:EB:2E:FC:8D:B5:65:D1:89:73:AC:13:FE
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:49:87:e3:e5:75:98:8e:72:1c:71:50:e3:9d:4c:4e:bf:ea:
         29:13:61:41:b8:1c:fc:d3:ab:2c:ae:38:db:7f:45:a1:c8:da:
         b0:1f:04:22:74:96:cc:1e:5f:51:cd:6e:3e:47:f8:a8:ca:95:
         9a:96:64:b5:8a:3e:f1:37:04:f9:c2:1e:f9:af:0c:4f:40:9c:
         72:2b:31:59:ba:50:d8:48:41:be:06:c5:8e:f3:92:76:db:e1:
         43:46:d2:fc:7a:bf:f6:ac:56:96:29:06:08:5d:10:59:0b:9d:
         cd:36:1a:74:71:2b:53:69:94:d0:53:b6:bb:7d:ad:bb:28:dd:
         e4:15:b9:36:80:b6:17:02:4a:ea:c8:50:b0:8f:31:b1:83:5e:
         75:90:70:1f:48:ae:1c:04:77:b8:8e:60:0e:b3:d2:17:dd:c4:
         f7:05:cf:8a:34:78:e7:49:5a:ee:3b:dc:db:a7:14:98:1a:63:
         2c:d6:f9:3f:d8:43:ad:38:50:c8:bc:8e:97:f9:04:8c:5d:4a:
         ec:06:47:a1:65:0d:9d:8b:40:40:f7:07:b4:9a:18:1a:6d:93:
         be:b4:a5:cf:e7:3f:3f:30:52:07:1d:60:2c:8c:e8:3e:fc:f6:
         4e:2d:f3:df:f4:22:62:a1:91:2b:aa:a3:9c:13:98:ae:8d:ae:
         b6:e8:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----