Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137362e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3137362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          qjsgZXODY6iHfVjdp+pmpwhZ4Yghds/5lDQnnRZ1xcI=
Subject key identifier:   79:1D:E5:31:51:51:08:9C:46:DC:3A:C2:06:D6:22:7D:FD:01:4B:9B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       55C989C2DA014FF9B19F4011554B75AC0F6F688D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:08 +0000
ROA not before:           Wed 29 Sep 2021 23:55:08 +0000
ROA not after:            Fri 30 Sep 2022 00:00:08 +0000
asID:                     17451
IP address blocks:        112.78.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c9:89:c2:da:01:4f:f9:b1:9f:40:11:55:4b:75:ac:0f:6f:68:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:08 2021 GMT
            Not After : Sep 30 00:00:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1a:bd:15:2e:3f:06:a0:c0:ba:52:68:8f:bd:
                    9b:14:78:b0:dc:2f:9a:d3:14:21:59:cc:5f:bd:de:
                    5f:aa:f6:96:a8:b0:43:5a:67:7b:3c:ef:2d:fd:e1:
                    c9:ab:79:a0:7d:56:d5:51:24:84:07:98:6c:55:82:
                    5e:7b:79:8a:6e:eb:3c:94:82:ab:bc:5b:82:ff:26:
                    31:a0:08:ac:b0:b0:d3:90:27:43:74:90:ff:8b:e7:
                    d6:d0:7c:19:ba:7c:80:09:da:ac:a6:c0:53:51:03:
                    b8:3f:a7:8f:69:94:5a:fd:96:76:cb:e0:2f:ff:bf:
                    20:84:cc:30:ae:c4:3c:96:18:9e:b1:16:b1:a7:07:
                    3d:d0:a8:9b:9b:ef:b0:3e:65:7e:79:35:e8:b4:27:
                    39:bc:92:c8:57:a6:4e:17:93:c6:93:70:44:ce:65:
                    78:4b:fc:1a:c4:d7:23:87:cc:93:6a:26:3d:0a:f8:
                    c5:53:46:0d:da:c9:9c:d6:62:dd:50:80:9a:a3:a4:
                    37:cf:f8:d4:52:3b:2d:f7:74:ec:2b:4f:8d:02:05:
                    2f:45:25:ce:e9:f6:51:19:40:5f:58:4e:39:44:4c:
                    92:3e:e6:04:2d:71:49:6e:87:27:9e:58:4d:b7:64:
                    f2:36:11:28:41:91:3b:72:df:3c:5f:50:27:6d:95:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1D:E5:31:51:51:08:9C:46:DC:3A:C2:06:D6:22:7D:FD:01:4B:9B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:00:59:fe:16:bc:2d:d8:2c:7f:44:78:3c:55:40:89:9f:18:
         b6:b6:0d:6b:1f:43:00:d2:98:b1:55:a5:88:e5:b2:3f:9e:f3:
         af:4d:08:24:a3:a0:21:91:7b:c9:da:1f:8a:82:46:b0:3e:82:
         95:c6:66:fa:d6:be:61:2c:e6:9b:6e:70:1c:3e:c7:8f:a6:e6:
         08:0f:49:9e:d7:82:1d:2a:27:3f:39:cc:bc:81:c8:d3:a2:f4:
         da:06:8f:e1:5c:ff:82:0a:9c:90:30:47:48:74:10:e2:63:34:
         26:d5:b5:46:37:5b:ab:70:5f:a4:c3:0d:2b:5e:c4:f3:2b:f9:
         b8:9c:78:e2:fb:02:a1:7b:58:d7:23:47:a9:81:e4:8d:fb:76:
         ec:f6:a9:94:ea:bd:35:fa:0d:a1:b3:50:02:09:f4:88:9b:e1:
         c0:ce:af:6b:00:bb:24:20:70:80:18:6e:3f:fa:6d:12:1b:c3:
         fb:9f:63:b0:cf:f2:a6:16:8c:0e:a4:aa:95:31:f4:a0:5b:b3:
         26:3d:eb:8d:63:a5:ce:33:5a:f6:ae:8a:5d:4b:26:85:20:cc:
         57:9b:d5:15:d4:84:2b:0c:fe:ec:68:ba:f8:ff:2e:c9:32:eb:
         75:b2:18:09:ee:d9:0f:1b:74:e8:d3:4d:ad:dd:43:8a:fa:a9:
         80:ad:64:b3
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUVcmJwtoBT/mxn0ARVUt1rA9vaI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MDhaFw0yMjA5MzAwMDAwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjgxQUJEMTUyRTNGMDZBMEMw
QkE1MjY4OEZCRDlCMTQ3OEIwREMyRjlBRDMxNDIxNTlDQzVGQkRERTVGQUFGNjk2
QThCMDQzNUE2NzdCM0NFRjJERkRFMUM5QUI3OUEwN0Q1NkQ1NTEyNDg0MDc5ODZD
NTU4MjVFN0I3OThBNkVFQjNDOTQ4MkFCQkM1QjgyRkYyNjMxQTAwOEFDQjBCMEQz
OTAyNzQzNzQ5MEZGOEJFN0Q2RDA3QzE5QkE3QzgwMDlEQUFDQTZDMDUzNTEwM0I4
M0ZBNzhGNjk5NDVBRkQ5Njc2Q0JFMDJGRkZCRjIwODRDQzMwQUVDNDNDOTYxODlF
QjExNkIxQTcwNzNERDBBODlCOUJFRkIwM0U2NTdFNzkzNUU4QjQyNzM5QkM5MkM4
NTdBNjRFMTc5M0M2OTM3MDQ0Q0U2NTc4NEJGQzFBQzRENzIzODdDQzkzNkEyNjNE
MEFGOEM1NTM0NjBEREFDOTlDRDY2MkRENTA4MDlBQTNBNDM3Q0ZGOEQ0NTIzQjJE
Rjc3NEVDMkI0RjhEMDIwNTJGNDUyNUNFRTlGNjUxMTk0MDVGNTg0RTM5NDQ0Qzky
M0VFNjA0MkQ3MTQ5NkU4NzI3OUU1ODREQjc2NEYyMzYxMTI4NDE5MTNCNzJERjND
NUY1MDI3NkQ5NTdBMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA+Bq9FS4/BqDAulJoj72bFHiw3C+a0xQhWcxfvd5fqvaWqLBDWmd7
PO8t/eHJq3mgfVbVUSSEB5hsVYJee3mKbus8lIKrvFuC/yYxoAissLDTkCdDdJD/
i+fW0HwZunyACdqspsBTUQO4P6ePaZRa/ZZ2y+Av/78ghMwwrsQ8lhiesRaxpwc9
0Kibm++wPmV+eTXotCc5vJLIV6ZOF5PGk3BEzmV4S/waxNcjh8yTaiY9CvjFU0YN
2smc1mLdUICao6Q3z/jUUjst93TsK0+NAgUvRSXO6fZRGUBfWE45REySPuYELXFJ
bocnnlhNt2TyNhEoQZE7ct88X1AnbZV6GwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FHkd5TFRUQicRtw6wgbWIn39AUubMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzIyZTM3MzgyZTMxMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABwTrAwDQYJKoZIhvcNAQELBQADggEBABEAWf4WvC3Y
LH9EeDxVQImfGLa2DWsfQwDSmLFVpYjlsj+e869NCCSjoCGRe8naH4qCRrA+gpXG
ZvrWvmEs5ptucBw+x4+m5ggPSZ7Xgh0qJz85zLyByNOi9NoGj+Fc/4IKnJAwR0h0
EOJjNCbVtUY3W6twX6TDDStexPMr+biceOL7AqF7WNcjR6mB5I37duz2qZTqvTX6
DaGzUAIJ9Iib4cDOr2sAuyQgcIAYbj/6bRIbw/ufY7DP8qYWjA6kqpUx9KBbsyY9
641jpc4zWvauil1LJoUgzFeb1RXUhCsM/uxouvj/Lsky63WyGAnu2Q8bdOjTTa3d
Q4r6qYCtZLM=
-----END CERTIFICATE-----